An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Decision
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
Key Takeaway
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Archive
Damages for pain and suffering are capped for Nova Scotians who are injured in motor vehicle accidents if their injuries are considered “minor.” The cap was amended for accidents occurring on or after April 28,…
Read MoreGrant Machum & Sean Kelly A recent decision from the Supreme Court of British Columbia, Ly v. British Columbia (Interior Health Authority) 2017 BCSC 42, provides helpful clarification of the law on termination of probationary employees on the basis…
Read MorePerlene Morrison and Hilary Newman The Supreme Court of Canada recently declined to hear an appeal from the Ontario Court of Appeal decision in Campbell v Bruce (County), 2016 ONCA 371. The Court of Appeal confirmed the lower court finding…
Read MoreRick Dunlop In my December 15, 2016 article, Federal Government’s Cannabis Report: What does it mean for employers?, I noted the Report’s1 suggestion that there was a lack of research to reliably determine when individuals are impaired…
Read MoreRick Dunlop and Michelle Black On March 14, 2014, CanMar Contracting Limited (“CanMar”) granted a day off to two of its hard working and longer serving employees so they could spend time with their respective families. That…
Read MoreJoe Thorne and Meaghan McCaw The doctrine of unconscionability is an equitable remedy available in exceptional circumstances where a bargain between parties, be it a settlement or a release, may be set aside on the basis that…
Read MoreJonathan Coady After more than five years, the Prince Edward Island Information and Privacy Commissioner (the “Privacy Commissioner”) has completed her review into more than sixty records withheld by a local school board on the…
Read MorePeter McLellan, QC & Richard Jordan Introduction On February 21, 2017 the Nova Scotia Government passed Bill 75 – the Teachers’ Professional Agreement and Classroom Improvement (2017) Act. This Bulletin will provide some background to what is, today,…
Read MoreBruce Grant, QC and Justin Hewitt In the recent decision of Scotia Mortgage Corporation v Furlong1 the Supreme Court of Newfoundland and Labrador confirmed that where a law firm acts jointly for the borrower and lender in the placement…
Read MoreThe Supreme Court of Canada released its decision in Sabean v Portage La Prairie Mutual Insurance Co, 2017 SCC 7 at the end of January, finally answering an insurance policy question that had divided the lower…
Read More