Chennai businessman lost Rs 2 cr in email spoofing scam: How to protect yourself from such frauds

In today’s digital world, where emails dominate our communication, cyber threats like email scams are on the rise. A recent case in Chennai serves as a stark reminder of this growing danger. A businessman fell victim to an email spoofing scam, losing a staggering Rs 2 crore.

The scam unfolded when private firm Agrigo Trading Private Limited received a deceptive email from kunal1113@gmail.com, reports TOI. The email was designed to look legitimate, as it was part of an ongoing conversation with a trusted supplier regarding a payment. Believing it to be genuine, the company’s general manager responded to the email and made an NEFT payment of $238,500 (approximately Rs 2,00,10,150) to Regions Bank in the USA.

Also read: Mumbai-based IT professional loses Rs 1.16 cr after clicking on fake advertisement: Here’s how you can stay safe

However, the next day, when the manager followed up with the supplier, it was discovered that the email was a scam. The company promptly reported the incident to the National Cyber Crime Reporting Portal, leading to a case being registered at the State Cyber Crime Investigation Centre.

Thanks to the swift action of cybercrime officials, the entire amount was successfully retrieved and credited back to the complainant’s account. This incident underscores the importance of verifying email authenticity, especially for significant financial transactions. 

Also read: Delhi man loses Rs 1.26 lakh in online job scam: How to protect yourself from such frauds

To protect yourself from similar scams, here are some essential tips:

• Check the sender’s email address: Scammers often create email addresses that closely resemble legitimate ones. Look for subtle differences.
• Watch for poor language: Spoofed emails may contain grammatical errors, spelling mistakes, or odd wording. If it seems off, double-check.
• Be cautious with urgent requests: Emails demanding immediate action, such as money transfers or account verifications, should raise red flags.
• Inspect links carefully: Hover over links to see the actual URL before clicking. If it looks suspicious, avoid it.
• Report and delete: If you receive a spoofed email, report it to the legitimate organization and then delete the email.
• Enable two-factor authentication (2FA): Adding an extra layer of security to your email accounts can help protect your sensitive information.