Friday, November 21, 2025

The holiday and year-end season are one of the busiest times for Real Estate Professionals and one of the most active periods for cybercriminals.

With increased travel, higher transaction volumes, year-end financial activity, and the rush of online shopping, scammers use this time to exploit distraction and urgency.

This edition of GVR Cyber Watch (formerly CISO Corner) outlines the top threats happening right now and the steps you can take to protect yourself and your clients.

Ransomware: A major holiday and new-year risk

Ransomware attacks increase sharply from December through February. These attacks typically begin with a deceptive email and can disrupt business operations by locking files or stealing sensitive data.

Current trends

  • Criminals threaten to leak stolen files to force payment
  • AI-generated phishing emails appear more authentic than ever
  • Attacks often occur during holidays or reduced staffing periods

Preventative steps

  • Back up important files in a secure, separate location
  • Be cautious with unexpected attachments or links
  • Ensure devices and software are up to date before holiday closures
  • Report anything suspicious immediately so action can be taken quickly

Helpful references

Wire fraud: The most costly threat in real estate

Wire fraud continues to be the most financially damaging scam targeting REALTORS®, clients, conveyancers, and law offices. Attackers impersonate trusted parties and attempt to redirect deposits or closing funds.

Current tactics

  • Fake “updated wire instructions” sent near closing dates
  • Calls or messages using AI-generated client voices
  • Emails referencing “year-end totals” or “revised deposits”

Preventative steps

  • Confirm wire instructions by phone using a known, trusted number
  • Warn clients early that wire instructions never change during a transaction
  • Use secure, branded communication channels when sharing sensitive information
  • Treat last-minute financial requests with caution

Helpful References

Holiday and year-end scams targeting Canadians

The holiday season brings a spike in impersonation scams and fraudulent messages aimed at Realtors, clients, and businesses.

Scams happening now

  • CRA tax scams demanding payment or personal information
  • Fake licensing or insurance renewal emails
  • Charity impersonation scams with fraudulent donation links
  • Gift-card scams posing as office leadership
  • Delivery or shipping phishing messages tied to online shopping

Preventative steps

  • Go directly to official websites instead of clicking email links
  • Never send payment or personal details in response to unexpected messages
  • Verify charities using CRA’s official directory
    https://www.canada.ca/en/services/taxes/charities.html
  • Be cautious of emails asking for urgent gift card purchases
  • Delete unsolicited delivery notifications and check your accounts manually

Helpful Reference

Privacy, AI, and data protection: Important reminders

Canada continues improving guidance around privacy, data handling, and responsible use of digital tools. Realtors handle sensitive client information daily, making safe practices essential.

Practical takeaways

  • Avoid emailing personal information when possible
  • Do not paste client information into AI tools or online forms
  • Use secure, official platforms for signing documents or collecting data
  • Update devices and enable screen locks, especially before travel

Preventative steps

  • Use strong, unique passwords and enable multi-factor authentication
  • Store documents in secure systems rather than email attachments
  • Ensure laptops and phones are encrypted and updated

Helpful reference

Year-End Cyber Safety Checklist

A practical list for Realtors and their clients to share:

✔ Confirm payment instructions by calling a known number

✔ Use secure, official platforms for documents and signatures

✔ Update devices before traveling

✔ Treat unexpected or urgent requests with caution

✔ Understand CRA, licensing, and insurance scams

✔ Avoid clicking links in delivery notifications

✔ Slow down and verify anything unusual

Helpful links

Ken Allison
Chief Information Security Officer
Greater Vancouver REALTORS®