¾«Æ·¹ú²ú×ÔÏßÎçÒ¹¸£Àû

The firm in question was acting on behalf of an executor and was in the process of dispersing the estate of the deceased. With one of the beneficiaries in Australia, the firm was communicating with them via email however, unbeknownst to the firm or the beneficiary, the firm’s email had been hacked.

The fraudster was monitoring the exchange of emails and waited for the right opportunity to send an email to the firm appearing as if it was from the beneficiary’s email with bank details identifying where the beneficiary’s funds were to be transferred. As the beneficiary was living in Australia the firm did not contact the beneficiary by phone to confirm the bank details before transferring the funds. A few days later the beneficiary emailed and enquired when the funds would be transferred at which point the fraud was identified by the firm.

The Society reiterates its advice never to send or accept bank account details via email.