Thousands of dollars vanish in seconds as thieves target Toronto businesses' point of sale terminals
Thousands of dollars have been taken from businesses on Queen Street East in Toronto over the past few weeks as thieves use the very machine the businesses use to accept money from customers to rob them.
One business, the family-owned Souvlaki Hut in The Beaches, a security camera was rolling as a customer innocently picked up the point of sale terminal and issued himself a refund of $2,000.
'It was shocking,' said Artie Jorgaqi, the son of the Souvlaki Hut owner. 'Honestly, my mom works very hard here, so to hear that she just got that taken from her – it was a shock.
'He had picked up the machine so we wouldn't see anything, and he processed a manual refund. It's very easy. This is something that a lot of small business owners are vulnerable to,' he said.
At another business, Pippins Tea Company, owner Barbara Deangelis told CTV News a few weeks ago a young man came in saying he wanted to buy a teapot for his grandmother – and instead refunded himself $4,900.
'It was just sick,' Deangelis recalled. 'That's a lot of money for a small, freestanding, independent retail store.'
Both are pointing to vulnerabilities in their point of sale terminals they had never expected – vulnerabilities one security expert says are 'severe'.
'Most of the time, these POS terminals are misconfigured from day one,' said Claudiu Popa, who said the flaws come through either default passcodes that can be exploited by thieves, or through lax default settings that are never updated by the users.
'This is a scam that's essentially akin to leaving your locked iPhone and then finding out somebody was able not to just access your iPhone but to get into mobile payments and help themselves to a bunch of paid apps,' he said.
Police say they haven't linked the two cases, nut they appear to be part of a wave of thefts in another part of the city that concerned Toronto Deputy Mayor Mike Colle so much he hosted a summit on the problem last year.
'Almost every business on Bathurst Street, Dufferin, Eglinton, Avenue Road, Lawrence, St. Clair, they all got hit, and they never talked to each other about it,' he said.
Colle said he went door to door explaining the situation to businesspeople and also put up stickers in the windows to tell potential thieves the point of sale terminals had been locked down.
'Essentially, lock the point of sale terminal up at night. And when you're not in there, don't leave it on the front counter. Put it underneath the counter. And then when the customer comes, you put it on the counter. Change the pin code every week,' Colle said.
The Beach BIA has also warned its members about the POS terminal vulnerabilities in an email.
The Beach BIA Manager Lori Van Soelen said she's not aware of a theft like this – a sign that the thieves are moving and trying new tactics on new areas.
'I think we're hitting a new level,' she said. 'Be very aware of your machines and what people can and cannot do.'
In the case of Pippins, their POS vendor, Moneris, did refund the money and Deangelis said she felt well taken care of.
Moneris told CTV News its machines do not have a default 'unauthorized refund' code.
'When merchants set-up their devices, they're prompted to set administrative passwords on the devices and it is recommended that they also set-up user profiles and permissions for things such as refunds. We also always recommend that businesses treat their payment terminals as they would cash - locked away and secure when not in use,' spokesperson Darren Leroux said in an email.
In the case of the Souvlaki hut, the POS vendor is Clover. Clover hadn't returned messages by deadline Wednesday.
Jorgaqi said $2,000 was a huge hit and had they known they had to put a limit on their machine, they would. But he said it should also be up to the POS terminal vendors to not sell the devices initially in such a vulnerable state.
