Slashdot Mirror


One of Australia's Richest Men Lost $1 Million To Email Scam (bloomberg.com)

Kaye Wiggins, reporting for Bloomberg: The multi-millionaire founder of Twynam Agricultural Group lost $1 million in an email fraud, a London court heard Thursday. The British man who facilitated the theft says he's a victim too. John Kahlbetzer, who is on the Forbes list of the 50 richest Australians, lost the money when fraudsters tricked the administrator of his personal finances into transferring it to them, his court papers say. Fraudsters emailed Christine Campbell, pretending to be the 87-year-old and asking her to pay $1 million to an account held by a British man, David Aldridge, which she did. Kahlbetzer is suing Aldridge to recover the funds, but Aldridge says he was being "unwittingly used" and was himself the victim of a fraud involving a woman he met online and believed he was in a loving relationship with. Email frauds where companies' staff are tricked into transferring money are a growing problem. U.S. Federal Bureau of Investigation statistics show "business email compromise" cases, where criminals ask company officials to transfer funds, have cost more than $3 billion since 2015.

38 of 84 comments (clear)

  1. Happened to a group I know by John+Jorsett · · Score: 3, Interesting

    Somebody attempted this with an organization for which I administrate a website. They got the Treasurer's email from the site and spoofed the President's email address, asking for the current account balances. Fortunately, the Treasurer wrote to the group's secretary and asked her to handle the request. When she called the President about it, he said he had no idea what she was talking about. Scam never sleeps.

    1. Re:Happened to a group I know by Anonymous Coward · · Score: 1, Informative

      Where I work, we are required to take a the Kevin Mitnick online security training course every year.

      It is really basic. How to look at an email and detect whether or not it is a scam. Don't click on shady links. Beware of PDF and Word, etc. For many of us, it feels like a waste of time as we are reminded of common-sense stuff that we automatically do anyway.

      But.....the fact is....these scams work, and they hit businesses hard again and again. It totally makes sense for businesses to require their employees to do this every year, because among any large group of employees there is always going to be someone who needs to hear it.

    2. Re:Happened to a group I know by CrimsonAvenger · · Score: 2

      Two things:

      "Administrate" == BAD. "Administer" == GOOD.

      Do money managers really move millions around based on an unauthenticated email?? The mind boggles at the abject stupidity implied....

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    3. Re:Happened to a group I know by Solandri · · Score: 2
      There are lots of scams involving implicit authorization. Some of the ones I've encountered include
      • Letters made up to look like an official government notice for you to do some required annual government filing. The ones I got were $150 to file a statement of information for your business with the secretary of state. When I took over my dad's business, I dumped these in the trash (you can file it online for $20). My dad had gotten one at his home address, and came yelling at me demanding to know why I hadn't paid these guys. I explained the scam to him. He sheepishly admitted he'd been paying them every year for over 20 years he'd been in business.
      • Copies of the same invoice (without an invoice number) sent to both the accounting dept and to the project lead. They're gambling that the project lead will assume s/he got the only copy and hands it over to accounting, and accounting will assume they are separate bills and will pay both. I try to make sure any contracts with installment payments have different amounts for each scheduled payment to avoid this. (e.g. Break up a $6000 bill into $3500 and $2500 payments, instead of $3000 and $3000.)
      • Letter doctored to appear as a magazine/membership subscription renewal, when in fact nobody at the company subscribes to the magazine or membership. Scammers are gambling that the accountant paying the bills will automatically pay renewal notices without checking to make sure they're actual renewals.
      • Phone call from someone claiming to be from a government regulatory organization, who then pumps you for information on your company like # of employees, pay, which banks you have accounts with, etc. Probably a prelude to some future scam where they can use that information to make themselves sound more legit since the "know" inside information about your company.
      • (Limited to businesses which rent out space.) Tenant uses your name and address on a shipping waybill, then skips out on paying. When the shipping company tries to collect, they have your info as the company that requested the shipment, and the package was in fact shipped to your address, with the tenant as the "employee contact" at "your company." By the time it's gotten to this stage, the tenant has already left for greener pastures.
      • And there's the straight-out fraud where employee who is quitting buys a bunch of personal stuff on their corporate account, before vanishing.

