Beware of new deceptive strains of payroll phishing

Standard

hacker dollar

This blog has recommended KnowBe4 previously as an impressive source of news on cybersecurity. I have subscribed to the newsletter and receive weekly, timely and scary cybercrime updates in my inbox. I recommend to all lawyers that they spend the time and funds necessary to remain safe and vigilant in the arena of cybersecurity. Nothing is more important to us than the safety of our clients’ funds. In this case, however, it is our operating funds and our employees’ funds that are at risk. Those funds are important, too!

The July 10 newsletter was particularly interesting in that it reports a new strain of payroll phishing that has surfaced recently. The bad actors pose as employees and request a specific pay stub from a payroll administrator or corporate executive. KnowBe4 reports that it has seen hundreds of these phishing attempts, all almost identically worded and possibly coming from one set of fraudsters. All of the emails came from an “oddball Comcast.net email address” with nonsense usernames of similar length.

Please read this newsletter carefully and pay attention to the emails and supporting documents. In this particular case, the bad actors opened a bank account, ordered checks for that account and used one of those checks to support the phishing attempt.

Unfortunately, many of the targeted payroll employees, always willing to help employees with their payroll concerns, have responded to the requests. The emails are simple, direct and dispense with any attempt to construct believable backstories or pretexts.  According to KnowBe4, the emails invite an unthinking, reflexive response from targeted users.

Share this information with your staff members and encourage them to avoid those unthinking, reflexive responses!

Advertisements

Redevelopment of golf courses might be possible in South Carolina

Standard

In April, this blog discussed the redevelopment of two Horry County golf courses. The North and South courses at Deer Track Golf Resort in Deerfield Plantation have been closed for more than ten years and are finally being redeveloped as residential lots. Adjacent lot owners waged class actions in Horry County seeking to have the use of the properties in question restricted to golf courses or open spaces. While these battles were being waged in court, nature attempted to reclaim the properties. One property owner testified that his views changed from overlooking a manicured golf course to overlooking a “sea of weeds”.

Similar battles have been successful in other parts of the country. The cases are fact intensive and turn on the law of implied easements, which, of course, varies widely from state to state. Plats showing golf courses may provide rights in adjacent lot owners, depending on the recorded documents, the sales program and the law of implied easements in the location.

golf course

I wanted to invite those interested in this area of the law to take a look at an article published in June by www.citylab.com. The article, written by Nolan Gray, is entitled “Dead Golf Courses Are the New NIMBY Battlefield”. In the interest of full disclosure, I had to Google NIMBY. This acronym stands for “not in my back yard”.

The article states that golf is dying, according to many experts. One study cited in Citylab’s article found that the number of regular golfers fell from 30 to 20.9 million between 2002 and 2016. The thinking is that the fall of Tiger Woods may have led to much of this gloom and doom around golfing. But Mr. Gray believes that the bigger story involves the sport’s aging demographics and the fact that millennials are not interested in the expensive, slow sport that provides few health benefits.

Golf courses and golf clubs across the country are closing, leaving the land to be redeveloped. Mr. Gray’s article states that the average 18-hole golf course sits on 150 acres, property that could host around 600 new single-family detached homes. Add to this mix the fact that many golf communities were built in areas with good schools and work opportunities. These properties are, therefore, particularly valuable in areas where housing inventory is a challenge.

So, what prohibits the development of these properties into residential subdivisions? Zoning is one of the challenges. Many golf courses are zoned for commercial uses to accommodate clubhouses, restaurants, pro shops and bars. But the main stumbling block, according to Mr. Gray, is the NIMBY attitude of neighbors. Residents near golf courses prefer that the properties be turned into parks, open spaces and natural preserves.

Let’s look, for example, at the Deerfield Plantation cases. First, the facts: The golf courses and surrounding residential subdivisions were originally developed beginning in the late 1970’s. The plats contained notes to the effect that the streets were dedicated for public use but the golf courses were to be maintained privately and were specifically not dedicated to public use.

The covenants gave the lot owners no rights, property, contractual, or otherwise, in the golf courses. A Property Report that was delivered to all prospective lot purchasers described the costs of golf memberships, which were not included in lot prices, and stated that to be allowed to use the golf courses, members would be required to pay initial dues and annual dues and fees. The real estate agents made it clear during the sales program that the mere purchase of a lot did not give a lot owner any right or entitlement to use the golf courses. The deeds of the lots did not convey any easements or other interests in the golf courses.

