One month ago, in China Fraud Season Starts Early This Year, we wrote about seeing a massive increase in frauds emanating from China. I write again regarding one of those frauds because just since last month, we have dealt with two instances of that fraud and one of those involved a very sophisticated client of ours.
More than anything, I want to emphasize how easy it is to fall prey to this one.
The fraud which we are discussing is what I call “the new bank account scam” and we described it as follows in our previous post:
This scam is usually employed against a foreign company that has been making purchases from a Chinese company for an extended period. The foreign company has been making its payments pursuant to purchase orders that specify the company bank account to which payment should be made. Suddenly, the “Chinese company” (note the quote marks here) sends an email to the foreign company requesting funds for outstanding POs be made to a new bank account. Often, the name on the bank account is not the same as the name of the Chinese company. Often, the bank account is in a different city or even in a different country. Often it is for Hong Kong.
What is the scheme here? Well, it is always possible that the Chinese company has changed its bank account, but you had better be quite certain of this before you switch your payment. In the old days, the scheme was either that the Chinese company had hit hard times and was seeking a double payment or an employee at the Chinese company was seeking to get your payment instead of the company. The Chinese company would get the money in Hong Kong and then claim that you had never paid and that you still owed them money because it was completely your fault for having made the payment to someone other than to them.
Then last year this scam became even more sophisticated when computer hackers started hacking into Chinese companies’ computers and sending out invoices that purported to be on behalf of the Chinese company.
How can you avoid getting caught up in this type of fraud? Take note of the following:
- The computer networks of many Chinese companies are not secure. The networks are subject to abuse by employees of the Chinese company and by outsiders. This means that you can NEVER trust an email communication from a Chinese company. Email is inherently insecure in China and you never know with whom you are really dealing when engaging in electronic communication with Chinese companies.
- Chinese companies tend to be very loyal to their banks and so you should view with extreme suspicion any request to make a change in the payment bank. You should not even consider following such a request unless the request is made in writing on a revised purchase order stamped with the company seal. Even in that case, it is important to contact someone you know in the company with supervisory authority to ensure that the request is valid. Email requests to make a change should be ignored, but the request should be forwarded to your trusted Chinese company contact for an explanation.
- Carefully review all bank account information. Monitor both the name of the payee and the location of the bank. Where the payee is even slightly incorrect, do not pay. Where the location of the bank is in the wrong city or country, do not pay. I have seen cases where foreign buyers paid to bank accounts outside of China to payees with no connection to the seller. These cases were all obvious frauds and the buyers lost their entire payment. I have seen millions of dollars vanish into thin air with this sort of scam. The Chinese parties committing the fraud will explain the need for this irregular payment as part of a plan to hold foreign currency outside of China. This kind of arrangement is no longer required in China. Explanations of this kind are indicia of fraud and should be ignored.
If you think you are immune to this scam, you are just flat out wrong. This scam is hitting serious, savvy, large, internationally experienced companies and it is doing so because it is just so hard to stop. Our client who got hit with it was dealing with a large multi-national company based overseas (not in China). This company’s email got hacked and my client received an email with the PROPER invoice and a message saying that the company was consolidating its payment processing and going forward all payments should be made through its Guangdong office and to the following Guangdong bank account. Someone at my client’s company did exactly as told and now there is a problem between my client and this multi-national.
Yesterday, Casey Xiao-Morris, a very experienced and very savvy China consultant I know left the following comment:
Recently I received an email from Yvonne, my long-time distributor partner in Shanghai. I got suspicious of the email because the signature looked different ( Her email signature is always in English, this particular email had modified signature). I also recognized the writing style was strange too.
I called her right way. It turned out her company email system got hacked. She did not write that email content. Since then, Yvonne company moved to a more secure email system. I hope it is the end of it. Boy, it was close.
She escaped because she was so smart and so careful. Yesterday, one of our China lawyers got an email from someone who lost around $20,000 via such a scam. If you are doing business with China, be afraid. Be very afraid.
Or are you immune to this scam, and if so, how have you managed that? What are you seeing out there on this one?