Cyber Police Track Down ₹56 Lakh Stolen from Indian Manufacturer to US Bank Account
Cybercrooks Target Businesses Engaging in International Trade, Stealing Millions in Spoofing Scams
Business Email Compromise (BEC) attacks, where scammers impersonate suppliers or partners, have become a significant threat to companies engaging in international trade. This tactic allows cybercriminals to exploit the trust placed in legitimate business communications, resulting in substantial financial losses.
Recent cases highlight the vulnerability of even well-established companies to these types of scams. In a recent instance, a Pune-based valve manufacturing firm fell victim to a sophisticated BEC scam, losing approximately $750,000 (₹56 lakh).
The scammers successfully impersonated the company’s Chinese supplier and convinced the victim to divert payments to a US bank account. However, the swift intervention of cyber police led to the recovery of the entire amount before it could be laundered.
It wasn’t until the company verified the authenticity of the request with the actual supplier that they realized they had been deceived. Upon being alerted to the potential scam, the cyber police launched a thorough investigation.
They discovered that the transferred funds were deposited into a US bank account, allowing them to coordinate with banking authorities to freeze the account and prevent further unauthorized transactions. Following standard legal and banking procedures, the entire amount was successfully recovered.
Experts Stress Prompt Action Against Cyber Threats
Experts stress that cases like these require immediate reporting due to the speed at which cybercriminals operate. The perpetrators typically move funds across multiple countries within a short period, making recovery extremely challenging if not done promptly.
These attacks often involve studying a company’s communication patterns, supplier network, invoice formats, and payment schedules before launching the attack. The attackers then create deceptive IDs that appear nearly identical to legitimate corporate addresses, making detection difficult for employees handling accounts and payments.
Companies Must Adopt Robust Digital Security Measures
- Multi-factor authentication
- Domain protection systems
- Advanced filters
- Regular phishing awareness training for staff members
Companies should also prioritize verifying any requests for changes in bank account details through secure means, such as video calls or official phone numbers.
This case highlights the critical need for companies to remain vigilant and proactive in protecting themselves against cyber threats. While the victim company managed to recover its funds due to timely reporting and coordinated police action, many organizations may not be so fortunate if such frauds go undetected for an extended period.