BigLaw associate was duped into transferring over $2.5M to fraudster’s account, decision reveals
Image from Shutterstock.com.
An associate at Dentons Canada was duped into transferring more than $2.5 million into a fraudster’s account, according to an opinion by an Ontario judge in an insurance coverage dispute.
The Dec. 11 decision by Judge Carole J. Brown said the Vancouver-based associate sent the money from a property sale to a Hong Kong bank account after he received emails asking him to do so, report the American Lawyer and the Law Times. The emails appeared to have been sent by a mortgage company representative and two bank officials where the mortgager had an account.
Dentons Canada sought a declaration that its insurer had a duty under a computer fraud rider to reimburse about $1.7 million, the amount of money it was unable to recover after it realized it had been scammed. Brown, an Ontario superior court judge, didn’t rule because broader insurance coverage issues had to be resolved.
The fraudster had sent emails to the associate in early January 2017 advising that money from the property sale should be wired to Hong Kong because of an audit of the mortgage company’s account. Dentons called the mortgage company, Timbercreek Mortgage Servicing, to confirm the Hong Kong account information but did not receive a call back, according to Brown. Subsequent emails provided the international account information.
Dentons also requested authorization letters and received what it thought to be real authorizations from Timbercreek and the trading company that had the Hong Kong account. The funds were transferred.
When the associate heard from the real Timbercreek representative in mid-January 2017, he realized the funds had been misdirected, Brown said.
Dentons Canada spokeswoman Neetisha Seenundun said the fraudsters had obtained details about the underlying transaction in a breach of a third party’s computer system. The breach allowed the scammer to impersonate employees of the third party, Seenundun told the Law Times and the American Lawyer.
Seenundun said Dentons provides extensive annual training on cybersecurity issues, and participation is mandatory for all partners and employees.
“We have not been targeted by this scheme on any other occasion,” Seenundun told the Law Times, “although it is public knowledge that other law firms have been, as the Law Society of B.C. has issued alerts regarding this fraud to its members.”
The case is Dentons Canada v. Trisura Guarantee Insurance Co.