One plaintiff, who was also a real estate agent, testified that he was never told the golf courses would operate in perpetuity and that the real estate agents never told other potential purchasers that the golf courses would always exist on the properties.

What caused the golf courses to fail? When the golf courses opened, there were 30 – 40 golf courses in the Myrtle Beach area. By the time the golf courses closed, there were nearly 125 courses. Property taxes in the golf courses increased from $7,800 per year to $90,000 per year.  And then the economy tanked. These three factors have occurred across the country to varying extents.

Now, let’s look at South Carolina law. In one of the cases, a 38-page Order of Thomas J. Wills, Special Referee, examined the law of implied easements in South Carolina. I’m summarizing and eliminating the citations for this brief discussion.

The Order states that implied easements are not favored by the courts in South Carolina and must be strictly construed. The intent of the parties controls the existence and scope of implied easements, and the best evidence of that intent is the recorded documents. While case law in South Carolina is clear that lot owners in subdivisions hold easements in streets shown on plats by which their lots are sold, the order states that this rule does not extend beyond access, which is necessary and expected for residential purposes. Finally, the order states that no implied easements in views, breezes, light or air exist in this state.

Finally, these golf courses will be redeveloped into new residential subdivisions. Will we see more of this litigation in South Carolina?  Probably. While the law in South Carolina appears generally to favor redevelopment in these cases, there is no doubt that the facts in some of the situations may give rise to implied easements in adjacent lot owners, even in the face of our law. As long as we have NIMBY attitudes of those who live near defunct golf courses, we will continue to see litigation in this area.

Feds extend timeframe of FinCEN order

Standard

Will this obligation eventually extend to South Carolina?

Secretly purchasing expensive real estate continues to be a popular method for criminals to launder dirty money. Setting up shell entities allows these criminals to hide their identities. When the real estate is later sold, the money has been miraculously cleaned.

In early 2016, The Financial Crimes Enforcement Network (FinCEN) of the United States Department of the Treasurer issued an order that required the four largest title insurance companies to identify the natural persons or “beneficial owners” behind the legal entities that purchase some expensive residential properties.

shutterstock_1074483872

At that time, the reach of the project extended to the Borough of Manhattan in New York City, and Dade County, Florida, where Miami is located. In those two locations, the designated title insurance companies were required to disclose to the government the names of buyers who paid cash for properties over $1 million in Miami and over $3 million in Manhattan. The natural persons behind the legal entities had to be reported for any ownership of at least 25 percent in an affected property.

By order effective August 28, 2016, all title insurance underwriters, in addition to their affiliates and agents, were required to be involved in the reporting process, and the footprint of the project was extended.

The targeted areas and their price thresholds as of August 28, 2016 were:

  • Borough of Manhattan, New York; $3 million;
  • Boroughs of Brooklyn, Queens and Bronx, New York; $1.5 million;
  • Borough of Staten Island, New York; $1.5 million;
  • Miami-Dade, Broward and Palm Beach Counties, Florida; $1 million;
  • Los Angeles, San Francisco, San Mateo, Santa Clara and San Diego Counties, California; $2 million; and
  • Bexar County (San Antonio), Texas; $500,000.

By order effective September 22, 2017, wire transfers were included, and the footprint of the project will include transactions over $3 million in the city and county of Honolulu, Hawaii.

The Geographic Targeting Orders were updated again beginning March 21, 2018, and extended to September 16, 2018

Although the initial project was termed temporary and exploratory, FinCEN has indicated that the project is helping law enforcement identify possible illicit activity and is also informing future regulatory approaches.

We have no way of knowing whether or when this program may be expanded to South Carolina, but it is entirely likely that expensive properties along our coast are being used in money laundering schemes. We will keep a close watch on this program for possible expansion!

New Cybersecurity law in SC affects insurance companies and agents

Standard

The effective date is January 1, 2019

South Carolina’s legislature passed a cybersecurity bill on April 18, and Governor Henry McMaster signed it into law on May 3. The new law, which requires that insurers and producers (agents) must establish “strong and aggressive” programs to protect companies and consumers from data breaches, goes into effect at the beginning of next year. The law is called South Carolina Data Security Act, and it will be found at §38-99-10 et seq. of the South Carolina Code.

Insurers and agents must develop, implement and maintain a comprehensive written information security program based on internal risk assessments which contain administrative, technical and physical safeguards for the protection of nonpublic information.

