An email scam cautionary tale
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Mark Tector and Ben Currie While there have been a number of arbitration decisions on the subject, Parmar v Tribe Management Inc., 2022 BCSC 1675 appears to be the first reported civil court decision to…Read More
Sadira Jan, Dave Randell, and James Gamblin Nova Scotia (“NS”) and Newfoundland and Labrador (“NL”) are positioned to become international leaders in offshore wind and green hydrogen. Each province has expansive offshores areas, abundant wind…Read More
Kevin Landry and Nikolas Shymko The Cannabis Act came into force on October 17, 2018, putting in place framework for controlling the sale, possession, production and distribution of cannabis. The Cannabis Act requires the Minister…Read More
Brendan Sheridan and Brittany Trafford. Many events and workplaces started to feel more normal over the summer as we emerged from over two years of restrictions and COVID-19 pandemic precautions. However, as people line up…Read More
By Level Chan and Shaniqwa Thomas The Canadian Association of Pension Supervisory Authorities (CAPSA) has extended its deadline for submissions to October 14, 2022 on the following draft guidelines: Approach to Risk Management Guideline; Environmental,…Read More
G. Grant Machum and Ben Currie On Tuesday, September 13, 2022, Prime Minister Justin Trudeau declared a federal holiday on Monday, September 19, 2022 to honour the death of Queen Elizabeth II. Minister of Labour…Read More
Kevin Landry, Matt Jacobs Shareholder agreements are a key part of corporate governance. Nova Scotia is unique from other Canadian jurisdictions because the Companies Act (Nova Scotia) doesn’t contemplate ‘Unanimous Shareholder Agreements’ as other corporate…Read More
By Kathleen Leighton Last year, Canada boasted record admissions of permanent residents, despite the COVID-19 pandemic, and has an even more ambitious target for 2022 – namely, to welcome 431,000 permanent residents to the country.…Read More
By Brendan Sheridan While COVID-19 restrictions have been easing throughout Canada for the past several months, many foreign workers and international students are still feeling its effects. In particular, individuals who were on post-graduate work…Read More