Email Phishing Scam

23/05/2016 08:33:00

Cyber fraud was perpetrated on a client of a solicitor in Northern Ireland by way of a phishing attack (email fraud).

We are also aware of attempted frauds within this jurisdiction where the solicitor themselves, rather than the client, was subject to a similar attack.

In the Northern Ireland case, the solicitor sent their client bank account details to the client as part of a normal conveyance, requesting that the client put them in funds to allow them to complete the purchase. Soon afterwards the client received a second email, purporting to be from the solicitor.

This email, which originated from the fraudster, stated that the client had been provided with the wrong bank account details and supplied 'new' account details into which the purchase funds should be transferred. The client duly transferred the money to this 'new' fraudulent account.

The client only became aware that she was a victim of a fraud when the solicitor contacted her to state that the money had not yet been received. Such is the level of sophistication of the fraud that neither the client nor solicitor is aware of the fraud until it has been successfully perpetrated.

Precautions

Solicitors and members of the public should be extremely vigilant when receiving or providing bank account details by way of email. Bank account details, and in particular notification of a change in bank account details, should be treated with additional vigilance and should be verified directly, either by phone or written correspondence, before transferring the money.