Resources
Never send or accept bank account details by email
Where an email account of a solicitor has been compromised, the hacker will familiarise himself with their email correspondence.
How it works
At a later stage, for example in the close of a sale, they will issue an email from the account posing as the solicitor and requesting monies be made to a fraudulent bank account.
To counter this type of fraud it is recommended that bank account details are not provided via email.
Use other more secure communication channels. In situations where it is necessary to use email, a more secure alternative might be to split and forward the account details through two different media. This could mean sending the digits for the first half of an IBAN number via email and the latter half by letter, fax, text etc.
At this point, the recipient should contact the solicitor to verify the authenticity of both communication media used, to verbally confirm both of the following:
- The account details.
- The reason for the transfer.
Use the telephone number listed for the solicitor on the Law Society website or in the Law Directory, or other such number that is personally known to the sender or publically listed.
Have you been a victim?
Please report details to the Law Society - anonymously if preferred - using this brief online report form.
For more information and other cyber alerts, visit the Society website's Cyber Security section.
Law Society eZine
This article originally appeared in the May 2018 Law Society eZine. For more information, and to subscribe, see eNewsletters.
