Just got scammed! Another cybercrime

tRoN

tRoN

Executive Member
Joined
Mar 13, 2007
Messages
7,041
Reaction score
1,221
I am so angry and hope we can get the money back so need some advice.

So here is the picture.

We have a family business and I do payments to creditors on a weekly basis though sometimes more frequently.
My brother usually emails me the list to make payment to.

So yesterday I get an email that he needs to pay a new vendor 45k. It came from his email just like the others do.
So I make the 45k payment.
He calls me later when he got the proof to tell me someone hacked his email and he didn't send me the mail.
Unfortunately it was FNB to FNB so cleared immediately.

The way it happened we think it could be one of the managers.

What is my recourse now. Can we recover the money?
Do I open a police case?

How can we track the IP details of the sender.
 
tRoN said:
I am so angry and hope we can get the money back so need some advice.

So here is the picture.

We have a family business and I do payments to creditors on a weekly basis though sometimes more frequently.
My brother usually emails me the list to make payment to.

So yesterday I get an email that he needs to pay a new vendor 45k. It came from his email just like the others do.
So I make the 45k payment.
He calls me later when he got the proof to tell me someone hacked his email and he didn't send me the mail.
Unfortunately it was FNB to FNB so cleared immediately.

The way it happened we think it could be one of the managers.

What is my recourse now. Can we recover the money?
Do I open a police case?

How can we track the IP details of the sender.
Click to expand...

You can ask the bank to do a recall, within 48 hours iirc. If the money has not been withdrawn you can get it back.

It terms of process, change it if you want to reduce risk. Rather have a file with all the suppliers bank details on their letterhead and use that as a reference for making payment.
 
Doesn't have to be the manager I can send you an email that appears to be from your brother and you won't know the difference.

But yes it must be someone who knows how you operate in order to have known it would work
 
If the money is gone then FNB cannot do a recall. You need to register a criminal case but I have seen many of these cases and you will not get your money back.

Your best recourse could be against FNB - if they didn't fica their account holder, you may be able to claim from them. Lodge it with their fraud department, then complains and then Ombudsman for banking services.
 
Yay for FICA, I'm sure you will get all your money back since FICA now allows the police to track every account and find the culprits.... right??? :erm:
 
Thanks for all the replies.
I'm usually so aware of cybercrime that I feel so *** that I fell for it.

Was reported to fraud line and they froze the account.
Will go to saps and report it to get a case number.

Yes FICA should avoid all this and it's a good idea to blame FNB if they have messed up in this regard.
 
tRoN said:
Thanks for all the replies.
I'm usually so aware of cybercrime that I feel so *** that I fell for it.

Was reported to fraud line and they froze the account.
Will go to saps and report it to get a case number.

Yes FICA should avoid all this and it's a good idea to blame FNB if they have messed up in this regard.
Click to expand...

FICA is not going to stop you paying money into someone else's account, but what it should do is allow the authorities to easily capture the fraudster.
 
Sounds like a wake up call to improve your internal control. There are a number of failings in this scenario.
 
genetic said:
FICA is not going to stop you paying money into someone else's account, but what it should do is allow the authorities to easily capture the fraudster.
Click to expand...

True. So at least it should protect the customer form these mistakes.

Bryn said:
Sounds like a wake up call to improve your internal control. There are a number of failings in this scenario.
Click to expand...
Yep. Expensive school fees!!
 
SYNERGY said:
Gmail will flag the email stating that it's spoofed - not who it's from.
Click to expand...

No it was not spoofed. The scammer obviously had the login and password details

We want to know though if it originated from the back office pc or logged in from elsewhere.
 
tRoN said:
No it was not spoofed. The scammer obviously had the login and password details

We want to know though if it originated from the back office pc or logged in from elsewhere.
Click to expand...

Call Web Africa and ask them to check the server logs for the IP address.

After that, it gets a bit complicated to get the physical address of the IP. Court order etc. The IP address should let you know which province thou.
 
tRoN said:
No it was not spoofed. The scammer obviously had the login and password details

We want to know though if it originated from the back office pc or logged in from elsewhere.
Click to expand...

How do you know this? Is the physical mail present in his send box? Like you have seen it?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X