Warning as email hackers target house purchase payments

Fraudsters send a spoofed or mimicked email informing the parties that bank account details have changed.

Fraudsters send a spoofed or mimicked email informing the parties that bank account details have changed.

1
Have your say

Fraudsters are targeting people involved in house purchases by hacking into email accounts, warns Action Fraud.

The fraud and cybercrime reporting centre has received reports of how unsuspecting house buyers may be directed to transfer money to bank accounts which are under the control of fraudsters, resulting in large losses for house buyers or solicitors.

“Conveyancing fraud” is committed by criminals who hack into the email chains between sellers and buyers and their solicitors and estate agents.

Waiting for the right time (usually on the day of sale completion) fraudsters send a spoofed or mimicked email informing the parties that bank account details have changed at the last minute and that money should be put into a different account.

The purchaser then transfers the sum of money into the new bank account, which is controlled by the fraudster, leaving the solicitor or client at a substantial financial loss.

As fraudsters monitor previous communications, they can make emails appear identical and delete real ones from accounts.

Action Fraud have issued the following advice to help ensure that you remain safe online

Do not feel pressured into changing any bank details. If you receive an email stating a change in the bank details don’t be afraid to question its authenticity. Check the email address carefully and if in doubt phone to check the information is correct.

Buyers and sellers should avoid using public Wi-Fi systems to check emails when house purchases are being made. Fraudsters can easily hack into vulnerable Wi-Fi systems.

Avoid posting statuses on social media about buying/selling your house or getting a mortgage. Fraudsters may get hold of this information and know the next step is a large financial transaction.

Make sure you have strong passwords for your accounts and have anti-virus installed on your devices. To create a strong password, simply choose three random words. Numbers and symbols can still be used if needed.

Review internal procedures regarding how clients are permitted to amend the bank details held for them.

At the start of the conveyancing process agree the terms to which any changes in bank details will occur, such as in person.

Anyone who believes they may be the victim of such a fraud can receive a police crime reference number by calling Action Fraud on 0300 123 2040 or use the online fraud reporting tool: http://www.actionfraud.police.uk/report_fraud