Your selected location:
  1. Home
  2. /
  3. Author
  4. /
  5. Blair Campbell
  6. /
  7. Piggy-in-the-Middle – Don’t get caught out.
5 Jan 2021

Blair Campbell, Special Counsel in the Dispute Resolution and Commercial Litigation team has provided an overview of online scams including prevention practices and what you may be able to do if you fall victim.

Online scams In article

What do the Yangebup Progress Association’s Carols by Candlelight, the City of Kalgoorlie-Boulder, and customers of builders, settlement agents, and car yards across WA all have in common? They have all been the victims of fraud known as a ‘man-in-the-middle’ or ‘business email compromise’ scam.

Reports are that online scams have increased during the COVID period, with more people transacting more online than ever before.

What is it?

Imagine you are corresponding with a supplier by email. One day your supplier sends you an email asking you to pay your account with them, but letting you know they have changed their banking details and they want to make sure you pay into their new bank account.

The email looks like it comes from your supplier, it has their name in the ‘from’ field, it has the same subject line and contents of the email discussion you’ve been having, it is signed by your supplier’s contact and uses their logos and signature panel.

You pay the money into the new bank account, then move on with your life knowing that’s a bill that’s now been taken care of.

A short time later you receive a new email from your supplier asking why they haven’t been paid. You tell them that you paid them into their new bank account – and then they tell you they don’t have a new bank account.

You immediately contact your bank, who contacts the bank you sent the money to, but the money is gone, the account closed, and the people in control of the account cannot be traced. What is worse, too often the police are either uninterested, or cannot do anything to help anyway.

You have fallen victim to a man-in-the-middle scam, and not only have you lost your payment, you still have a debt to your supplier to pay.

What can be done?

The first measures that should be taken are preventative:

  1. Ensure that you have strong systems in place not just for authorising payments to suppliers – but in how those payments are made. That might mean a system for confirming the precise bank account details any payment is made to, or at least triple-checking payments to a newly advised bank account.
  2. Ensure that you triple check the actual addresses from which emails are received. It is not difficult to replicate names, logos and signatures. It is much harder to hide the actual email addresses from which emails are received. Sometimes the name of the email does not match with the email address. Sometimes the email address will be subtly different, this could be even as small as a slight change in spelling.
  3. Ensure your IT security is strong and kept up to date.

The next measures you can take address the impact of a scam if it occurs:

  1. Make sure your insurance covers online fraud. This type of insurance is available, but is often overlooked. Cyber (or Cyber-crime) insurance might be worth adding to your existing suite of business insurance. Talk to your insurance broker.
  2. Have a forensic IT examination. This might help identify how your email was hijacked. The most persuasive examples of this type of scam occur when an existing email thread discussing an upcoming payment is taken over by scammers. A good investigation may help you discover the source of the hack, and any weakness in your or your supplier’s systems.

What is the legal position?

Obviously activity like this is a crime, but in most cases it is impossible to track down the scammers or where your money has gone. Even with Australia’s sophisticated banking system and proof of identity requirements. Some legal options for you include the following:

  1. Report the matter to your bank. Banks now have anti-fraud measures and complaint handling systems. If you act quickly the transaction may be able to be reversed, or the funds frozen.
  2. Report the matter to the police. If you have been the victim of a scam it should be reported. Local police may be able to help in some instances.
  3. Report the matter to the Australian Cyber Security Centre at cyber.gov.au’s ReportCyber link (replacing ACORN). This is the federal response to cybercrime and will often be the more appropriate mechanism to report online fraud than the local police. They have an online form to complete.

What about our losses?

If the money cannot be recovered, you have suffered a loss. The civil law has mechanisms in place that may be able to respond to assist with that loss.

The most obvious recourse is in the law of negligence. Simply put, if your supplier is responsible for the loss by failing to take reasonable precautions to secure their email networks, then they may have to bear some or all of the loss.

The key here will be in identifying the source of the hack. If you can establish it came from their end, and it occurred because they failed to implement proper IT security, you may be able to claim that your loss (being the money due in the invoice which was paid to the scammer) is equal to the amount that you still owe – and when the amounts are set-off against each other, there is no debt.

In any event, being scammed in this way is not only a financial burden, it can be an emotional one too. Take steps now to protect yourself, and if you do fall victim, please contact us for advice as soon as possible.

*This is general information only, and does not constitute specific legal advice. Please consult one of our experienced Legal Team for specific advice relevant to your situation.

Supporting Western Australians for more than 100 years

"Always fast and thorough service. Thank you"

Sitka Pil

My circumstances at the time I made contact with HHG were dire following my argument being rejected by two no win no fee firms. Following my initial meeting with HHG's employment law team I was left feeling extremely positive by the response and concern shown by HHG in regards to their support of my argument along with their preparedness to pursue an outcome on my behalf.

