I NEED YOUR URGENT REPLY (Wire Transfer Scam)

Beware of requests to immediately wire funds that arrive through suspicious emails that are full of grammatical errors and typos, have a mismatch on the sender's name and email address, and stress urgency.

These emails generally target a person with financial responsibility by a scammer masquerading as an executive, officer or official, though most often the email addresses are bogus. The following is an example of one reported today, along with the conversation thread created when engaging with the scammer. For other examples see: Spear Phishing Wire Transfer Request and Wire Transfer Scam Targeting Professional Association Treasurers.


From: Jane Doe <agentjacksoncole@gmail.com>
Date: November 7, 2017 at 11:19 AM EST
To: John Smith <john _smith@brown.edu>
Subject: Re: I NEED YOUR URGENT REPLY

Hello, Are you available? I need you to send out a wire payment before the time runs out, so let me know when you are free so i can send you the beneficiary details.

Thank you.
Jane Doe

On Tue, Nov 7, 2017 at 11:56 AM, John Smith <john_smith@brown.edu> wrote:
Yes I am, let me know what I should do

On Tue, Nov 7, 2017 at 12:02 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
okay good, i will be sending you the beneficiary details now so you can make the wire transfer

Thank you.
Jane Doe

On Nov 7, 2017, at 12:30 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
hello are you still available?

On Tue, Nov 7, 2017 at 12:32 PM, John Smith <john_smith@brown.edu> wrote:
Yes. Want to give me a call? 123-456-7890

On Tue, Nov 7, 2017 at 12:37 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
Okay good, i'm attending meetings that is why i want you to handle. Below Info is the beneficiary details, I want you to transfer it now

Please wire $7,500 USD  to
wellsfargo
Routing Number: 061000227
Account Number: 1000183373909
Name on Account: Cheryl Chewning

On Nov 7, 2017, at 12:49 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
Send me a confirmation once it is sent

Thanks
Jane Doe

On Tue, Nov 7, 2017 at 12:57 PM, John Smith <john_smith@brown.edu> wrote:
Just wanted to ask, I don't seem to have access to the the account, and Phyllis isn't picking up. I don't believe I was ever actually given treasurer signatory. What should I do from here? I've already asked for advice but I haven't gotten any answers.

On Nov 7, 2017, at 1:14 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
Okay, Try and get through with Phyllis and also forward the beneficiary details so it can be sent on time.

Thanks
Jane Doe

On Tue, Nov 7, 2017 at 1:15 PM, John Smith <john_smith@brown.edu> wrote:
I've been trying to get a hold of her for the past hour. I will continue to call, and I'll let you know when I get through to her.

On Nov 7, 2017, at 1:17 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
Okay good thanks.

On Tue, Nov 7, 2017 at 1:51 PM, John Smith <john_smith@brown.edu> wrote:
Ok so the office said that they need an invoice for the payment and they also need the beneficiary to complete the "supplier registration" form before they can do any wire transfer. Also since I don't know the reason behind the wire, I wasn't able to give her any information.

On Nov 7, 2017, at 2:06 PM, Jane Doe <agentjacksoncole@gmail.com> wrote:
okay tell her I need her to make a remittance to a vendor today. Let it be coded Equipment & Supplies expense, there's need to fill out a supplier registration now, i will be doing that later when i'm available, Just Send her the beneficiary details for the wire now as soon as possible.

Thanks
Jane Doe

Phishing
Phishing Email (on campus)

Written by pfalcon@brown.edu on