In another business email compromise scam, the police received a report on Apr 30 that a Singapore-based commodity trading firm had been deceived into transferring US$6.6 million to a fraudulent bank account in Oman.
The victim’s staff had received an email that appeared to be from its legitimate supplier, but the domain name had been subtly altered by transposing two letters, making the spoofed address “virtually indistinguishable from the genuine one”, said police.
Believing that the request was authentic, the staff initiated the transfer of the full amount to the fraudulent bank account, before discovering the fraud the next day, after the genuine supplier notified them that they had not changed their bank account.
