Counter Fraud Team alert: impersonation fraud incident

The KCC Counter Fraud Team have been made aware of a fraud incident made against one of the schools within the country.

We have received a report of impersonation fraud, where the email account of a headteacher has been spoofed.

Spoofing is where the fraudster will forge or tamper with the email header to display a fake sender address.

On this occasion, fraudsters used the email address to send an invoice requesting immediate payment (same day).

The invoice purported to be from a firm of Solicitors named Megan Jupp and requested payment for professional fees incurred.

Open source searches confirm there are no firms or practising Solicitors with that name.

The address included on the invoice, 57 Jupp Road, London E15 1AF is a residential property. The wording of the email is provided below.

Please note the spelling mistakes:

Would you please make a same day payment for me now? need to compete a payment today which is overdue ,i'll have the invoice send to you soon

The Bank details provided by the fraudster are below:

Bank Name: Cashplus Bank Advanced Payment Solutions
Name on account: Jean Paul Banza
Sort Code: 087199
Account Number: 11541586

The impersonation fraud was unsuccessful on this occasion and we advise all members to remain vigilant to prevent losses.

Actions

Ensure you don’t share your passwords, do not use an easily guessed password as fraudsters will do open-source checks to find out information such as social media.

Whenever you get an email asking for any bank account payment details to be changed, be that staff, contractors, suppliers always check with the contact details you already have with that person or company.

If you notice that a received invoice is different or the payment details are not the same as those on record, check again with the sender that the information is correct.

A phone call is best as if the subjects email or online accounts have been targeted the fraudster may be monitoring them.

Also use a phone number you already on record have not one that is contained within the email requesting the change, the fraudster will control any phone number they email to you.

Criminals are experts at impersonating people, businesses and the police. They spend hours researching your business for their scams, hoping you will let your guard down for just a moment.

Remember

Stop: If you receive a request to make an urgent payment, change supplier bank details or provide financial information, take a moment to stop and think.

Challenge: Could it be fake? Verify all payments and supplier details directly with the company or individual on a known phone number or in person first.

Protect: Contact your business’ bank immediately if you think you’ve been scammed and report it to Action Fraud online or by calling 0300 123 2040.

Advice can be found on the Take Five website:

• Take Five - general advice
• Take Five - business advice