A Tragic Story from Maryland
Here’s another tragic story out of Maryland where ID scammers even shamelessly go after government agencies. Here’s a volunteer fire department that was buying almost a quarter million dollars worth of new equipment, and somebody spoofed an email and convinced their payables department to wire the money to a scammer.

Common Scamming Technique
Right, and this is how this works. We see this all the time. If you’re buying something or you’re a company that buys and sells things, for example, what probably happened was that the company that sells ambulances or this equipment was hacked. And the scammers will hack into your company and not even let you know about it. They won’t do anything to make you aware of it. They won’t try to ransomware you, but they’ll monitor your emails back and forth for months sometimes.

Scammer’s Methodology
And they’ll see that this ambulance company was selling ambulances to this Rockville Fire Department volunteer fire department. And so they saw the dollar amount, they saw the names, and they saw the information on these emails going back and forth. And then what they did was make up a new email address and a fake website that made it look like it was this ambulance company. And they sent an email to the Rockville fire department that said, “Look, your ambulances are ready. Here’s the wire transfer information. Wire the money here.” And they had the logo, the right name of the rep from the ambulance company, all these things. And they sent it to the fire department. The fire department gets this email, which looks legit, and they just blast out the money. Now they’re out of the money.

Prevention Measures
So what do you do about this? Well, if you’re a company that’s going to wire transfer money, the most important thing to do is, if it’s a significant amount, do a test transfer first. Wire $100 to whoever you’re going to pay this money to, and then call them up on the phone to say that the number you know is right based on something printed, based on their actual website or something that’s tangible that you know, and say, “Hey, did you get the $100?” If they say yes, then you go back to your bank and make them wire the full amount to the same wire transfer information, same routing number, same account number. Don’t change anything. That way, you’ll know you’re protected.

Impact and Consultation Offer
Because these alternate ID scams are affecting real estate companies and equipment companies, Real estate companies have adapted to this, so a lot of them are now telling their customers to watch out for these emails. So now these scammers are going to other places where they know there are big dollar amounts. Think about it, volunteer fire department; they’re not sophisticated financially. So they find out—well, who do they pay money to? Well, the fire equipment companies. Let’s hack into them, watch their emails for 6 months, get all their transactions that are pending, and then blast out wire transfer emails to a bunch of their customers to divert the payments to us as scammers. You see how this works.

Conclusion
So if you are a company that either sends out a lot of money or receives a lot of money, you can click the link below. We can do a consultation that will give you a very specific best practices guideline to avoid this from happening so that tragically, you’re not out all of your hard-earned money or your donated money, or you don’t have your clients that are losing money. That’s going to make you look bad, and you’ll lose sales.