      The secretary did good by trying to confirm it first instead of blindly carrying it out. Hope she got a bonus and a raise.

    4. Re:Happened to a group I know by GameboyRMH · · Score: 2

      Do money managers really move millions around based on an unauthenticated email?? The mind boggles at the abject stupidity implied....

      Yes. This is far from the first time this kind of scam has been pulled off.

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    5. Re:Happened to a group I know by Scarred+Intellect · · Score: 3, Interesting

      Do money managers really move millions around based on an unauthenticated email?? The mind boggles at the abject stupidity implied....

      I know someone who was handling the estate of a deceased parent. She was executor of the will. There were numerous financial accounts in various forms: checking, savings, stocks, bonds...when transferring the money to dole out the inheritance to her other siblings per the will, she had very little trouble with accounts with balances >$100,000, but the smaller accounts provided the most difficulty in terms of verifying authorization.

      500 thousand dollars? Yea, no problem.

      5 thousand dollars? We're going to need to see the notarized birth certificate, current I-9, special power of attorney signed by the owning party in the last 30 days, blood sample, and aqueous humor sample.

    6. Re:Happened to a group I know by edtice1559 · · Score: 1

      I'm not saying that this is bad, but you simply can't spot a good scam email by looking at it. Legitimate invoices do come via email The way to verify this is to find the initial authorization (usually in the form of a purchase order) for the invoice. Many larger companies won't pay any invoice without a purchase order. Unfortunately this also leads to embarrassment as things like domain name renewals end up not getting paid.

    7. Re:Happened to a group I know by Guybrush_T · · Score: 1

      And those advices are mostly missing the point because scams will just get better. A well made scam would have no shady link, no PDF nor word.

      You need proper procedure in all companies to make money transfers : either an oral confirmation, or an authenticated way to request transfers (or authenticated emails). People just don't know that there is no source authentication in emails.

  2. Oops by ErichTheRed · · Score: 1

    Sounds like whoever he outsourced his financial management to is in trouble...

    It's interesting that so many of these scams involve massive wire transfers of funds. Wire transfers aren't too common for individuals in the US, but from what I understand it's the equivalent of handing over a bag of cash to the recipient. If the funds are taken out of the account, there's no way to get it back. Why would anyone, businesses included, rely on such an irrevocable form of payment? I can understand shady international payments to Cayman Islands bank accounts or spy agencies moving money around secretly, but normal everyday transactions? Why no safeguards?

    1. Re:Oops by Solandri · · Score: 2

      Wire transfers can and are reversed all the time. That's where the second victim in the scam (David Aldridge) comes in.

      The fraudster convinces David to accept a wire transfer on her behalf. When he receives the money, he withdraws it and hands over the cash to her. She then disappears. When the bank tries to reverse the wire transfer and finds the money is gone, the person liable for it is the second mark in the fraud, not the fraudster.

      If you've ever gotten a scammy-looking email asking if you'd help transfer some money by receiving a payment (Western Union is more common, though I've seem bank wire ones), and they'll let you keep some excess funds as payment, you are the second mark. The money transfer is fraudulent. And when the transferring bank/company tries to reverse it, you will be on the hook for the full amount. (This differs from the Nigeria 419 scam, where they try to make you pre-pay some fees to initiate a transaction which never occurs. In these scams, the transaction actually occurs, and the scammer is relying on the time it takes between the transfer and reversal to dupe you into parting with the ill-gotten money.)

  3. Good by lucasnate1 · · Score: 1

    It won't hurt him much, and it's a small step in the opposite direction of the general trend of all money being concentrated in the hand of the few.

    1. Re:Good by Errol+backfiring · · Score: 1

      I somehow don't think he was scammed by robinhood@sherwood.uk.

