Abzockmail: Saxon Ministry transfers fraudsters 225,000 euros

internet fraud
Fallen for scam mail: Saxon ministry transfers 225,000 euros to scammers

Email scams continue to be hugely successful. Now even the Saxon Ministry of Health has fallen into the trap. There have been warnings about this scam since 2016.

Everyone should be familiar with fraudulent e-mails: In e-mails that often look deceptively real, private individuals or companies are confronted with supposedly unpaid bills. However, whoever transfers the money does not pay an actually outstanding amount. Instead, he falls into the trap of professional scammers. A recent case shows that the scam doesn’t just work for inexperienced Internet amateurs.

The Health Ministry of the federal state of Saxony recently fell for such a fraudulent email. This was first reported by the “Freie Presse Chemnitz”, meanwhile the authority has also confirmed the incident to the dpa press agency. The ministry therefore transferred 225,000 euros. And that, although the process was even checked internally.

Known scam

Unfortunately, the corresponding scam is well known, and there was already a warning in 2016 Saxony State Criminal Police Office. The fraudsters claim that the victims have changed their account details. Instead of going to the right account, the invoice amounts that actually have to be paid end up in the fraudster’s account. Unlike classic mass emails, these attacks are targeted: the criminals hack into existing communication between companies or authorities. The e-mails therefore refer to actually existing claims, also mention the specific amount and correct invoice numbers.

In this specific case, it was about the purchase of a barrier fence. In order to prevent wild boars potentially infected with diseases from immigrating from neighboring states, the Free State has provided 30 million euros for the construction of a 700-kilometer fence. The invoice referred to a section. According to its own statements, the ministry always checks invoices for information that is only known to the two contracting parties. Because the rip-off email contained such information, the payment was approved.

exam failed

But that doesn’t mean the fraud wasn’t obvious. Although the contact details such as the correct e-mail and telephone number were removed from the signature of the copied e-mail, the fraud could have been identified from the sender address, according to the report. Although the bill was checked by two clerks, according to the authority, this was not noticed. The possibility of confirming the account change via known telephone numbers was also not used.

The case is now being examined in detail, both criminal law options and internal processes are being examined, according to the dpa. The ministry has already drawn the first conclusions. According to the “Freie Presse”, invoicing by e-mail has been restricted for the time being to be on the safe side. In addition, account changes by contractual partners should be checked more closely. However, it is questionable whether the stolen tax money will turn up again: According to the LKA, the scam is preferably used to have the money transferred abroad.

Sources:free pressdpa, LKA warning