Warning! Serious Matter! New Email Scams Emerge
Over half a million euros lost to scams cloning emails and WhatsApp. Learn how to protect yourself from this financial fraud.
English · Original discussion in Spanish · Published
Hackers are using emails and WhatsApp to defraud companies, altering bank details and diverting funds.
## The Account Certificate Scam
Cybercriminals have found a new way to empty bank accounts: identity theft through email and instant messaging. The method is as simple as it is effective. Attackers gain access to a company's email credentials, also cloning the associated WhatsApp number. From there, they monitor communications, waiting for the opportune moment to strike. When they detect a significant transaction, such as a merchandise purchase or a payment to a supplier, they send a modified account certificate, often with an altered bank account number. The client, trusting the authenticity of the document received through a channel they believe is secure, makes the transfer, but the money ends up in the hands of the scammers instead of reaching the legitimate recipient.
## Economic Impact and Mistrust
This type of fraud has caused millions in losses. A recent case reveals how one company lost over half a million euros in just two weeks due to these scams. A specific example is a city council that lost **€240,000** on an order, with the merchandise already loaded and ready for shipment. The situation creates considerable chaos, forcing affected companies to absorb the loss of merchandise and face lawsuits and profound mistrust from their clients. Recovering the money is an arduous and, in many cases, uncertain process.
## Protection and Prevention Measures
Faced with this growing threat, companies are forced to take drastic measures to safeguard their assets. This includes adopting secure password systems and modifying the company's website, to hiring cybersecurity protection and surveillance services, which represents a considerable investment. Mistrust has become so ingrained that the recommendation is clear: any communication involving changes to bank details, especially if received via WhatsApp or email, must be validated through other channels, preferably in person or by direct phone call with the usual contact person. A physical account certificate, issued directly by the bank, has become a key document for verifying the authenticity of bank accounts.
## The Account Certificate Scam
Cybercriminals have found a new way to empty bank accounts: identity theft through email and instant messaging. The method is as simple as it is effective. Attackers gain access to a company's email credentials, also cloning the associated WhatsApp number. From there, they monitor communications, waiting for the opportune moment to strike. When they detect a significant transaction, such as a merchandise purchase or a payment to a supplier, they send a modified account certificate, often with an altered bank account number. The client, trusting the authenticity of the document received through a channel they believe is secure, makes the transfer, but the money ends up in the hands of the scammers instead of reaching the legitimate recipient.
## Economic Impact and Mistrust
This type of fraud has caused millions in losses. A recent case reveals how one company lost over half a million euros in just two weeks due to these scams. A specific example is a city council that lost **€240,000** on an order, with the merchandise already loaded and ready for shipment. The situation creates considerable chaos, forcing affected companies to absorb the loss of merchandise and face lawsuits and profound mistrust from their clients. Recovering the money is an arduous and, in many cases, uncertain process.
## Protection and Prevention Measures
Faced with this growing threat, companies are forced to take drastic measures to safeguard their assets. This includes adopting secure password systems and modifying the company's website, to hiring cybersecurity protection and surveillance services, which represents a considerable investment. Mistrust has become so ingrained that the recommendation is clear: any communication involving changes to bank details, especially if received via WhatsApp or email, must be validated through other channels, preferably in person or by direct phone call with the usual contact person. A physical account certificate, issued directly by the bank, has become a key document for verifying the authenticity of bank accounts.
Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (2 replies).
More summaries
-
Tenant Union: Elite Schools, SOAS, and Think Tanks
Profiles circulating online attribute elite schools, a think tank, and unproven cross-donations to the spokespersons of the tenant union.
-
Walkers: 30 km a day when your time is worth less than a car
No car, no credit, no room to spare: delivering 30 km daily with 50 orders on foot. The case sparking debate on walkers and precarious work.
-
Public Sector Woes: Post Office Queues, Slow Courts
From long waits at the Post Office to lengthy court proceedings, Spain's public sector faces efficiency challenges. An in-depth look.
-
Euthanasia in Old Age: Autonomy vs. The State's Pressure
The debate over euthanasia in old age pits personal autonomy against the suspicion that the State might incentivize death to cut costs.
-
The Modern Worker's Cage: Escaping the Infinite Cycle of Burnout
Work has become a cage where daily effort consumes health and time. Discover why we push ourselves so hard and how to break the cycle.
-
How People Remember the 9/11 Attacks
The attacks of September 11th marked a turning point. Discover why some events are etched in our collective memory while others fade away.