Phishing Scheme is Targeting Moorestown Businesses: Police

Moorestown, NJ -- Moorestown Police have been investigating a “Spear Phishing” scheme, in which the perpetrator attempts to defraud local businesses using sophisticated attacks.

“All of these attempts were directed at the finance director, accounts payable/receivable employees, or someone authorized to issue payment or process orders,” police said on Tuesday afternoon. “If any business receives an email directing them to change the financial institution on a customer’s account, it is our recommendation to always follow up this request with a phone call to the company to verify. Also avoid hitting “reply” without verifying the email address’s accuracy.”

Three cases have been reported in Moorestown. In each case, someone infiltrated a Moorestown company’s website to obtain their businesses management structure. They then pretended to be a customer for that company and mimicked their management structure.

At some point, emails are exchanged but the email of the customer is slightly altered so when the business hits reply, they are unaware that they are now carrying on a conversation with the fraudsters.

There is then an email that directs the business to send payment to a new bank account or a new ABA routing number.

“The emails are very convincing and usually mirror the salutation or other identifiers of the actual customer,” police said. “In all cases, the suspects are using actual customers names who are in the actual positions to authorize these actions.”

Anyone who needs more information should contact detectives at 856-914-3092 ordetectives@moorestownpd.com.