WINNIPEG — Chukwuma Eruchalu, 23, was arrested on April 22 for allegedly defrauding the Qikiqtani Inuit Association (QIA) of more than $2 million through a business email compromise scam, according to the Nunavut RCMP.
Eruchalu faces one count of fraud over $5,000. The fraud took place in November 2024, when a third-party organization’s email was hacked and used to send fraudulent banking details to QIA. This scam, known as a business email compromise, involves hackers using social engineering or computer intrusion to authorize illegal transfers of funds.
QIA represents Inuit in the Qikiqtaaluk area, primarily Baffin Island. Although QIA’s systems were not compromised, the organization discovered the scam after investigating and has since recovered $2.1 million of the $2.2 million lost.
Nunavut RCMP had previously warned about a rise in fraudulent activity last November, including a separate spear-phishing incident that resulted in a nearly $3 million loss. RCMP spokesperson Sgt. George Henrie confirmed that Eruchalu’s case is distinct from that earlier investigation.
QIA is now training its staff on cybercrime awareness and protection measures. Eruchalu is in custody and is scheduled to appear in court in Iqaluit on May 27.
