Already dealing with a fraud incident? Get help now →

You've been defrauded. Here's how we help you respond.

Money already moved? Here's what to do in the next hour.

A payment went to the wrong account, and you need to know what happened, how it happened, and what to do next — starting now. We review the evidence inside your systems, tell you plainly what we find, and get you talking to your bank and the right authorities today, not next week.

Request an intake call →

If this is happening right now
  • Don't delete anything. The original emails — with full headers — matter more than screenshots.
  • Don't let anyone "clean up" mailboxes.
  • If money has already moved, call your bank's fraud department immediately.
  • Report it to the Canadian Anti-Fraud Centre (1-888-495-8501) and your local police.
  • Don't act on a banking-detail change by email alone. Verify by phone, using a number you already had — not one in the email.
What we do

A clear, plain-language account of what happened.

  • Evidence-preservation guidance from the first call — what to keep, what not to touch
  • Fraudulent email header analysis
  • Payment-change timeline reconstruction
  • Microsoft 365 review of the mailboxes involved: sign-in activity, audit logs, message trace, mailbox and forwarding rules, connected-app permissions, multi-factor authentication status
  • Comparison against the vendor's side of the conversation, where available
  • A written report: what we found, what it most likely means, what's still exposed, what to fix
Where we fit

We review the systems. We know who to call for the rest.

How we're scoped: We reconstruct what happened in your systems and tell you plainly what it means. If the evidence needs forensic disk imaging or litigation-grade expert testimony, we already know which specialists to call — and we'll make that referral immediately, not after wasting your time.
Pricing

A fixed fee, scoped to your situation.

Incident Response & Payment Fraud AssessmentStarting at $1,250 CAD

Fixed fee. The engagement is an M365/email evidence review, a written plain-language report, and coordination with your bank, IT provider, and insurer. Cases requiring full digital forensics are referred to a specialist partner. Scoped after a short intake call — most assessments run under 10 hours. Requires written authorization before we access any account or system.

Talk to PrivaCore

Request an intake call.

Tell us what happened and we'll respond as quickly as we can — usually the same business day. You'll speak directly with PrivaCore about the immediate next steps.

Request an intake call →
info@privacoregroup.com 604-341-1651