In the first case fraudsters managed to re-direct a solicitor’s post. By intercepting the post the fraudsters were able to obtain details of the solicitor’s bank accounts and used that information to withdraw moneys from those accounts. It would appear that the fraudsters, after intercepting the post requested the bank to re-issue the confidential code required to access the online banking system. The bank did so and posted the new code to the solicitor. However, due to the post being redirected, the fraudsters obtained this code and used it to access the online banking facility. Solicitors are advised to be very careful about their incoming post. If their post is disrupted or delayed, solicitors should make prompt enquiries about the reason for the delay or disruption in the receipt of post.
Online banking
In the second case, the solicitor’s computer system was accessed following the receipt of an email which contained a virus. The solicitor subsequently had difficulty accessing the online banking facility. The solicitor contacted the bank and, after following a number of steps advised by the bank, logged back on to what appeared to be the bank’s website. It would appear that the solicitor was redirected from the bank’s website. The solicitor was presented with a form requesting full details of bank accounts including confidential PIN codes and security details. Through this form the fraudsters were provided with the confidential PIN codes and security details of the solicitor. Shortly afterwards, a substantial sum of money was removed from the client account.
Solicitors are advised to ensure that their anti-virus software for all incoming emails is kept completely up-to-date. Difficulties accessing online banking should be reported immediately to the bank and a clear direction should be obtained from the bank on what information the bank will require the solicitor to input in order to restore the facility. Any request for information about bank accounts particularly where full details of confidential pin codes and security details are required should be checked out directly with the bank. Banks are very aware of the dangers of online fraud and do not require full details of confidential PIN codes and security details to be input on any forms filled out online.