Around two or three times per month, KVC Health Systems, a midsize nonprofit agency for child welfare based in Kansas City, receives phishing emails from criminals with the goal of rerouting an employee’s paycheck by direct deposit.
The emails look legitimate at first, as though they come from the CEO, CFO or payroll director.
The scammer is trying to convince human resources personnel to change the bank account and routing information the employee uses to have paychecks direct-deposited. Once routed to the criminal’s account, the company is on the hook for replacing the stolen funds and the employee faces the inconvenience of a late paycheck. Read more