In short: three checks before money moves
- Confirm every payment change by calling a number you already had
- Have two people approve every new payee
- Make it safe to slow a payment down to check
New data · Statistics Canada
Scams and fraud now reach more than half of impacted businesses
Four of the methods of attack reported by Canadian businesses impacted by a cyber incident in 2025, from the latest release of Statistics Canada's cybercrime survey.
The data
| Method of attack | Share (%) | Note |
|---|---|---|
| Scams and fraud | 55 | Up from 50% in 2023 and 44% in 2021, the only method in Statistics Canada's chart to rise since 2023. |
| Identity theft | 28 | Down from 31% in 2023. |
| Exploited vulnerabilities | 23 | Weaknesses in software, hardware or networks. Down from 25% in 2023. |
| Ransomware | 8 | Down from 13% in 2023, and a far smaller share than scams and fraud. |
Businesses with 10 or more employees, excluding public administration. The chart also shows password cracking (17%) and other malicious software (15%). A business could report more than one method, so the shares add to more than 100%.
Adapted from Statistics Canada, Canadian Survey of Cyber Security and Cybercrime, 2025 (released Oct. 21, 2026). This does not constitute an endorsement by Statistics Canada of this product.
Three checks against payment fraud
- Call back on a known number. Confirm any change to payment or banking details using a number you already had.
- Two people approve new payees. Ask a second person to approve each new payee or change of bank details, so one person alone cannot redirect a payment.
- Make slowing down safe. Tell staff and volunteers that pausing a payment to check it is always welcome.
Sources
- Impact of cybercrime on Canadian businesses, 2025 (The Daily), Statistics Canada. Read on .