'I think they should put in some better steps to help protect anyone that uses their services. Maybe limit the amount that someone can get in a refund, or put in two-step authorization to prevent this from happening again,' he said.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Globe and Mail
12 minutes ago
- Globe and Mail
McEwen Mining Announces: Voting Results of the 2025 Annual Meeting of Shareholders; Change of Name to McEwen Inc. Effective July 7, 2025; Meeting Resources Now Available
TORONTO, July 03, 2025 (GLOBE NEWSWIRE) -- McEwen Mining Inc. (NYSE: MUX) (TSX: MUX) ("MUX" or the "Company') announces the results of the MUX Annual Meeting of Shareholders held on June 19, 2025. Following shareholder approval, the Company has filed the Articles of Amendment with the Secretary of State to effect the approved name change on July 7, 2025. The Company will begin trading on the NYSE under its new name, McEwen Inc., on July 7, 2025, and on the TSX shortly thereafter. There will be no change in the Company's CUSIP or stock symbol. Voting Overview: Shares Voted: 27,942,541 (~51.81% of 53,934,510 outstanding shares entitled to vote) Board Elected: 11 Directors Executive Compensation: Approved Auditor Appointment: Ernst & Young LLP ratified for FY2025 Corporate Name Change: Approved to McEwen Inc. Detailed Voting Results: Election Results for the Directors Nominated at the Meeting: Name of Nominee Shares Voted For Shares Withheld Broker Non-Votes Uncast Robert R. McEwen 19,138,567 461,348 8,342,616 10 Dalia Asterbadi 19,255,822 344,093 8,342,616 10 Ian Ball 19,294,446 305,469 8,342,616 10 Richard W. Brissenden 17,962,491 1,637,424 8,342,616 10 Alfred Colas 19,246,961 352,954 8,342,616 10 Nicolas Darveau-Garneau 19,283,698 316,217 8,342,616 10 Steve Kaszas 19,265,359 334,556 8,342,616 10 Michelle Makori 19,266,381 333,534 8,342,616 10 Michael Melanson 19,247,964 351,951 8,342,616 10 John Florek 16,354,561 3,245,354 8,342,616 10 William M. Shaver 19,312,397 287,518 8,342,616 10 Election Results for the Approval of Executive Compensation: For Against Abstain Broker Non-Votes Uncast 18,735,730 514,236 349,959 8,342,616 0 Election Results for the Appointment of Ernst & Young LLP as the Company's independent registered public accounting firm for the fiscal year ending December 31, 2025: For Against Abstain Broker Non-Votes Uncast 27,269,481 523,370 149,687 0 3 Election Results for the Change of Corporate Name to McEwen Inc: For Against Abstain Broker Non-Votes Uncast 26,491,461 724,679 726,401 0 0 Access Meeting Resources We thank all participants of the 2025 Annual Meeting of Shareholders. Interested investors can access the recording of the meeting on the Company's Media page at: We Welcome Your Feedback Please share your thoughts about our presentation by: - Emailing info@ or - Completing our brief survey: ABOUT MCEWEN MINING McEwen Mining Inc. provides its shareholders with exposure to gold, copper and silver in the Americas by way of its three mines located in the USA, Canada and Argentina and its large advanced-stage copper development project in Argentina. It also has a gold and silver mine on care and maintenance in Mexico. Its Los Azules copper project aims to become one of the world's first regenerative copper mines and is committed to carbon neutrality by 2038. Rob McEwen, Chairman and Chief Owner, has personally invested US$205 million in the companies and takes a salary of $1/ year. He is a recipient of the Order of Canada and a member of the Canadian Mining Hall of Fame. His objective for MUX is to build its share value and establish a dividend, as he did while building Goldcorp Inc. McEwen Mining's shares are publicly traded on the New York Stock Exchange (NYSE) and the Toronto Stock Exchange (TSX) under the symbol "MUX". CAUTION CONCERNING FORWARD-LOOKING STATEMENTS This news release contains certain forward-looking statements and information, including "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. The forward-looking statements and information expressed, as at the date of this news release, McEwen Mining Inc.'s (the "Company") estimates, forecasts, projections, expectations or beliefs as to future events and results. Forward-looking statements and information are necessarily based upon a number of estimates and assumptions that, while considered reasonable by management, are inherently subject to significant business, economic and competitive uncertainties, risks and contingencies, and there can be no assurance that such statements and information will prove to be accurate. Therefore, actual results and future events could differ materially from those anticipated in such statements and information. Risks and uncertainties that could cause results or future events to differ materially from current expectations expressed or implied by the forward-looking statements and information include, but are not limited to, fluctuations in the market price of precious metals, mining industry risks, political, economic, social and security risks associated with foreign operations, the ability of the Company to receive or receive in a timely manner permits or other approvals required in connection with operations, risks associated with the construction of mining operations and commencement of production and the projected costs thereof, risks related to litigation, the state of the capital markets, environmental risks and hazards, uncertainty as to calculation of mineral resources and reserves, foreign exchange volatility, foreign exchange controls, foreign currency risk, and other risks. Readers should not place undue reliance on forward-looking statements or information included herein, which speak only as of the date hereof. The Company undertakes no obligation to reissue or update forward-looking statements or information as a result of new information or events after the date hereof except as may be required by law. See McEwen Mining's Annual Report on Form 10-K for the fiscal year ended December 31, 2024, and other filings with the Securities and Exchange Commission, under the caption "Risk Factors", for additional information on risks, uncertainties and other factors relating to the forward-looking statements and information regarding the Company. All forward-looking statements and information made in this news release are qualified by this cautionary statement.
