Persistant scams targeting a non profit I work for

At least one of our accounts was compromised and presumably all their email and documents were stolen. Then they targeted us by sending us fake invoices or emergency requests to wire money. When that didn't work they have been targeting vendors and clients to get them to send them money. To do this they first spoofed email as us and now they have setup a domain with a misspelling of our domain. They seem invested in this attack at this moment. As you suspect this has caused a great deal of stress on everyone as we are a small non profit and every penny matters.

If anyone has any advice on what to do we are at our wits end with this situation. Thank you.

Please post the the link to the fake site and we will take a look.

Also post a sample of the complete email the scammers are sending as this will help others to discover the scam.

There is no site, just fake emails with some attachments. Because they got into one of our employees mailboxes they could imitate how that person writes and send out emails to people in his contact list. At this point we don't know the extent of who they contacted. I heard now our bank isn't cashing our checks now. Maybe this is the wrong forum but I'm looking for advice on what to do while the attack is going to limit the damage. Thanks for your help.

To limit the attack you will have to expose the scammers.

now they have setup a domain with a misspelling of our domain

We will need the domain name, emails sent and the email address they are using.

Please post the domain and emails these criminals are using . Exposing the scam is the only way to protect yourself and your clientele .