Return to flip book view
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudHow do you know if you’re communicating with a colleague, or a scammer posing as a colleague?WORKPLACE SCAM: REAL OR FAKE? Message
New MessageHi Jane, Due to a change in my bank recently, I want to enroll a new direct deposit information. Could this be eective ahead of the next payroll? John DoeVice President of InfrastructureBest CompanySendFrom: John Doe <jdoe@bestcompany.org>To :Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>Subject:Re: AuthorizationThe wording of this email is odd. Is this how this person normally communicates? If not, it’s likely a scammer.The “Reply-To” email address is dierent than the “From” email address. This is common when the email address of a known colleague has been spoofed by a bad actor.REAL OR FAKE?(870) 215-4000fnbank.net/bizfraud
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudNew MessageHi Jane, Due to a change in my bank recently, I want to enroll a new direct deposit information. Could this be eective ahead of the next payroll? From: John Doe <jdoe@bestcompany.org>Subject:Re: AuthorizationReply-To: John Doe <curvesrmdc@homesc.com>From: Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>That’s ne. Just get me new info by tomorrow. Thanks,JaneAgain, the “Reply-To” email is not linked to the employee’s ocial email or a well-known, trustworthy email provider.
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudJohn Doe <jdoe@bestcompany.org> ne Smith <jsmith@bestcompany.org>John Doe <curvesrmdc@homesc.com>New MessageFrom: Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>That’s ne. Just get me new info by tomorrow. Thanks,JaneBelow is my new bank account details. Routing # : 124303120Account # : 301195677646Please revert back when you are done The follow-up email contains both improper grammer and odd phrasing.Sender is still communicating from an odd email.
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudNew MessageBelow is my new bank account details. From: John Doe <jdoe@bestcompany.org>To :Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>Hi Jane, Did you get the new info I sent yesterday for you to modify the new info as promised to work on it today ? Thank You, John DoeFrom: John Doe <jdoe@bestcompany.org>To :Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>These emails do not match, meaning the sender is communicating from an unknown email. This communication contains unnecessary pushiness, as well as strange wording.
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudNew MessageHi Jane, Did you get the new info I sent yesterday for you to modify the new info as promised to work on it today ? Thank You, From: John Doe <jdoe@bestcompany.org>To :Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>Jane Smith <jsmith@bestcompany.org> To: John Doe <curvesrmdc@homesc.com>Sorry, I’m a little confused. Do I need to revert back to the other account after this pay period? Unknown email, again!
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudNew MessageHi Jane, No. You don’t need to revert back to the other number after this month. This new accout number is what I will be using from now on. Thank You,John DoeFrom: John Doe <jdoe@bestcompany.org>To :Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>Jane Smith <jsmith@bestcompany.org>John Doe <curvesrmdc@homesc.com>Ok, thanks. I thought so, but wanted to make sure. To: Unknown email, again!
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudJohn Doe <curvesrmdc@homesc.com>New MessageFrom: Jane Smith <jsmith@bestcompany.org>Reply-To: John Doe <curvesrmdc@homesc.com>Ok, thanks. I thought so, but wanted to make sure. Hi Jane, It’s good to be sure so you could be able to get it changed right away. Thank You, John DoeJohn Doe <jdoe@bestcompany.org>Jane Smith <jsmith@bestcompany.org>Again, the sender is using odd language that doesn’t sound natural.Unknown email, again! To:
REAL OR FAKE?(870) 215-4000fnbank.net/bizfraudFAKEWORKPLACE SCAM: REAL OR FAKE?