CTV News
16 minutes ago
- CTV News
Saskatoon man not criminally responsible for killing partner, judge rules
A Court of King's Bench judge has ruled a Saskatoon man was not criminally responsible for the death of his partner. Justice Grant Currie took less than a few minutes to read his brief decision to the courtroom Thursday, saying 'it is more likely than not' Thomas Hamp was suffering from a mental disorder when he stabbed and killed his partner Emily Sanche in their shared apartment on Feb. 20, 2022. Currie said the mental disorder Hamp was suffering from 'rendered him incapable of knowing that it was wrong.' 'I was sweating like any other person who's involved in the case,' defence attorney Brian Pfefferle said. 'You never know what will happen until the verdict is read, but I was hopeful that this would occur and it's an expected verdict from our position.' 'I won't speak for the family,' Crown prosecutor Cory Bliss said following the decision. 'I know this has been very hard on them. They lost a daughter and a loved one and a sister. They're still feeling a lot of pain and just a lot of anger towards what happened.' Hamp admitted he fatally stabbed Sanche at trial. The question wasn't whether or not he committed the act, it was whether he was capable of knowing what he was doing was morally wrong. Hamp testified that he believed he was being watched by secret police who were trying to frame him as a pedophile. He said he wanted to save Sanche from being tortured and forced to breed and be killed. In the months before the stabbing, Hamp testified about having false memories of being molested and an increased paranoia people close to him were conspiring with the secret police. He was suspicious of medical professionals and feared they would castrate him. He was fearful of technology and was obsessed with the video game Tetris because he believed it was a test from the secret police. Throughout all of this, Sanche, who was working towards a master's degree in counselling, kept detailed notes of what was happening to Hamp and her concerns for him. Dr. Shabehram Lohrasbe, a forensic psychiatrist who testified at the trial and has provided thousands of assessments over his career, said he had never seen anything like it. 'In her death, her words in writing, essentially are what the court relied on, and what Dr. Lohrasbe relied on, to provide him with this evidence for the (not criminally responsible) verdict,' Pfefferle said. 'In many respects, quite tragically, Emily continued to advocate for Thomas.' Bliss said this case is different from a majority of murder trials because Hamp didn't give any statement to police the night of the killing and didn't speak to anyone about what happened in any great detail until he spoke with psychiatrists. 'One challenge, I would say for the Crown, is discerning how to cross-examine someone when basically the statement they've given has been supporting the ultimate finding of (not criminally responsible),' he said. Hamp's parents, Bryan and Sandi, declined to speak with reporters following Currie's decision, but later sent a statement to media. 'We are grateful that Justice Currie carefully reviewed this case and found Thomas not criminally responsible. We, like everyone who knew and loved Emily Sanche will forever grieve her death,' the statement said. 'Her diary was the central evidence that was used in this case. She knew Thomas best and her diligence in documenting his decline was so careful and detailed. We could not help but feel her advocacy for Thomas transcended her passing.' Pfefferle said Thursday marks 40 months to the day Hamp was incarcerated. Hamp never applied for release and hoped serving time would give the family closure. Pfefferle said that stability will 'bode well' for reintegration back into society. According to the Criminal Code of Canada, The Saskatchewan Review Board, an independent administrative tribunal, must hold a disposition trial within 45 days to determine Hamp's fate, unless an extension is granted. Hamp will be transported to the Saskatchewan Hospital in North Battleford until that takes place.
