Professional Liability Insurance SimplifiedKeeping Your Insurance Simple & Effective
Have Questions? Need Help? Call Us! 1-877-569-4111

Social Engineering: Theft of Data or Assets Through Frauds and Schemes

November 3, 2017

 

 

          
           Often, hackers gain entry to a firm’s systems through the lawyer’s use of the internet. Whether you are perusing the most recent e-newsletter from the bar association or updating your firm’s Facebook page, it is important to protect against unwanted visitors or viruses entering through the portal you’re using at the time. Start by using and regularly updating the security features that came with your computers and software. Regularly update your web browser software too. Software providers, computer companies, and ISPs are regularly responding to the new threats hackers develop. Use their resources to protect yours.

 

            In the end, though, “Social engineering” frauds may be the biggest risk of all, especially for lawyers who regularly handle transfers of large sums, like in real estate deals or some trusts and estates work. An example is the email where a scammer poses as an opposing attorney or banker and asks for funds from a previously negotiated transactions to be redirected to a different—and, ultimately, fraudulent—account than originally agreed to. You withdraw the funds from your escrow or trust account, transfer it to the fraudster, and now you are facing claims from both your client and the opposing party for loss of the funds and breakdown of the transaction.

 

            While some of these schemes might be stopped through technological protections against hacking of email accounts, the most effective prevention against them is, ultimately, human behavior. Lawyers and staff remaining alert to potential problems and employing good decision-making about how they respond to unusual and unexpected requests:

 

  • Be alert to signs of fraud in electronic communications: grammatical errors, unfamiliar writing style or tone. If you’ve been working with the purported correspondent for a while, you may detect that something seems off about a message.

 

  • Be suspicious of unusual timing of such requests; last minute changes to negotiated plans should be questioned.

 

  • Designate two specific individuals in every transaction who must approve any transfers or procedural changes before they occur.

 

  • Require live, person-to-person confirmation—on the telephone or face-to-face—whenever there is a change of plan regarding monetary transfers or other closing processes.

 

  • Verify with the bank how long an account has been open before transferring money to it. If it has been open less than 90 days, take additional steps to confirm its authenticity.

 

  • Require confirmation of receipt of any funds every time.

 

            Social engineering schemes can also come in the form of unsolicited emails from potential clients, social media posts, links from other lawyers, even that electronic birthday card from your great aunt. Make good choices about what you click on. As one commentator put it, “if you haphazardly visit every link and download every file sent to you in email or posted to your social networking pages, sooner or later you’re going to get nailed. Period.” (Robert G. Ferrell, 2/1/2010, https://www.cnet.com/new/in-their-words-experts-weigh-in-on-mac-vs-pc-security/). At a minimum, if you absolutely must look at kitten videos or check your fantasy team standings, use a separate device that isn’t connected to your firm’s network or systems, so that, if you do let something or someone in, they won’t make it to your clients’ information and assets.


Protexure Lawyers /// Professional Liability Made Easy

“I found the Protexure representatives to be extremely professional, knowledgeable, and courteous. They found similar coverage for me for a substantial amount less than I had been paying. I have been pleased with Protexure’s service and would recommend it highly.”

- David M. Lipschutz, Esquire

Receiving a quote from Protexure Lawyers is made super easy by the quick response time of their team. The renewal process is different from what I have ever seen, they offer a mostly filled out application which made the process even easier for me!

- Eric Schwab - Woodbridge, NJ

It was a pleasure working with you, - you gave me the most competitive price, quick turn around and good follow-up.

- Howard S. Kavenow

My account representative was very helpful in assisting me to complete my application. He made me feel like my questions and my business were a priority to him.

- Kim Davis

When faced with a substantial increase from our existing malpractice carrier, we received the name Protexure Lawyers from a referral. On contact, they were not only very prompt in processing our application, but also responded to several coverage questions we had. So far, the service has been excellent.

- Law Office of Shriver, O'Neill & Thompson

Mr. Dixon contacted me many months ago and I told him I renew my policy in September and that it would be helpful to contact me in July or August of this year. He did that; he was very patient with me and assisted me with the application process. He was extremely prompt in replying to my inquiries. I had been with the same company for many years so I was reluctant to leave them. He made the transition quite simple. I am fortunate that he was the salesman who contacted me.

- Robert Lewin

Thanks. You guys got my business because (a) your price was great, and (b) you were responsive and on top of things (a number of insurers surprisingly were not).

- Scott Maxwell

I first came in contact with Ryan on a cold call. Usually I am dismissive of these types of calls, but Ryan was brief and to the point - no hard sell or over promising. In the end, I received a less expensive policy than others I researched. I guess not all cold calls are a bad thing.

- Steve Hunter

Ryan offered to compare my current insurance with what he and his company could offer. I took him up on this, and gave him my pertinent information. I did my own research, and discovered that his quote was lower and the carrier had an A rating. I contacted my existing agent to see if she could match the quote. I had been her customer for a number of years and thought that was fair. She was unable to match Ryan's offer.

- Steve Hunter

I discussed some minor differences in the policies with my account representative, and throughout the process, he was easy to reach and called me back promptly. I value this a great deal. In the end, it was clear to me that I would receive a less expensive policy than I currently have, with the same coverage and excellent customer service.

- Steve Hunter

Copyright © 2017 All Rights Reserved

Have A Question?

We are here to help! Fill out the form below and we will get back to you shortly.

You have Successfully Submitted your question!