How the scam works:
- A county receives an email that looks legitimate asking the county to change the bank account into which payroll or other funds are deposited.
- The request is fraudulent and if the county complies and changes the bank account information, the funds deposit into the account of the scammer.
- The scammer then withdraws the funds and closes the account.
If you receive an email asking for banking or payroll information to be redirected:
Look closely at the email address.
The email may look like it comes from someone trusted, but upon further inspection, it is actually being “spoofed”.
- Spoofing is when someone disguises an email address, sender name, phone number or website URL—often just by changing one letter, symbol or number—to convince you that you are interacting with a trusted source. For example – the legitimate email address you recognize may be John.Kelly@examplecompany.com and the scam email may come from John.Kelley@examplecompany.com.
- Carefully examine the email address, URL and spelling used in any correspondence. Scammers use slight differences to trick your eye and gain your trust.
- If you suspect that an email you receive is a scam, don’t respond to it, click on any links or open any attachments. Report the email immediately to your information technology administrator.
If you believe the email is from a trusted, known source, confirm with the sender that the request is legitimate.
- Do not use the phone number or email address included in the request email to confirm the request.
- Independently verify a phone number and contact the requester directly to confirm the request. If possible, it is most secure to have the redirect request made in person.
If you believe you have fallen victim to this scam, it’s important to act quickly:
- Contact your financial institution immediately and request that they contact the financial institution where the transfer was sent.
- Alert your information technology administrator.
- Contact your KACo insurance agent. https://kaco.org/insurance/claims-services/
- File a complaint with the FBI’s Internet Crime Complaint Center (IC3). https://www.ic3.gov/
- Contact your local FBI field office to report the crime. https://www.fbi.gov/contact-us/field-offices