County Loses ₹13 Crore in Cyber Fraud: A Case of Online Payment Scam
South Carolina County Loses $1.55 Million to Sophisticated Cyber Scam
A South Carolina county has fallen victim to a sophisticated cyber scam, resulting in the theft of approximately $1.55 million.
The Scam
The incident occurred when attackers impersonated a legitimate contractor and sent fake payment instructions to county officials via email.
The scam began on December 15, 2025, when the attackers started posing as the contractor, sending emails to county officials claiming that the bank account details for payments had been updated.
The emails contained new Electronic Funds Transfer (EFT) instructions, directing officials to send future payments to a newly provided bank account.
The messages appeared legitimate, which led county officials to trust the instructions and proceed with the payments.
The Losses
Between December 29, 2025, and January 13, 2026, four separate transfers were made to the fraudulent bank account, totaling $1,558,288.09.
The payments were made in the following amounts: $122,278.76 on December 29, 2025; $14,647.00 on January 12, 2026; $611,585.82 on January 13, 2026; and $809,776.51 on January 13, 2026.
The bank account used in the transaction was held at Wells Fargo Bank.
The Investigation
The identity of the attackers remains unknown, and they have been listed as “John Doe” and “Jane Doe” in the lawsuit filed by the county administration.
The lawsuit seeks court assistance to trace the movement of the stolen funds and attempt recovery of the money.
Upon discovering the fraudulent transfers, county officials took immediate action to recall the transactions and notified the relevant authorities.
An investigation into the matter was initiated, and the county council voted to allow the county attorney to work with investigating authorities and insurance providers to recover the stolen funds.
Cybersecurity Experts Weigh In
Cybersecurity experts have identified the incident as a classic example of Business Compromise (BEC), a type of financial fraud carried out through deceptive emails.
In such scams, attackers impersonate trusted vendors, contractors, or company officials and send altered payment instructions.
According to experts, organizations should always verify any change in bank account details through an alternate communication channel, such as a phone call to the contractor or vendor, to avoid falling victim to similar scams.
Prevention is Key
The incident highlights the importance of vigilance and strict verification procedures in preventing cyber attacks.
In recent years, government bodies, corporations, and businesses worldwide have faced similar cyber attacks, resulting in significant financial losses.
Strengthening cybersecurity protocols and maintaining strict verification procedures are essential measures to prevent such incidents.
About Author
English