Conde Nast Sent $8 Million To A Scammer After A Single Email

from the financial-controls? dept

Apparently it’s not that hard to scam a big company out of millions of dollars these days. You can just send a single email, pretending to be from a vendor of that company. That’s apparently what a guy named Andy Surface discovered when he set up a bank account for an operation he called “Quad Graph,” likely designed to be similar to Quad/Graphics, the giant printing company that prints many big name magazines. He then sent a single email to magazine giant Conde Nast, leading the magazine company to send that new account $8 million:

In early November, Conde Nast received an “Electronic Payment Authorization? form by email at its offices in … New York. The form appeared to have been sent by Quad/Graphics. The form requested that Conde Nast direct payments for Quad Graphics to the Quad Graph Account, and provided account information. Conde Nast filled out the form and returned it by facsimile from its offices in … New York to the facsimile number provided in the form. Following Conde Nast’s receipt of the “Electronic Payment Authorization” form, Conde Nast started making payments for Quad/Graphics bills by ACH transfer from a Conde Nast account with JPMorgan Chase Bank in New York to the Quad Graph Account.

The whole thing was discovered when the actual printer noticed that it was no longer getting paid and asked Conde Nast what was up. Conde Nast went to the feds, who arrested the guy and amazingly discovered that all $8 million was still sitting in the bank account.

Filed Under: , ,
Companies: conde nast

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Conde Nast Sent $8 Million To A Scammer After A Single Email”

Subscribe: RSS Leave a comment
31 Comments
Another AC says:

Re: Wait...

Unfortunately, the persons responsible for completing/checking the paperwork on this are not computer geeks regardless of which publication they support. These are accountants and finance clerks. They can crunch the numbers with the best of them, but take from me, they are clueless when it comes to stuff like this. I work for a fairly large IT orginization. We handle everything from simple colocation to custom security solutions. Our finance/accounting teams are computer stupid some days.

senshikaze (profile) says:

Re: Irony?

You mean like the Arkansas tourist info one? Or the umpteen billion Microsoft ones? While I fully agree with you that Microsoft is scam, are you trying to say that Arkansas isn’t real?

Which of course brings up the question of what exactly are you seeing in your ads? Have you been to bad places on the ‘net? Maybe they just go you pegged. 🙂

senshikaze (profile) says:

Re: Re: Re: Irony?

I have actually changed how my adblocker works. On the main page of the top 12 sites I visit (what I have in my speeddial on firefox), I leave ads turned on. As soon as I click through to an article, though, I get no more flashy banners. Personally I think it is the best of both worlds. Sites get the views, I get to read the articles I want in detail without distraction.

Anonymous Coward says:

Re: Re: Re:2 Irony?

Interesting idea. Personally, I get all my news via RSS/Twitter feeds though, so I almost never visit the home pages anyway. But, I like the idea in general.

That said, I’d have no need for adblock if the people that ran the ads would take the time to make sure they are good. Even with all the profiling and such on the web, I’d still say less than 1% of ads appeal to me; having them load is a complete waste of time over 99% of the time.

Anonymous Coward says:

Re: Re: Re: Irony?

I live in Arkansas and I have no clue what you are talking about. All I see are IBM, SAP, Capital One and American Express ads…

Back to topic, it is of my opinion that this is one example of why companies should not outsource spam filtering. There is just no 3rd party out there that can guarantee that every legit email is sent, and every non-legit email is filtered.

Granted, mistakes can happen in house, but at our company, we are running, at most, a rate of 1-2 spam per month that actually make it to the end users inbox, and emails like this one would be caught, questioned, and actual phone calls made before any paperwork is filled out.

Sometimes, there is just no substitute for “hey…wtf is THAT?!?!”

Anonymous Coward says:

Re: Re: Re: Irony?

I didn’t hide anything. I merely prevented the site from executing a bunch of needless crap and loading a truckload of stuff from other servers that I don’t want or need. And the only benefit they present me is a slowed down browser and 90% of the browser window covered in flashing ads. Yay! Go ads!

Leave a Reply to Anonymous Coward Cancel reply

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...