An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Decision
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
Key Takeaway
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Archive
In preparing for the 2017 proxy season, you should be aware of some regulatory changes and institutional investor guidance that may impact disclosure to, and interactions with, your shareholders. This update highlights what is new…
Read MorePerlene Morrison and Hilary Newman During the fall 2016 legislative sitting, the Province of Prince Edward Island passed legislation that results in significant changes to the Planning Act. The amendments received royal assent on December 15, 2016 and…
Read MoreJoe Thorne1 and Justin Hewitt2 In Unifund Assurance Company v Churchill,3 the Newfoundland and Labrador Court of Appeal considered the application of our rules of court and the common law as they relate to disclosure of documents produced in…
Read MorePerlene Morrison Prince Edward Island’s municipal legislation is being modernized with the implementation of the Municipal Government Act (the “MGA”). The legislation has now received royal assent and will be proclaimed in force at a future date.…
Read MoreJonathan Coady and Chera-Lee Gomez It’s that time of year – the moment when we look back at the year that was and chart our course for the year ahead. For many councillors, administrators and planning professionals…
Read MorePeter McLellan, QC and Michelle Black In a recent decision, R v McCarthy’s Roofing Limited, Judge Anne Derrick provided some much-needed clarity around what it means to be a “constructor” on a job site. This is critical as…
Read MoreRick Dunlop On December 13, 2016, the Government of Canada released A Framework for the Legalization and Regulation of Cannabis in Canada: The Final Report of the Task Force on Cannabis Legalization and Regulation (“Report”). The Report’s…
Read MoreBrian Johnston, QC Canadian employers are already coping with approximately 75,000 Canadians authorized to use medical marijuana. Health Canada expects that this number will increase to about 450,000 by 2024. Employers know that medical marijuana…
Read MoreJonathan Coady With its decision in Canada Post Corporation v. City of Hamilton,1 the Ontario Court of Appeal has confirmed that the placement of community mailboxes by Canada Post is a matter beyond the reach of municipalities…
Read MoreJennifer Taylor Introduction Thanks to some dirty windows, insurance lawyers have a new go-to Supreme Court case on issues of policy interpretation: Ledcor Construction Ltd v Northbridge Indemnity Insurance Co, 2016 SCC 37. The insurers in Ledcor Construction had…
Read More