The FBI is warning potential victims of a scheme that targets business and has resulted in massive financial losses in Michigan and throughout the United States. The scam, called Business Email Compromise (BEC), cost companies throughout the State of Michigan over $27 million in 2018 alone.
The schemers go to great lengths to spoof company email or use social engineering to assume the identity of the CEO, a company attorney, or trusted vendor. They research employees who manage money and use language specific to the company they are targeting, then they request a fraudulent wire transfer using dollar amounts that lend legitimacy.
There are various versions of BEC scams. Victims range from large corporations to tech companies to small businesses to non-profit organizations. Many times, the fraud targets businesses that work with foreign suppliers or regularly perform wire transfer payments.
- · Law enforcement globally has received complaints from victims in every U.S. state and in at least 100 countries.
- · From June 2016 through July 2019, law enforcement received nearly 170,000 victim complaints.
- · This amounted to more than $26 billion in losses (an increase of $14 billion since 2018)
- · In 2018 alone, Michiganders lost more than $27 million.
In September 2019, the FBI, along with our law enforcement partners, announced a large-scale, coordinated operation to combat BEC here in the U.S. and overseas:
- This operation, OPERATION REWIRED, involved a four-month sweep and coordinated law enforcement effort by the United States, Nigeria, Ghana, Turkey, Italy, France, the United Kingdom, Japan, Kenya, and Malaysia.
- · This operation resulted in 218 arrests, the seizure of nearly $3.7 million, and the disruption and recovery of approximately $118 million in fraudulent wire transfers.
- · OPERATION REWIRED sent a message to all who participated in BEC that they will be caught and prosecuted, regardless of where they are located.
If your company has been victimized by a BEC scam:
- · Contact your financial institution immediately
- · Request they contact the financial institution where the fraudulent transfer was sent
- File a complaint – regardless of the dollar loss – with theInternet Crime Complaint Center, (IC3) (www.ic3.gov)
Tips for Businesses:
- · Be wary of requests to change financial account information via email or invoice, which would reroute funds to an alternate account.
- · Pick up the phone and verify any account changes with a known legitimate business partner or entity
- · Be cautious of spoofed email addresses, which are intended to mislead the individual about the origin of the message.
- · Practice multi-level authentication by ensuring multiple reviews prior to sending money.
If you believe you have been a victim of a BEC scheme or other cyber fraud activity, please contact the FBI’s Detroit Division at 313-965-2323 or report it to the Internet Crime Complaint Center (www.ic3.gov).