Please be wary when customers are transferring funds. Always advise customers to confirm they are sending a payment to the correct recipient, and the correct bank details. We have been made aware of instances where scammers have intercepted emails and requested payments be made to a bank account different to those of the legitimate seller/dealer.
How the scam works
This scam most often targets buyers, so we will explain this from the perspective of a buyer.
A buyer inspects a car and agrees to purchase it for $45,000. The dealer’s name is XYZ car dealer and they exchange email addresses with the buyer, so they can arrange payment and transfer of the vehicle.
That afternoon, the buyer receives an email from XYZ car dealer which includes their BSB and bank account number, so the buyer can send them a payment for the vehicle.
A short time later, the buyer receives another email from what appears to be the XYZ car dealer email address, asking for the payment to be made to different bank account details.
In reality, the second email was sent by scammers, from a very similar, but different email address.
The buyer makes the payment to the updated details supplied in the second email, thinking that the payment is going to XYZ car dealer.
However, the buyer’s payment has been sent to a scammer.
This typically happens in one of the following ways:
1 - The scammer has gained access to the seller’s email account without the seller’s knowledge and sends through the updated bank details.
2 - The scammer sends an email from a barely noticeable variation to the seller’s email address, with the updated bank details.
XYZ car dealer is unaware of the second email and will not receive the payment made.
The buyer is unlikely to notice anything unusual, until they receive a request for payment from the seller as they have not received the money.
If the buyer happens to respond to the email to query the change to the payment details, the scammer will respond justifying the change.
Buyers should always confirm banking details directly with the seller via a phone call, in person, or through the carsales in-app messaging facility before making a payment.
Another option is to make a ‘penny test payment’ first. Where the buyer makes a very small deposit and confirms with the seller via phone or in person that the funds have been received, to verify you have the correct banking details before making a larger transfer.
Protect yourself
STOP – Don’t rush to act. Speak to the seller in person, through the carsales in-app messaging facility or over the phone to check the payment details are correct.
THINK – Ask yourself: Do I really know who I am communicating with? Scammers can make details appear legitimate and very closely recreate emails which appear to be from the person you have been dealing with – only changing banking details for payment.
PROTECT – Act quickly if something feels wrong. If you have shared financial information or transferred money, contact your bank immediately.
Australian Government Website
- Contact the Australian Competition and Consumer Affairs Commission (ACCC) on 1300 302 502
- Report a scam through Scam Watch
- You can also report online fraud to the Australian Government via ReportCyber
- Sign up for the Australian Signals Directorate’s Australian Cyber Security Centre’s Alert Service
.
