$545K Vanishes: Town Scammed Via Fake Domains, Email Trick

Surfside Beach, South Carolina, recently experienced a significant financial loss due to a cunning email scam, parting with $545,598.30 on March 13. The funds, designated for utility contractor Wildcat Contractors, were rerouted to a fraudulent account in Utah. The town's cybersecurity remained intact, with no evidence of computer breaches found by a forensic team.

The fraudulent scheme involved a scammer registering two nearly identical web domains and inserting themselves into an existing email conversation to request a change in payment details. One counterfeit domain, wiidcatcontractors.com, mimicked the legitimate site by using a capital 'I' in place of a lowercase 'l'. This subtle deception was difficult to detect, passing the 'human eyeball test' according to cybersecurity experts.

The payment diversion occurred after a public works director communicated with Wildcat's CEO about an upcoming payment. A message impersonating Wildcat's project manager proposed an electronic payment method. The scammer completed a payment form containing red flags, such as an unfamiliar contact name and a Los Angeles area code for a callback number, which the contractor's CEO identified as suspicious. Surfside Beach only uncovered the fraudulent transaction 45 days after the funds were sent, leaving the contractor unpaid and facing financial strain.