Impersonation fraud is becoming the number one risk for legal practices, particularly conveyancing firms and can result in firms and their clients losing hundreds of thousands of rands.
Impersonators prey on the fact that clients choose to communicate with their attorneys by email. This has many advantages as it is fast, convenient and hassle free but it also creates an opportunity for cyber-criminals if you are not careful
It can be a particular issue for first time buyers, because they are likely to be less familiar with the conveyancing process and will normally be transferring large amounts of money from their own banking account to the conveyancing attorneys to cover the deposit, rates, transfer fees and duties and the like for the property.
The scam starts with an email that appears to be from the attorney asking the purchaser to transfer these monies for the property which he/ she is buying. However, the email is a fake and the bank details are those of an account belonging to the fraudster, not the attorney.
The email appears to come from the attorney, either because the cyber criminal has hacked into the purchaser’s email account or because they have “spoofed” his/ her email address. Spoofing means the email appears to come from him/ her (looks the same) when in fact it has come from an email account controlled by the scammer.
Sellers are however also at risk at the end of the conveyancing process when the conveyancing attorney needs to pay out the net proceeds of the sale.
Here the email appears to come from the client requesting that the sale proceeds be paid to a different account than the one they nominated at the outset. The instruction comes from what appears to be the client’s email address, when in fact his/ her email account has either been hacked or spoofed.
The staff of the law firm then pay out on the fraudulent instruction only to find out this was the scammer emailing and the scammer’s account which you paid the funds into.
If you fall for the scam and pay the money into the criminals account, they will normally move it quickly to a different account. This means that the money often cannot be recovered once the fraud has been identified.
Many practices have learned this hard way. Be cautious and take action to protect yourself against the risk of Impersonation fraud.
Here are some tips…
- Get your client’s bank details in writing when you first agree to pay into them and when a change of banking details is requested.
- If you do get an email asking you to transfer money to a different account, confirm this with your client in person or over the phone. Do not reply to that email or follow the instruction.
- Once you have transferred the funds, immediately call your client to check that he/ she has received the funds.
For more information on the impersonation fraud cover Shackleton Risk offers, please contact your broker.
Share this article
For law firms and sole practitioners alike, it is critical that the limit of cover offered under your Professional Indemnity insurance policy is adequate for your business. We strongly recommend you review your limit to determine whether an increase in cover, beyond what may be offered by your professional indemnity fund. For attorneys this is…
Contemplating an application for the sequestration of a debtor’s estate in terms of the Insolvency Act?
An application may be launched in the High Court to sequestrate the estate of the insolvent if the creditor has a claim of R 1000 or more against the debtor. This figure hasn’t been increased for some time since the enactment of the Insolvency Act in 1936. However we can imagine only those persons with…
Should you suspect a loss has been suffered by an estate at the hands of a trustee / liquidator/ executor (the incumbent named on the bond of security), you should proceed to investigate it. Once your investigation is complete, you need to notify the Master of your investigations and be able to substantiate the loss…