New rules were created that include overseeing third party providers, investigating data breaches and notifying regulators, including the South Carolina Department of Insurance, of cybersecurity events.

security unlocked data breach

Notification is required to the DOI within 72 hours after determining a cybersecurity event has occurred. Each incident must also be investigated to determine the scope of the breach, the nonpublic information compromised, and the measures to restore the security of the information.

Safe guarding individual insurance policy holders’ personal information is a high priority in the wake of several major insurance companies’ data breaches. Insurers and agents are required to mitigate the potential damage caused by date breaches.

South Carolina was the first state to pass this measure based on the model law developed by the National Association of Insurance Commissioners Cybersecurity Working Group. South Carolina Insurance Director Raymond Farmer chaired the group.

How will this new law be applied to real estate lawyers who are also title insurance agents?  My guess is that the title insurance companies, which probably already have complying programs in place, will provide guidance to their agents between now and the end of the year. Stay tuned!

Two new fraud scams

Standard

The fraudsters keep updating their repertoires!

Fraudsters are creative! It seems as soon as we learn and educate our staff members about new fraud schemes, the swindlers change their schemes to keep us on our toes. I wanted to pass along two new schemes that recently came to my attention.

The first was reported in our company publication, Fraud Insights, and it involved a residential sale in Las Vegas. An astute title insurance company employee, Larissa Conrad, was able to frustrate the fraudster’s plans. Here’s how the scheme unfolded. On March 7, Larissa sent an estimated closing statement to the listing agent. The closing involved the payoff of a Wells Fargo mortgage. The listing agent purportedly sent back to Larissa, by email, an “updated” payoff statement. Larissa compared the two payoff statements carefully. The wiring instructions were particularly troubling:

Larissa called the payoff lender and confirmed her suspicion that the second payoff was from a fraudster. She then called the listing agent, using a trusted telephone number, and reported that someone was posing as him in the transaction and sending emails from an account that looked like his. She wired the correct payoff amount using the correct wiring instructions, saving $153,300.37.

The second scam, involving texting, was reported by CyberheistNews. The victim receives a text asking whether a password reset for a Gmail account has been requested. If not, the text advises, please reply with the word “STOP”. If the victim replies with “STOP”, the next text urges the victim to send a six-digit numerical code in order to prevent the password from being changed. By sending the code back to the attacker, the victim is enables the bad guy to complete the password change and to have access to the account and all its email.

Remember that Google and other companies will not ask whether you don’t want to do something with your account. A reply to a text like this often notifies the fraudster that a valid telephone number has been reached.

two factor authentication

A two-factor authentication process is highly recommended because it provides an additional layer of security and makes it harder for attackers to gain access. The victim’s password alone is not enough to pass a two-factor authentication process. Typically, the first authentication factor would be based on knowledge (a password) and the second factor would be based on possession (of an ID card, a token or a smartphone, for example). Ask your IT professionals for assistance is keeping your accounts safe by using this process.

And, as always, the best advice may be to keep schooling yourself about the various scams as they are reported. I’ll do my best to help!

Despite a decade of litigation by lot owners….

Standard

Two Surfside golf courses are being redeveloped into residential lots

The North and South courses at Deer Track Golf Resort in Deerfield Plantation have been closed for more than ten years and are finally being redeveloped as residential lots. Adjacent lot owners waged class actions in Horry County seeking to have the use of the properties in question restricted to golf courses or open spaces. While these battles were being waged in court, nature attempted to reclaim the properties. One property owner testified that his views changed from overlooking a manicured golf course to overlooking a “sea of weeds”.

Similar battles have been successful in other parts of the country. The cases are fact intensive and turn on the law of implied easements, which, of course, varies widely from state to state. Plats showing golf courses may provide rights in adjacent lot owners, depending on the recorded documents, the sales program and the law of implied easements in the location.

golf course

Let’s look at how the Deerfield Plantation cases were decided. First, the facts:  The golf courses and surrounding residential subdivisions were originally developed beginning in the late 1970’s. The plats contained notes to the effect that the streets were dedicated for public use but the golf courses were to be maintained privately and were specifically not dedicated to public use.

The covenants gave the lot owners no rights, property, contractual, or otherwise, in the golf courses. A Property Report that was delivered to all prospective lot purchasers described the costs of golf memberships, which were not included in lot prices, and stated that to be allowed to use the golf courses, members would be required to pay initial dues and annual dues and fees. The real estate agents made it clear during the sales program that the mere purchase of a lot did not give a lot owner any right or entitlement to use the golf courses. The deeds of the lots did not convey any easements or other interests in the golf courses.

