Payroll diversion scams plague employers

Payroll diversion scams plague employers

By Greg Collier

A Kansas police department has recently issued a warning regarding a troubling payroll scam targeting employers and businesses.

In this case, a local employer received what appeared to be a legitimate email from an employee, requesting a change to their direct deposit information to a GreenDot account. While GreenDot is a valid online-only banking service, the email was a fraudulent attempt by scammers to divert the employee’s payroll funds. If the name GreenDot sounds familiar, their prepaid debit cards are frequently used as demanded forms of payment in other scams.

The scam was only uncovered when the employer discussed the change directly with the supposed sender, who was unaware of any such request.

This scam is classified as a payroll diversion scam, where the perpetrator masquerades as an employee and contacts someone within the organization who has the authority to modify payroll details. More sophisticated versions of this scam involve hackers using social engineering tactics to access an employee’s email account. Once inside, they can either send fraudulent emails from the victim’s work account or gain entry to an online payroll portal to alter direct deposit information.

To prevent such scams, the Federal Bureau of Investigation advises caution with the information shared on social media. Personal details such as pet names, schools attended, birthdays, and family member names can provide hackers with enough information to guess passwords and gain access to sensitive accounts.

If you receive a suspicious email or believe you have been targeted by an online scam, it is crucial to report it immediately to the FBI’s Internet Crime Complaint Center. By staying informed, businesses and individuals can protect themselves from falling victim to these increasingly common scams.