This high-dollar scam was reported to our company

Our company publishes an excellent newsletter entitled “Fraud Insights”. The Editor, Lisa Tyler, National Escrow Administrator, deals mostly with residential transactions. It’s unusual for her to report on a scam involving a commercial transaction, but the edition that hit my in-box today outlines the story of a chilling scam involving a commercial transaction in New York. Fortunately, the scammers were not successful despite their best efforts.

Here are the facts. On April 10, 2019, an attorney at a large, prestigious New York City law firm sent a settlement services office in Lake Success, New York, a payoff letter for a private mortgage. The payoff letter said $1.7 million should be wired to a bank account in New Jersey.

The afternoon before the closing, the settlement office received an email purportedly from the payoff attorney’s office with revised payoff instructions for a bank in the Netherlands.

The closing was postponed for reasons not involving the loan payoff. When the closing was rescheduled, the settlement office emailed the lawyer and his assistant inquiring about the change in the wiring instructions. The responding email confirmed that the change was legitimate.

Reviewing the emails carefully, the closer noticed the domain name for the lawyer’s office contained an extra “s” beginning with emails dated April 16. The attorney’s email signature was also partially cutoff beginning April 16.

Two hours before the closing, the attorney’s assistant purportedly sent the closer an email asking if the wire had been sent. The closer did not want to alarm her that her email had been compromised, so he responded that the closing was happening shortly, and he would be in touch. The closer then searched the law firm by Internet and called the main telephone number, asking for the assistant directly. She answered the phone and said the original payoff letter was the only payoff letter, and she had not sent the recent email. She was, of course, alarmed.

She said her attorney was in court and she would relay the distressing information to him immediately. She was asked to refrain from using email for that notification because the emails were clearly being watched. Regardless, she emailed the attorney. At that point, the scammers were tipped off that their scheme had been uncovered.

While the legal assistant and the closer were discussing the situation by phone, the closer received another email purportedly from the assistant demanding that he call the lender to confirm the payoff information. Immediately following that exchange, a man called the closer office to confirm the altered wiring instructions.

At this point, everyone involved with the closing knew for sure that they were dealing with attempted fraud. The closing took place, but the payoff was accomplished via bank check.

The closer said his office tries to remain on the cutting edge of technology and industry news. His sharp eye in pinpointing the email discrepancies kept the closing from being another cybercrime news story. Commercial lawyers may feel somewhat insulated from the rampant cyber fraud that plagues residential practices, but this cautionary tale is an example of penetration into a sophisticated law firm. Be careful out there!