Thanks for your information. Can you possibly point me to something authoritative on the internet that shows this kind of use of the WHOIS database is illegal?Yep, Domain Registry of Canada is a total scam. They are also harvesting your information from the WHOIS database, which is illegal to do (in Canada) for the purposes they are using it for. I confronted them about this one time after having gotten a whole handful of these notices at an old workplace (which I thankfully caught before accounting paid them out as thy were going to) and the person on the other end of the line got very snarky and told me straight out that there were other ways of getting your info from the WHOIS database besides doing it directly which is what is against the law, but they did admit that's where the info came from. I requested that they remove us from their mailings AND faxes (they were sending much the same sort of thing as spam faxes at that point) and they flat out refused to remove us -- which I think is in fact regulated, but I could never be bothered to take it further than that as far as finding someone to report them to.
The biggest problem, aside from the fake invoice style is their name. From their name they sound like they should be the main governing body that handles registrations in Canada or some such and they have fooled quite a lot of people because of that, even more experienced computer folks. Lastly, worth noting, they are also not CIRA approved registrars, meaning they can't even register canadian domain names (despite their very misleading name) as that would have been a valid avenue to file a complaint. I did speak to a person at CIRA who was very familiar with the company name but told me there was nothing they could do about them
The only people beside these jerks who have contacted me using the unique email address for our organization that I created to register on WHOIS have been spammers selling Viagra and such.