AN urgent alert to the WA real estate and settlement industries, as well as to buyers and sellers of properties, has been issued by Consumer Protection after three recent cyber-attacks have resulted in almost $590,000 being stolen in property-related scams.
In the worst case, an elderly property buyer lost $557,000 after the fraudsters intercepted email communications between her son, who was acting on her behalf, and their settlement agent.
It is not yet known if the scammers hacked into the email account of the buyer’s son or the settlement agent or both.
In the second case, two clients of another settlement agency lost a total of $25,658 after the agency’s email account was hacked in late August and three payments towards property purchases from the clients were directed to a different bank account set up by scammers.
In the third case, a real estate agent-property manager had her email account hacked on Wednesday, September 13 and three prospective tenants received emails from scammers purporting to be the agency.
The tenants had already been told by the agent that their rental applications had been successful and the scam email requested them to deposit their bond payments into a new bank account.
A total of $7300 had been transferred to the bank account before the scam was discovered.
The scam was detected early because the property manager’s father was one of the tenants who received the email and he became suspicious.
Consumer Protection commissioner David Hillyard said buyers, sellers and tenants needed to double check any email purporting to be from their real estate or settlement agent requesting funds be sent to a bank account.
“As the scammers could have hacked into the client’s or the agency’s email server, it may appear genuine so we recommend that the change is confirmed with a phone call to the agency’s previously known number to verify if the request is authentic,’’ he said.
“Don’t reply to the email or use any numbers provided in the email as you could be communicating with the scammers.
“The same applies to agents, as clients’ email accounts could have been hacked and payments may be inadvertently diverted to the hacker’s account.
“For the property industry, it is imperative that all real estate and settlement agencies use the highest possible security software to protect the integrity of their computer systems and email servers.
“It’s believed the hacking may have occurred as a result of accessing email accounts via public Wi-Fi and consumers and industry professionals are cautioned about the dangers of using your email on open networks such as these when arranging important transactions.
“Regular changing of passwords for email and bank accounts and independent verification of requests for changes to bank or contact details should be normal practice, especially in wake of these recent cases.
“This advice really applies to all businesses, not just the property industry.
“With large amounts of money often involved, property transactions are always going to be a lucrative target for scammers who will attempt to intercept the payments, so we all need to exercise extreme vigilance.’’
Cyber-attacks and scam losses should be reported to Consumer Protection by email firstname.lastname@example.org or by calling 1300 30 40 54.