An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Decision
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
Key Takeaway
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Archive
In the Federal Budget 2011, the Government of Canada stated that it would develop a new plan to support public infrastructure beyond the expiry of the 2007 Building Canada Plan in 2013-14. The Government has…
Read MoreCASL is a new federal law aimed at eliminating unsolicited and malicious electronic communications. Originally introduced in December 2010, the majority of CASL’s provisions will come into force on July 1, 2014. Once in effect,…
Read MoreThe Termination Meeting: A time and a place for everything The decision has been made, but the ship hasn’t yet sailed. Somebody has to deliver the bad news and as difficult as this might be,…
Read MoreClient Update: Consistent Use: The Collection of Union Members’ Personal Information by their Unions
The Public Service Labour Relations Board concluded that an employer was required to provide home contact information about bargaining unit members to the union which represents them because this information is needed by the union…
Read MoreIn preparing for the 2014 proxy season, you should be aware of some regulatory changes that may impact disclosure to and interactions with your shareholders. This update highlights what is new in the 2014 proxy…
Read MoreIn a decision released by the Supreme Court of Canada (“the Court”) on January 31, 2014, the Court clarified the law with respect to the tort of interference with economic relations by unlawful means. Joyce,…
Read MoreAs we move into 2014, we know our region’s employers will want to be aware of new legislation that has passed or could soon pass that may affect them. The following is what has become…
Read MoreWhat’s new? Our employer clients will be familiar with the Labour Standards Act, which sets out the employment standards applicable in Newfoundland and Labrador. Two amendments were made to the legislation this week, both of which…
Read MoreAs many of you will now know, the Nova Scotia Government introduced legislation on Friday, December 6, 2013, amending provisions of the Nova Scotia Trade Union Act dealing with First Contract Arbitration. This client update sets out…
Read MoreIn a decision that will largely be of interest to international organizations that have been granted some type of immunity in Canada, the Supreme Court of Canada (SCC) has confirmed that international organizations enjoy immunity…
Read More