
SCARS Institute’s Encyclopedia of Scams™ Published Continuously for 25 Years

Scattered Canary – The Evolution Of A West African Cybercriminal Organization
The Evolution and Inner Workings of a West African
Cybercriminal Startup Turned BEC Enterprise
An Agari Special Report
Scattered Canary – A West African Criminal Enterprise
These scammers have ripped off as much as $36B in unemployment benefits in 2020 alone!
In a first, Agari has cataloged the evolution of a Nigerian cybercriminal organization from its emergence as a one-man shop into a powerful business email compromise (BEC) enterprise employing dozens of threat actors.
An Agari Threat Actor Dosier
The following is copyright © 2019 Agary, and is presented to expand awareness of this criminal enterprise and to help victims understand the scope of organizational growth in West African scamming. We greatly appreciate their courtesy in being able to display their work unchanged here.
From the Scattered Canary Dosier Executive Summary
BEC has continued to grow, taking the number one spot for greatest financial losses from Internet crime. In a recent report, the FBI’s Internet Crime Complaint Center (IC3) reported that more than 20,000 businesses lost nearly $1.3 billion to BEC attacks in 2018. Globally, BEC attacks have cost more than $13 billion in losses over the past five years.
But with the West African gang we’ve named Scattered Canary, we have a deeper look at how business email compromise is connected to the rest of the cybercrime. With over ten years of visibility into Scattered Canary’s operations, we have deep insight into how the group grew from a single cybercriminal working Craigslist scams into an entire organization that consists of dozens of criminals, each with specific tasks.
When the first member of Scattered Canary, who, for the purposes of this report, we call Alpha, began his operations, he was a lone wolf—working mostly Craigslist scams as he learned the tricks of the trade from a mentor. However, within a few years, he had honed his craft enough to expand into romance scams, where he met his first “employee,” Beta. Once they had secured enough mules via their romance scams to launder their stolen money, they shifted from targeting individuals to targeting enterprises, and the group’s BEC operation was born.
Since its inception, at least 35 different actors have joined Scattered Canary in its fraudulent schemes. The group has turned to a scalable model through which they can run multiple types of scams at the same time. And with multiple tools designed to help them expand their operations and stay hidden from law enforcement, it is no wonder that they are seeing massive success.
While BEC remains a favorite due to its ease and success, a look into Scattered Canary’s operations demonstrates that these groups are not one-trick ponies. At any given time, Scattered Canary is involved in a number of different types of scams simultaneously—including romance scams, tax fraud, social security fraud, employment scams, and more. And this is only one organization, out of the hundreds currently residing in West Africa and around the world.
With this much involvement between members, and so much connection between crime type, we must look at the bigger picture to truly understand the enormity of the cybercrime problem.
If Scattered Canary can be seen as a microcosm for the rapidly evolving organizations behind today’s most pernicious email scams, this report emonstrates that a much more holistic approach—one based on threat actor identity rather than type of fraudulent activity—is required to detect email fraud and protect organizations.
Additional & Updated Information About Scattered Canary
- Scattered Canary Cybercrime Ring Exploits the COVID-19 Pandemic with Fraudulent Unemployment and CARES Act Claims | Agari
- The Nigerian Fraudsters Ripping Off the Unemployment System | WIRED
- How missed ‘red flags’ helped Nigerian fraud ring ‘Scattered Canary’ bilk Washington’s unemployment system amid coronavirus chaos | The Seattle Times
- Scattered Canary Behind Hundreds of Fraudulent Unemployment Claims (tripwire.com)
- Scammers have ripped off as much as $36B in unemployment benefits this year (thehustle.co)
- West Africa’s Scattered Canary gang shows how cybercriminals supersize email scams – CyberScoop
PLEASE SHARE OUR ARTICLES WITH YOUR FRIENDS & FAMILY
HELP OTHERS STAY SAFE ONLINE – YOUR KNOWLEDGE CAN MAKE THE DIFFERENCE!
THE NEXT VICTIM MIGHT BE YOUR OWN FAMILY MEMBER OR BEST FRIEND!
By the SCARS™ Editorial Team
Society of Citizens Against Relationship Scams Inc.
A Worldwide Crime Victims Assistance & Crime Prevention Nonprofit Organization Headquartered In Miami Florida USA & Monterrey NL Mexico, with Partners In More Than 60 Countries
To Learn More, Volunteer, or Donate Visit: www.AgainstScams.org
Contact Us: Contact@AgainstScams.org
-/ 30 /-
What do you think about this?
Please share your thoughts in a comment below!
Article Rating
Table of Contents
POPULAR ARTICLES
ARTICLE META
RATE THIS ARTICLE?
LEAVE A COMMENT?
