Cuyahoga County Department of Consumer Affairs Warns Against Email Scams that Target Businesses and Government I earned my first degree from Tri-C® The Cuyahoga County Department of Consumer Affairs warns businesses, nonprofits and government organizations about scam emails Stephanie Bayne saved thousands that appear to come from the boss. of dollars by starting her college Although imposter scams aren’t new, the latest emails are written as career at Tri-C. a casual first-name request from the boss. The sender’s address appears to be the boss’s work email. A county employee spotted this scam email, which appeared to Stephanie chose Cuyahoga Community College (Tri-C®) for its come from a department head: “Hi, Claudia. Could you please email convenience and affordable tuition. Her credits transferred me a PDF copy of all employees’ 2015 W2s? I would like to make a quick seamlessly to Kent State University, where she began as a review. Thanks, Pat.” junior. Tri-C has allowed Stephanie to save money on the way The employee immediately contacted her boss and notified IT secuto completing her bachelor’s degree in four years. rity of the scam email. An area business received another version that read: “I need you to prepare a wire transfer for a payment, let me know if you're available so I can send you transfer details. Thanks.” Eastern Campus 4250 Richmond Road The FBI reports a 270 percent increase in what it calls “business Highland Heights, OH 44122 216-987-6000 e-mail compromise” scams. Although the boss’s email account may be 15-0443 compromised, in some cases the scammers simply spoof the sender’s address. In one case reported by the FBI, a CFO acting on what appeared to 15-0443 East - Beachwood Buzz 3.605x4.85 Ad.indd 1 8/17/15 be her boss’s orders wired a $250,000 payment to a Hong Kong bank, only to find her CEO had never made the request. These emails target employees who handle money (bookkeepers and accountants, for example) or sensitive company information (attorTO YOUR HOME OR OFFICE neys or human resources employees). Employers should warn employees to be on the lookout for emails from the boss that contain: • Requests to send sensitive information about employees or customers via email. • Instructions to make large payments to an unknown vendor or using a payment method (i.e., a wire transfer) the company doesn’t ordinarily use. • Spoofed sender addresses that are a misspelled version of the organization’s email address (for example, “flrm.com” instead of “firm.com”) or that show a different email address when a cursor hovers over the sender’s address or when the recipient hits “reply.” Employers can protect themselves from financial loss by requiring a secondary sign-off and phone verification using a known phone D O SUMMERS number for money wires. Good at any of our 9 locations. Organizations that become victims should request their financial tri-c.edu 10:39 AM FREE PICK UP & DELIVERY institution issue a “SWIFT recall” and file a Suspicious Activity Report. Scammed employers can report losses of $25,000 or more that occurred within the previous three days to the Cleveland office of the FBI at 216.522.1400. Smaller or older losses can be reported to ic3.gov. In addition, organizations in Cuyahoga County contacted by a scammer, whether or not they experienced a loss, should report it to the Cuyahoga County Department of Consumer Affairs at consumeraffairs. cuyahogacounty.us or by calling 216.443.4035. OFF 20% Your entire dry cleaning and laundry order! Incoming orders only. Not valid on alterations, households, storage or with any other offer. Expires 2-28-15. 4-30-16. A Leader for More an a Century - Since 1881 to be exact. April 2016 n Beachwood Buzz 53