One plaintiff, who was also a real estate agent, testified that he was never told the golf courses would operate in perpetuity and that the real estate agents never told other potential purchasers that the golf courses would always exist on the properties.

What caused the golf courses to fail? When the golf courses opened, there were 30 – 40 golf courses in the Myrtle Beach area. By the time the golf courses closed, there were nearly 125 courses. Property taxes in the golf courses increased from $7,800 per year to $90,000 per year.  And then the economy tanked. These three factors have occurred across the country to varying extents.

Now, let’s look at South Carolina law. In one of the cases, a 38-page Order of Thomas J. Wills, Special Referee, examined the law of implied easements in South Carolina. I’m summarizing and eliminating the citations for this brief discussion.

The Order states that implied easements are not favored by the courts in South Carolina and must be strictly construed. The intent of the parties controls the existence and scope of implied easements, and the best evidence of that intent is the recorded documents. While case law in South Carolina is clear that lot owners in subdivisions hold easements in streets shown on plats by which their lots are sold, the order states that this rule does not extend beyond access, which is necessary and expected for residential purposes. Finally, the order states that no implied easements in views, breezes, light or air exist in this state.

Finally, these golf courses will be redeveloped into new residential subdivisions. Will we see more of this litigation in South Carolina? Probably. While the law in South Carolina appears generally to favor redevelopment in these cases, there is no doubt that the facts in some of the situations may give rise to implied easements in adjacent lot owners, even in the face of our law.

HOA foreclosures are being challenged on multiple levels in SC

Standard

The HOA won in a recent Court of Appeals case

In January, I blogged about a Federal class action lawsuit filed in Charleston seeking to invalidate non-condo foreclosures by owners’ associations. You can read that blog here but the short version is that the suit challenges foreclosures on the grounds that these non-profit corporations don’t have the power to create liens for unpaid assessments prior to obtaining judicial judgments. Condominium associations established through the Horizontal Property Regime Act have statutory authority to create liens, but the power of non-condo projects is created by restrictive covenants. We’ll have to wait and see how that suit turns out, but if the plaintiffs there are successful, foreclosure practice will change drastically in South Carolina.

gavel house

Our Court of Appeals decided a case* on April 4th that could have made drastic changes in another way. In fact, Richland County’s Master-in-Equity, Joseph Strickland, stated in his order that “the practice of homeowners’ association foreclosures would effectively be eradicated if (the Plaintiffs’) position came to bear.”

This appeal was handled by the law office of my friend, Brian Boger, a Columbia lawyer and well-known champion of consumers’ rights. The appeal argued that the $3,036 successful bid “shocked the conscience” and violated equitable principles. The parties agreed that the home was valued at $128,000. There was a mortgage balance of $66,004, leaving equity of $61,996. The Hales did not argue that there were irregularities in foreclosure process, but instead argued that the low bid should have encouraged the Master to use his gavel to “do equity”.

Comparing the successful bid to their equity using the “Equity Method”, the Hales argued that the bid amounted to 4.8% of the fair market value of the property. The HOA argued, using the “Debt Method”, that the bid must be added to the senior mortgage balance to judge its sufficiency because the successful bidder would have to pay the senior mortgage to have good title. In this case, using the Debt Method, the bid amounted to 54.94% of the fair market value. The Court of Appeals agreed that the Debt Method was the proper method for considering a senior encumbrance in a foreclosure.

The Court found no South Carolina cases that expressly weighed the two methods of judging a bid, but pointed to prior cases that considered the amount of a senior mortgage in the determination and found a 3.15% bid sufficient. One reason the Court of Appeals prefers the Debt Method is that it will result in “fewer set asides”.  In other words, the Court of Appeals is not interested in upsetting the foreclosure practice applecart at this point.

Justice Lockemy dissented, stating that he thought it improper to give a judicial sale buyer credit for assuming a debt it is not legally required to pay. He said the Court’s decision could create a perverse circumstance where a judicial sale bidder purchases property for a de minimis amount simply to capitalize on rental revenue until the senior lienholder forecloses. The majority called this argument a solution in search of a problem because there was no evidence that the successful bidder in this case was engaged in such a scheme and because the successful bidder must satisfy the mortgage to obtain clear title.

Foreclosure practice in South Carolina remains the same…for now.

* Winrose Homeowners’ Association, Inc. v. Hale, South Carolina Court of Appeals Opinion 5549 (April 4, 2018)