I accept the fact that nobody really wins in these cases (mental health/ workplace) however the end result was what would be considered most favourable and far in excess of what would have been achieved had I not sought the advice from HHG.

I have no hesitation in recommending HHG to anyone caught up in the messy circumstances I found myself in at the time.

Great advice and five-star commitment to their client!!"

Nathan Lynch

"Thank you for such great assistance with the transaction of Flying Domestics on behalf of Lorna Good. It has been such a pleasure to work with the HHG Legal Group and I look forward to working with you in the future."

Jim Goodwin

"Simon Creek and his team were at all times empathic, professional and confident.  My matter needed to be addressed within a pressing time frame, and their availability at short notice and contact after hours was much appreciated.  It caused me considerable stress, but having such a thoroughly reliable and competent team to call on helped me to feel in control. Although I hope not to need their services again in future, I would be confident in doing so!"

Dr Lana Bell

"A good outcome is what we can expect.  A great outcome is a sign of a company which does the very best for their clients. A very big thank you to Daniel Morris for showing empathy towards my small and much needed legal action.

To HHG Legal Group, thank you for a great outcome.  I would recommend your company to anyone seeking legal services."

Jan Atkinson

"Your support this morning was amazingly kind, not to mention your totally reassuring competence, knowledge and wisdom that you used on my behalf.  It was extremely reassuring to have your knowledgeable support, and I particularly appreciated your real and obvious kindness to me. It means so much at a very difficult time. I'm so grateful to you."

Family Law Client

"Janene was very professional and we established a good rapport quickly. The subject of death and wills can be quite confronting to deal with, however, Janene's approach was soft and accommodating."

Lynette Livesey

"A big thank you to HHG for their professional service, continued support, and wide range of legal knowledge. Our clients have given us nothing but kind words regarding HHG Legal Group and so we have no hesitation in referring and recommending Simon Creek and HHG Legal Group for their outstanding services and legal expertise."

Nigel Plowman, Director at McKinley Plowman & Associates

"Simon is a friendly and practical legal advisor. I have received great feedback from the clients I have referred to him and his team at HHG Legal Group."

Richard Beal, Director at BDO

"Over the last few years, I have been impressed by Simon’s legal ability, management skills, entrepreneurial spirit, personal integrity and people skills. He appears to be that rare breed of lawyer – both knowledgeable and commercial."

Michael Malone, Founder of iiNet

"Our family has been a client of HHG Legal Group over many years.  Business has included drawing up of wills for three generations and preparing of probate for my father in law. I would have no hesitation in recommending HHG Legal Group to anyone requiring such services."

Bernice Climie

"You should be congratulated for the manner in which your staff address clients and we found our dealings with your company, once again a very pleasant experience and we would like to truly thank you for your efforts."

Steve Harvey and Jane Powell

"HHG Legal were absolutely fantastic. Extremely responsive and brought calm to our chaotic family situation through their knowledge and caring attitude. Extremely professional from our very first contact with them and they expertly guided our family though the required legal process over almost a 12 month period."

Amanda Williamson

"Fantastic team! They really care about their client. Tim Colcutt is a 'go that extra mile' guy who gives his client his all. I can't recommend HHG and Tim enough."

Kerry Samson

"I had a fantastic lawyer in Matthew Lilly. He helped me out a great deal with good, sound advice in a friendly, professional manner. First class, thanks Matthew"

Graeme Hammond

"Marine Plant Systems has been working with HHG Legal Group for a few years now and they continually provide first-class service. Their professional advice has been invaluable to our company."

Carolin Grimm - Marine Plant Systems

"We were kept up to date at all times. Pricing was always updated over the time period so we remained "in budget". Personal access to someone whenever I had questions. All in all a great experience without too much fuss."

Rosslyn Tasker - COO AltusQ Pty Ltd

"Good service you can count on."

Miles Lee

"HHG Legal Group has provided outstanding support as I have taken the journey of buying a business, their professionalism is beyond reproach. Their assistance throughout the Due Diligence process has been invaluable, I would fully recommend them."

Mark Armitage

"Very friendly and efficient service - what a pleasure working with Matthew."

Jacques Taylor

"I highly recommend Daniel from HHG Lawyer in Mandurah. When dealing with a complicated legal property matter recently I was extremely impressed by Daniel's honesty and integrity and the legal advice I received. I am very happy with the service from HHG Legal."

Tony Walker

Select your location:

Please select your nearest office location so we can show you the most relevant information.