      --
      Nae king! Nae laird! Nae yurrupiean pressedent! We willna be fooled again!
    2. Re:Good by CrimsonAvenger · · Score: 1

      You're aware that anything that'll work on a billionaire will work equally well on your IRA/401K/whatever, right? How hard would it be to send a couple thousand emails to a couple thousand money managers and skim off 5-10K each?

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
  4. Something does not add up. by 140Mandak262Jamuna · · Score: 4, Insightful
    Unless it is a routine run of the mill thing to transfer a million bucks from this account to that account, one does not transfer 1 million dollars based on email instruction.

    It is high time the Government investigate if there is a pattern of getting instruction through email and transferring money without asking questions to allow the rich guy deniability. Scenario like this: Rich guy hires goons to do stuff, sends email to financial advisor cryptically pay x $ to account Y. Financial advisor deliberately avoids getting any written instruction, phone calls, oral verification. Even if the police catch the perps, sniff up the money trail of the goons, it would stop at this "financial advisor". Who would again claim victim of fraud.

    They should find ALL the money transfers by that accountant, and see if any of it can be tied to funding illegal activity.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:Something does not add up. by Scarred+Intellect · · Score: 1

      I had no trouble closing a retirement account to cover the down payment for a house over the telephone. Zero authentication, no date of birth, no last 4 of SSN, no verification of account number, nothing...it might help that I went to school with the receptionist, and I'm sure they had caller ID to verify my phone number...but still...

    2. Re:Something does not add up. by pr0fessor · · Score: 1

      This is one of the things I like about my bank and my insurance agent they know me when I walk in the door and call me by my name. This is a good thing as even if you had my social it wouldn't help they know me to well and they wouldn't do a major transaction over email. It would be to out of character and they would call me.They have called me because I used my bank card out of town on the opposite side of the state but still in my home state and when I left the state to visit family.

    3. Re:Something does not add up. by 140Mandak262Jamuna · · Score: 1

      If you transfer a million bucks, they will call to make sure, right? Why this accountant did not do that? It is the dog that did not bark, that is significant.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    4. Re:Something does not add up. by 140Mandak262Jamuna · · Score: 1

      Hey! lookie here! champion of the downtrodden millionaires!!

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  5. Re:So this boils down like so? by Fly+Swatter · · Score: 1

    You missed the important fraud part. Criminal claims to be someone else for purpose of deception. The idiot that didn't verify the request should be slapped with negligence as well, it's their ONE JOB.

  6. Scam? by nospam007 · · Score: 1

    The word is stupidity.

  7. Re:Aldridge claims he was being unwittingly used by edtice1559 · · Score: 1

    Probably the "girlfriend" said "My uncle is sending a million bucks. Half for you half for me. He'll write it all to you. Then please put half in my account." Well this would seem unbelievable until a million dollar wire transfer showed up along with a card that said "Hope you enjoy the gift." This a really interesting way to take advantage of a third party. Typically you don't necessarily expect a scam when being *given* money.

  8. Re:Know who is at fault here? by edtice1559 · · Score: 1

    Even if all of this is true, they still don't *deserve* to be victims.

  9. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  10. Re:John Kahlbetzer's Net Worth by tsqr · · Score: 1

    Mr. Kahlbetzer's net worth is estimated to be between 750 million USD and 950 million meaning this loss represents 0.105% to 0.133% of his total wealth.

    If your net worth was $500K, would you shrug being scammed out of $500?

  11. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  12. Re:John Kahlbetzer's Net Worth by fredrated · · Score: 1

    I certainly wouldn't lose any sleep over it.

  13. Re:Watch out for Nigarian Scammers... by Anonymous Coward · · Score: 1

    I have seen something similar, but much closer to home.

    A friend of mine started dating a single mom, who lived and worked in the same city as him. She used his affection for her to motivate him to spend very recklessly on her needs, including straight-up giving her cash to help with bill payments and such. Her demand for money kept rising, and when he finally said that he needed to roll his spending back, she dumped him flat.

