An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Federal Government introduces amendments to expand the mandates of the two historic Atlantic Accord Acts to include offshore wind energy
David Randell, Sadira Jan, Robert Grant, K.C., Greg Moores, G. John Samms, and James Gamblin The recent tabling of federal legislation is an important step for offshore wind development in the offshore areas of Nova…Read More
Newfoundland and Labrador adopts virtual Alternate Witnessing of Documents Act – for good this time!
By Joe Thorne and Megan Kieley Background During the COVID-19 public health emergency order in Newfoundland and Labrador, the government passed the Temporary Alternate Witnessing of Documents Act, which (as the name implies) temporarily permitted…Read More
By Daniela Bassan, K.C. Daniela Bassan, K.C. is a Partner and Practice Group Chair at the law firm of Stewart McKelvey (Canada) where she focuses on intellectual property and complex, multi-jurisdictional dispute resolution. The premise…Read More
By Conor O’Neil and Maria Cummings On May 9, 2023, two bills were introduced in the New Brunswick Legislature that could have material affects on the construction industry. Bills 41 and 42, of the current…Read More
Author Sara Espinal Henao, an Immigration Lawyer in our Halifax office, will be speaking on a related panel, Labour Market Impact Assessments Overview and Current Trends, at the upcoming CBA Immigration Law Conference in Ottawa,…Read More
Author Brendan Sheridan, an Immigration Lawyer in our Halifax Office, will be running a related webinar on May 30, 2023, Avoiding immigration bloopers: A webinar for the film & television industry, in partnership with Screen…Read More
Whose information is it anyway? Implications of the York University decision on public and private sector privacy and confidentiality
Included in Discovery: Atlantic Education & the Law – Issue 12 By Charlotte Henderson Privacy and confidentiality requirements are some of the most important responsibilities of organizations today. An organization’s ability to properly manage information,…Read More
Included in Discovery: Atlantic Education & the Law – Issue 12 By Hilary Newman & Jacob Zelman A non-disclosure agreement, or “NDA”, is a legal contract in which two or more persons agree to keep the…Read More
By Graham Haynes & Isaac McLellan Introduction The Canadian federal budget was unveiled on Tuesday, March 28, 2023 (“Budget 2023”)1 , and proposes significant changes to the General Anti-Avoidance Rule (the “GAAR”) in Canadian tax…Read More
When closed doors make sense: Court dismisses challenge to university board’s procedure for in camera discussions
Included in Discovery: Atlantic Education & the Law – Issue 12 By Scott Campbell, Jennifer Taylor, Folu Adesanya A long-standing dispute over governance practices at the Cape Breton University Board of Governors was recently resolved…Read More