CTV News
17 minutes ago
- CTV News
‘He wreaked havoc': Serial romance fraudster labelled dangerous offender
Jeffery Paul Kent, seen in a screen grab from the TV show Scammed, was given an indeterminate sentence and deemed a dangerous offender after a string of romance scams going back nearly a decade. An Edmonton man has been labelled a dangerous offender – a designation given to Canada's most violent criminals and sexual offenders – after a string of romance frauds dating back nearly a decade. Jeffrey Paul Kent was given an indeterminate sentence on June 27 by Court of King's Bench Justice Melanie Hayes-Richards, who said it was the only way to prevent the 55-year-old from acting again. 'Kent is a serial fraudster. He targets vulnerable women, convincing them he is in love with them,' wrote Hayes-Richards in her decision. 'He then manipulates them with lies and false promises to gain access to their finances and other assets. 'He has destroyed the lives of his victims, leaving them financially and emotionally destitute.' In 2022, Kent pleaded guilty to five counts of fraud involving five women who he scammed over $175,000 out of between 2016 and 2017. Hayes-Richards said every one of his victims suffered long-lasting, and in some cases, permanent psychological damage. 'He is a predator who targeted vulnerable single women,' said the decision. 'Using lie upon lie, he inserted himself into his victims' lives, promising a bright and secure future. Instead, he wreaked havoc.' Kent was convicted for other frauds and thefts under similar circumstances dating back to 1990. While going through various psychological evaluations over the years, he was determined to have a significant psychiatric disorder and a gambling addiction. Although he participated in various treatments and programs while incarcerated, he has shown no remorse for his crimes, according to the decision. Romance, deception, gaslighting All five victims met Kent through an online dating app where he used fake names and personas. Some of the women he dated at the same time. Kent would mirror the victims' experiences by creating fake stories where he shared similar experiences. He would often move the relationships along quickly, sometimes moving in with a woman within two to four weeks. The decision said he used 'love-bombing' tactics to convince the women he was deeply in love and committed to them. After imposing himself into their lives, he would ask the women for money related to a business opportunity, falsely promising a quick profit or repayment. When he never paid the women back and ran out of excuses, he would tell them he had brain cancer or a seizure disorder to swindle more money out of his victims. He mostly spent their money gambling or on personal purchases, according to the decision. Kent defrauded one woman of $117,750 by convincing her to invest in a fake hotel reservation business. Another woman lost $21,403 after being coerced into investing in a phony real estate venture. One woman had a child with Kent after being on-and-off with him several times. She became so distressed that she stopped eating and was underweight during her pregnancy. The child was born prematurely and spent 26 days in the NICU. The woman had to return to work just a month after her child was discharged from hospital so she could pay her bills. Not only were the women's finances ruined, their relationships with friends, family and intimate partners were severely impacted by Kent's actions. All of the women experienced severe psychological damage from the gaslighting and manipulation they incurred, said the decision. One victim had suicidal thoughts while others have no interest in dating anymore. Scamming women for two decades Prior to the recent decision, Kent scammed nine other women in his romance schemes. Between 2005 and 2007, Kent defrauded a woman who he had a romantic relationship with of $150,000 by convincing her to invest in a fake hotel reservation business. He defrauded another woman and her family of over an estimated $500,000 while they were in a relationship between 2006 and 2008. Kent and the woman got married in 2007 and had a child. While she was pregnant, the woman found out about the fraudulent activity Kent had been orchestrating. In a victim impact statement, the woman described Kent as a 'monster' and said she dreaded having his child. In 2009, another woman was defrauded of $150,000 and was left with more than $300,000 in debt. During their relationship, he went by Dr. Keenan O'Malley and spoke with an Irish accent. The woman, who worked as a recreational therapist and had two children, was finding it hard to juggle full-time work while raising her children. Kent convinced the woman to invest in another fake hotel reservation business and to list her home for something more affordable. He took $110,000 out of the $200,000 profit from the home to 'piggyback' on his investments. After giving up possession of her house, the woman attempted suicide, the decision read. Following the offence, the woman had no money, job, home or vehicle and was unable to provide basic necessities for her children. As a result, she felt she had to give up custody of her children to their father. After getting back on her feet, her ex-husband refused to allow her access to her children. Today, both children are on medication and anxiety and neither have finished high school. 'Master manipulator' Justice Hayes-Richard said that while Kent has appeared to be committed to treatment while in custody and the community, much of his professed and believed progress was a deception to those trying to help him. 'Kent is an accomplished liar and master manipulator,' said Hayes-Richard in her decision. 'He manipulated each victim into giving him their money, which he used to support his lavish lifestyle and gambling addiction,' said the decision. 'Once his deception was discovered by one victim, he simply moved on to the next, leaving behind a wake of life-altering consequences for each victim.' While Kent has been given an indeterminate sentence, it does not mean that he will never be released from prison. Kent could be released on parole when the Parole Board of Canada is satisfied that parole conditions will be sufficient to control him in the community. Kent is eligible for parole review in seven years from the day he was taken into custody which was on Sept. 24, 2018, making his review date Sept. 24, 2025. If he is not paroled after his September review, the parole board is required to review his case every two years.