Recent Comments
On Other Articles
on Financial Recovery – Avoid Money Triggers – Perspective on Money for Scam Victims – 2023 [UPDATED 2025]: “This article is excellent. This is something I needed to read. Thank you!” Jun 18, 16:26
on Scam Victim Apathy – Scams Are Somebody Else’s Problem: “This is a concept I hadn’t considered before. And the Tall Poppy Syndrome is something I’ve not heard of. I…” Jun 17, 13:17
on After The Scam – Victims Frequently Engage In Self-Defeating Behaviors: “Thank you for this article! I have always been my worst critic. Then it all just spirals down into self…” Jun 17, 10:48
on Scam Victim’s/Survivor’s Guide To Writing Your Own Book About Your Experience – For Healing & Profit – 2024: “I have a friend who has suggested that I write a book about my story, a few times. Just the…” Jun 15, 23:02
on Trauma Grief & Humor As A Coping Mechanism: “My sense of humor has, at times, been what’s pulled me up and helped me cope. In the early stages…” Jun 15, 22:53
on Differences Between Men & Women Scam Victims: “This is very helpful in understanding the differences experienced by men and women. It is sad that most men are…” Jun 15, 22:21
on Sending A Letter To Your Scammer – Getting The Last Word – 2024: “I sent the email and I have to say, I feel a sense of relief. I truly hope there’s no…” Jun 15, 22:04
on Forgiveness and Scams – Why It Matters So Much!: “Forgiveness is one of the hardest parts of recovery for me. That includes forgiving myself along with the scammers. It…” Jun 15, 21:33
on Buried Cell Phones/Smartphones & Hidden Cameras – New Cybercrime – Cyber Surveillance by Local Criminals – 2025: “This is beyond concerning. To be tracked at your home is obviously a huge violation of privacy. Thank you for…” Jun 13, 06:56
on Scam Victim’s Learning Process [INFOGRAPHIC]: “The commitment to learning and recovering from the scam is indeed overwhelming. At first I struggled to comprehend the material…” Jun 12, 20:54
Important Information for New Scam Victims
- Please visit www.ScamVictimsSupport.org – a SCARS Website for New Scam Victims & Sextortion Victims
- Enroll in FREE SCARS Scam Survivor’s School now at www.SCARSeducation.org
- Please visit www.ScamPsychology.org – to more fully understand the psychological concepts involved in scams and scam victim recovery
If you are looking for local trauma counselors please visit counseling.AgainstScams.org or join SCARS for our counseling/therapy benefit: membership.AgainstScams.org
If you need to speak with someone now, you can dial 988 or find phone numbers for crisis hotlines all around the world here: www.opencounseling.com/suicide-hotlines
A Note About Labeling!
We often use the term ‘scam victim’ in our articles, but this is a convenience to help those searching for information in search engines like Google. It is just a convenience and has no deeper meaning. If you have come through such an experience, YOU are a Survivor! It was not your fault. You are not alone! Axios!
A Question of Trust
At the SCARS Institute, we invite you to do your own research on the topics we speak about and publish, Our team investigates the subject being discussed, especially when it comes to understanding the scam victims-survivors experience. You can do Google searches but in many cases, you will have to wade through scientific papers and studies. However, remember that biases and perspectives matter and influence the outcome. Regardless, we encourage you to explore these topics as thoroughly as you can for your own awareness.
Statement About Victim Blaming
Some of our articles discuss various aspects of victims. This is both about better understanding victims (the science of victimology) and their behaviors and psychology. This helps us to educate victims/survivors about why these crimes happened and to not blame themselves, better develop recovery programs, and to help victims avoid scams in the future. At times this may sound like blaming the victim, but it does not blame scam victims, we are simply explaining the hows and whys of the experience victims have.
These articles, about the Psychology of Scams or Victim Psychology – meaning that all humans have psychological or cognitive characteristics in common that can either be exploited or work against us – help us all to understand the unique challenges victims face before, during, and after scams, fraud, or cybercrimes. These sometimes talk about some of the vulnerabilities the scammers exploit. Victims rarely have control of them or are even aware of them, until something like a scam happens and then they can learn how their mind works and how to overcome these mechanisms.
Articles like these help victims and others understand these processes and how to help prevent them from being exploited again or to help them recover more easily by understanding their post-scam behaviors. Learn more about the Psychology of Scams at www.ScamPsychology.org
Psychology Disclaimer:
All articles about psychology and the human brain on this website are for information & education only
The information provided in this article is intended for educational and self-help purposes only and should not be construed as a substitute for professional therapy or counseling.
While any self-help techniques outlined herein may be beneficial for scam victims seeking to recover from their experience and move towards recovery, it is important to consult with a qualified mental health professional before initiating any course of action. Each individual’s experience and needs are unique, and what works for one person may not be suitable for another.
Additionally, any approach may not be appropriate for individuals with certain pre-existing mental health conditions or trauma histories. It is advisable to seek guidance from a licensed therapist or counselor who can provide personalized support, guidance, and treatment tailored to your specific needs.
If you are experiencing significant distress or emotional difficulties related to a scam or other traumatic event, please consult your doctor or mental health provider for appropriate care and support.
Also read our SCARS Institute Statement about Professional Care for Scam Victims – click here to go to our ScamsNOW.com website.
Thank you for your comment. You may receive an email to follow up. We never share your data with marketers.