    My point is that dating is dangerous, especially for adults with money. Your emotions will ruin your ability to think rationally, and will motivate you to make ridiculous levels of self-sacrifice for people you trust not because they have earned your trust, but because you wish that they were trustworthy.

    People tell me I am cynical. But I have seen this with my own eyes. If you have money and must date, the best thing you can do is keep the details of your wealth secret. If it keeps coming up in conversation, dump the one you are with and keep looking.

  14. Re:John Kahlbetzer's Net Worth by tsqr · · Score: 1

    Did I miss the part of the article where Mr. Kahlbetzer complained about losing sleep?

  15. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  16. Re:John Kahlbetzer's Net Worth by angel'o'sphere · · Score: 1

    Bad in math?
    You are off by some orders of magnitude, or don't know what the % means ...

    --
    Cost free eBook I read (by iBook/Kobo/Amazon/ObookO/Gutenberg etc.): "The Green Odyssey" by Philip Jose Farmer.
  17. Re:John Kahlbetzer's Net Worth by nukenerd · · Score: 1

    You'd think after the first few hundred million, they'd reach a point where internally they'd be thinking "you know what? I'm rich enough now. I can let this go."

    I'm not rich but I'd still get pissed off by losing 0.1% of my money to a trick, whether that 01.% was $1 or £10. Like I'd get pissed off at someone beating me at a game of Scrabble if they did it by cheating, and that is worth even less in money terms.

  18. Re:John Kahlbetzer's Net Worth by OldMugwump · · Score: 1

    It's their social duty to track down the criminal and see that he's prosecuted. Otherwise they'll find new victims.

    --
    "Shoot, a fella could have a pretty good weekend in Vegas with all that stuff."
  19. This sort of thing is rampant by Mike+Van+Pelt · · Score: 1

    Working on anti-spam products, I see some of the most amazing things.

    There are dozens of "spoof person A in email to person B to get something valuable" variations. Money, W2 forms, anything.

    A recent favorite is to compromise someone's email. Keep monitoring their email, and when some financial transaction is about to happen, forge an email as if it were from the party receiving the money, to the sender of the money, saying "Oh, because reasons, our bank account had to change, send the money to ...."

    The forged email has the whole legitimate back-and-forth conversation about the transaction quoted, just as if it were a genuine reply.

  20. Re:John Kahlbetzer's Net Worth by Hognoxious · · Score: 1

    If the figures given above are correct he could have it happen once a month and it'd be less than the risk free rate of return by about an order of magnitude.

    In plain English, he makes more than that in interest, unless he has it all stuffed under the mattress.

    So no, he wouldn't end up in the poor house.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  21. Re:It's time we start holding the receiving banks by Hognoxious · · Score: 1

    So what happens when a genuine seller gets payment in advance, ships the goods, and then the buyer rolls back the transaction?

    What if everybody starts rolling back transactions willy-nilly?

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  22. Re:Know who is at fault here? by Hognoxious · · Score: 1

    You're mostly right. But then again there was an article posted here, maybe a year back,about "Business at the speed of trust". It was all about cutting bureaucracy and red tape and just gettin' 'er done and other gung-ho number-one stuff like that.

    People, especially those that fly a lot, read stuff like that and it makes their point hair stand up with excitement.

    IIRC it was posted a week after a story about how some major corp got scammed because someone didn't do all that bureaucracy shit.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  23. Re:It's time we start holding the receiving banks by Local+ID10T · · Score: 1

    So what happens when a genuine seller gets payment in advance, ships the goods, and then the buyer rolls back the transaction?

    What if everybody starts rolling back transactions willy-nilly?

    Then the banks start charging 3% transaction fees so they can include "free fraud protection" like the credit card companies do. I am sure they would be happy to do so...

    --
    "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
  24. Re:It's time we start holding the receiving banks by Hognoxious · · Score: 1

    And businesses will tell them to fuck off.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."