U.S. flag

An official website of the United States government

Government Website

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Safely connect using HTTPS

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Breadcrumb

  1. Homeland Security Investigations (HSI)
  2. News Room
  3. HSI Investigation Leads to Seizure of $3.5 Million Dollars Stolen in Business Email Compromise Scam

HSI Investigation Leads to Seizure of $3.5 Million Dollars Stolen in Business Email Compromise Scam

Release Date: November 27, 2024

HARTFORD, Conn – A Homeland Security Investigations (HSI) and Westport Police investigation has resulted in the seizure of approximately $3,507,191 in funds stolen through a business email compromise scam.

A business email compromise (BEC) scam, which usually involves email spoofing, involves the creation of email messages with a deceptive sender display name. When a bad actor engages in an email spoofing attack, the bad actor sends an email header that displays an inaccurate sender address, which can deceive the receiver unless the receiver inspects the header closely. This inaccurate sender address is usually someone the receiver knows or trusts, so the receiver might open malicious links or engage in risky behavior that the receiver would otherwise not engage in. In this case, the bad actors impersonated one of the parties to the real transactions and replaced the intended beneficiary account with their own prior to payment. By changing the intended beneficiary account, the bad actors commit a BEC scam.

According to a complaint filed Nov. 20 in U.S. District Court, in July 2024, HSI and Westport Police began investigating a BEC scam that victimized a Connecticut business. The investigation revealed that the business had received an email from a spoofed email address, which was very similar to a general contractor’s legitimate email address, with instructions for a payment that was to be made to the general contractor. In May and June 2024, the Connecticut business sent approximately $5.4 million to the bank account as instructed.

The company promptly reported the business email compromise to Westport Police, and HSI successfully traced the stolen money to nine separate bank accounts, which were seized by the government. With the filing of the forfeiture complaint, the U.S. Attorney’s Office for the District of Connecticut will seek to forfeit the proceeds of the crime and, should it be successful, work with the Department of Justice’s Money Laundering and Asset Recovery Section to return the money to the victim company.

“Business email compromise scams are sophisticated and difficult to detect, resulting in major losses for businesses,” said HSI New England Special Agent in Charge Krol. “It is essential that businesses that have been victimized by scammers reach out to law enforcement immediately for the best chance to recover their lost funds. Today’s results are a best-case scenario because of the quick action of the business and the dedication of law enforcement working together to track the money, freeze accounts, and get the business their money back. HSI is using innovative investigative methods to pursue business email compromise cases to get victims their money back and gather evidence to bring scammers to justice.”

“These cases demonstrate the U.S. Attorney’s Office’s commitment to helping victims of crime,” said U.S. Attorney Avery. “Working with our law enforcement partners, we will continue to pursue criminal prosecution of the individuals responsible for these crimes, but using civil asset forfeiture, we can expeditiously recover as much stolen money as possible and return this money to victims prior to criminal convictions. Although it can be difficult to come forward and admit that you were a victim of a crime, we stand ready to help you to the fullest extent possible.”

This case was investigated by HSI New England’s Hartford Resident Agent in Charge office and the Westport Police Department.

To avoid becoming the victim of a BEC scam, verify email addresses are accurate when checking mail on a cellphone or other mobile device before you open any attachments or follow any instructions and never make any payment changes without verifying with the intended recipient by phone or in person. If you think you have been a victim of a BEC scam, immediately contact your bank to request a recall or reversal as well as a Hold Harmless Letter or Letter of Indemnity and contact local law enforcement or the HSI Tip Line at 1-877-4-HSI-TIP.

Follow us on X, formerly known as Twitter, @HSINewEngland to learn more about HSI’s global missions and operations.

Last Updated: 11/27/2024
Was this page helpful?
This page was not helpful because the content