An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Decision
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
Key Takeaway
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Archive
DUE DILIGENCE Generally, occupational health and safety legislation in Atlantic Canada, like other jurisdictions, requires employers to take reasonable precautions to ensure the health and safety of workers in their workplace. Read More INCIDENT RESPONSE…
Read MoreThe Cyber-safety Act (“the Act”), excepting Part V (that part amending the Safer Communities and Neighbourhoods Act), was proclaimed August 6, 2013 and is now in effect. As discussed in our May 17, 2013 Client Update and our HRLaw blog The business case…
Read MoreThe Supreme Court of Canada has now released the much anticipated decision in the case of Marine Services International Ltd. v Ryan Estate, 2013 SCC 44. In doing so, the high court has signaled, at least…
Read MoreIn Wood v. Wood et al, 2013 PESC 11, a motion pursuant to Rule 7.08 of the Rules of Civil Procedure for court approval of a settlement involving a minor, Mr. Justice John K. Mitchell approved the settlement among the…
Read MoreClients who sit on boards of corporate employers should take note of recent amendments made to New Brunswick’s Employment Standards Act (the “ESA”) which could increase their exposure to personal liability in connection with claims advanced by…
Read MoreSignificant changes may be coming to the standard automobile policy in PEI, including increases to the accident benefits available under Section B and an increase to the so-called “cap” applicable to claims for minor personal…
Read MoreOn June 17, 2013, pursuant to the recently amended Section 70 of the Labour Relations Act for Newfoundland and Labrador (“NL”), the Government of Newfoundland and Labrador issued three Special Project Orders (“SPOs”) in respect of the…
Read MoreOn June 14, 2013, the Supreme Court of Canada (“the Court”) released the decision that employers across the country were waiting for. In CEP Local 30 v. Irving Pulp & Paper Ltd., 2013 SCC 34, a…
Read MoreThe Government of Newfoundland and Labrador (“NL”) has recently released its “Aboriginal Consultation Policy on Land and Resource Development Decisions” (the “Policy”). A copy of the Policy can be accessed here. This new Policy is the…
Read MoreThe following is a province-by-province update of legislation from a busy 2013 spring session in Atlantic Canada. Watching these developments, we know the new legislation that has passed or could soon pass, will impact our…
Read More