Warning: Email scam steals money through wire fraud

ST. GEORGE – Scams have a way of reinventing themselves and re-emerging and such is the case with a real estate transaction-related scam that that has caused practitioners and members of the public to lose earnest money, closing costs, down payments, and in some cases, loan proceeds.

Francine A. Giani, executive director of the Utah Department of Commerce, issued a warning to Utah consumers Thursday to be on the alert for this scam that targets property transactions through phony emails.

The email tries to coerce those receiving the emails into wiring loan transfers and other high dollar real estate amounts to the con artists’ accounts. According to Giani’s news release, here’s how the scam works:

It starts with a con artist gaining access to an email account by either hacking or obtaining login credentials through a phishing scheme, according to the National Association of Realtors. (Phishing schemes typically use emails appearing to be from a legitimate business, such as a bank or credit card company, to deceive people into disclosing personal information, such as passwords or account number.)

Once the sender gains access to an email account, they monitor emails about a pending real estate transaction until the transaction is about to close.

Typically within 24 hours of a transaction closing, the con artist will use the email account to send new wiring instructions to the buyer, seller, title or escrow agent, lender, real estate agent or broker, or the like. The new wiring instructions often have the money going to a bank account outside of the country.

By the time the fraud is recognized, the money has already been withdrawn from the fraudulent bank account and it is too late to locate the criminal.

“All parties in a real estate transaction should be wary of email communication especially if last minute changes are requested,” Utah Division of Real Estate Director Jonathan Stewart said. “If criminals have access to your email account, they can make anything sound legitimate.”

Giani likened the scam to IRS scams that travel state-to-state seeking new victims.  The Federal Trade Commission says this scam has been around since 2012 but has recently resurfaced in some states.

“Please carefully review any email messages regarding your property transaction,” Giani said in his news release. “If there is any doubt, contact your real estate agent or mortgage broker to verify before releasing any information or funds.”

Tips for real estate consumers

1. Be wary of last minute emails with changes to the transaction

2. Contact email senders by telephone using a phone number you have independently verified

3. Never send wire transfer information via email – for that matter, never send any sensitive information via email, including banking information, routing numbers, PINS, or any other financial information

4. Do not email financial information, it’s not secure

5. If you’re giving your financial information on the Web, make sure the site is secure:

• Look for a URL that begins with https (the “s” stands for secure)

• Instead of clicking a link in an email to go to an organization’s site, look up the real URL and type in the Web address yourself

6. Be cautious about opening attachments and downloading files from emails, regardless of who sent them; these files can contain malware that can weaken your computer’s security

7. Keep your operating system, browser and security software up to date

Tips for real estate professionals

1. Inform clients from day one about your email and communication practices, and alert them to the possibility of fraudulent activity; explain that you will never send, or request that they send, sensitive information via email.

2. Prior to wiring any funds, the wirer should contact the intended recipient via a verified telephone number and confirm that the wiring information is accurate – do not rely on telephone numbers or website addresses provided within an unverified email as fraudsters often provide their own contact information and set up convincing fake websites in furtherance of their schemes

3. If a situation arises in which you have no choice but to send information about a transaction via email, make sure to use encrypted email

4. Go with your gut: Tell clients that if an email or a telephone call ever seems suspicious or “off,” they should refrain from taking any action until the communication has been independently verified as legitimate; when it comes to safety and cybersecurity, always err on the side of being overly cautious

5. If you receive a suspicious email:

• Do not open it

• If you have already opened it, do not click on any links contained in the email

• Do not open any attachment

• Do not call any numbers listed in the email

• Do not reply to the email.

6. Clean out your email account on a regular basis

• Your emails may establish patterns in your business practice over time that hackers can use against you

• A longstanding backlog of email may contain sensitive information from months or years past

• You can always save important emails in a secure location on your internal system or hard drive

7. Change your usernames and passwords on a regular basis, and make sure your employees and licensees do the same

8. Never use usernames or passwords that are easy to guess – never, ever use the password “password”

9. Make sure to implement the most up-to-date firewall and anti-virus technologies in your business

While Real Estate Division investigators have not received reports of this fraud occurring in Utah, the National Association of Realtors has released media alerts regarding the wiring instruction scam.

Resources

Email: jkuzmanic@stgnews.com

Twitter: @JoyceKuzmanic | @STGnews

Copyright St. George News, SaintGeorgeUtah.com LLC, 2016, all rights reserved.

Free News Delivery by Email

Would you like to have the day's news stories delivered right to your inbox every evening? Enter your email below to start!

Posted in Business, Financial, Local, National, NewsTagged , , , , ,

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.