A victim who was conned into transferring $118,000 from a family business to fraudsters has recovered the money after reporting the scam to police.
Kate works for a family business which sells furniture in Melbourne's Bayside area and was targeted in a Business Email Compromise scam, which is operating across the nation.
The scam has been targeting businesses and suppliers via email by impersonating them and pressuring clients into redirecting legitimate payments into fraudulent accounts the fraudsters control.
Victoria Police's Cybercrime Squad has received 107 reports of the scam since July this year.
Between 25 August and 5 September this year, Kate received several legitimate emails from a business supplier to organise shipping of outdoor furniture items for $118,000.
In the days following from 7 September to 25 September, hackers intercepted the same email thread and impersonated the supplier, sending further emails to state the bank account information had changed.
The hackers then pressured Kate into making the payment, claiming it was urgent, and Kate complied.
Kate was then alerted to the potential fraud by her bank, which then led her to contacting her supplier via phone and revealing the emails did not originate from them and it was a scam.
Kate immediately reported the matter to police via ReportCyber for investigation.
Kate also contacted her bank but they were unable to recall the transaction.
The Cybercrime Squad quickly followed it up and with support from the Joint Policing Cybercrime Co-ordination Centre (JPC3) based at the Australian Federal Police, they were able to block the funds and return the money to Kate.
It's prompted a police warning for individuals, businesses and suppliers to be on alert for this scam and make a report if they fall victim.
If you receive an email from someone in these circumstances or who you believe to be a scammer:
- Do not continue any conversations that you suspect are scams
- Do not reveal any personal information such as your address, bank accounts, financial information or other contact details
- Independently contact the business or supplier using a verified phone number
If you are unsure:
- Report any suspicious scam or behaviour to Victoria Police and ReportCyber
- Speak with friends and family, especially older relatives, about the scam for support and guidance
To help with the investigation, police encourage the community to keep records of the conversations by retaining emails and taking screen shots of any messages.
Anyone who believes they are in danger and needs immediate police assistance should call Triple Zero (000).
More information and advice about this scam can be found online by visiting the Scamwatch website.
If you have any other information about this scam and wish to remain anonymous, you can call Crime Stoppers on 1800 333 000 or submit a confidential online report at www.crimestoppersvic.com.au.
The police warning coincides with Cyber Security Awareness Month which is held in October every year to raise awareness about online safety and how people can protect themselves from scams.
Want to be part of work like this? Put yourself forward and visit police.vic.gov.au/police-officer-careers for more information.
Quotes attributable to Victim Kate:
"I felt completely sick when I realised I'd been scammed. It had never happened to me before.
"I thought I'd lost the money for good and it would've had such a devasting impact on our small business. It was a huge relief the police were able to help and get the money back for me.
"The fact that there are scams like this out there is concerning and I know there would be other victims who have also experienced this.
"I would encourage anyone who has been scammed to make a report as soon as it happens. I'm extremely grateful for the police's efforts and I can't thank them enough. It shows if you make a report, police can help."
Quotes attributable to Cybercrime Squad Detective Sergeant Dean Waters:
"We're seeing this scam target businesses and suppliers right across the state - swindling victims out of thousands of dollars.
"These scammers are impersonating legitimate businesses and suppliers, contacting clients via email to manipulate them into redirecting genuine payments straight into fraudulent accounts.
"They then pressure the victims by creating a false sense of urgency and claiming payments must be made immediately.
"Don't let a scammer rush you into making a costly mistake. If you receive an unexpected request to redirect a payment after talking to a business or supplier, stop and check it before sending anything through.
"Contact the business or supplier directly using a trusted phone number to confirm the request is legitimate.
"If you've sent money or banking details to a scammer, contact your bank immediately. If you've been targeted, we encourage you to make a report to police. The more we know, the more it can help us identify offenders, disrupt their activities and stop others from also falling victim."
