[masraum]

Originally Posted by cabmando

I know he had his IT person do all sorts of work to make sure it wasn't on his end but the buyer lost the money. I heard today that the lady on Shark Tank had something similar happen. After my friend told me what happened I started calling buyers to let them know they'd only get one set of wire instructions and to call me to confirm prior to sending.

I did a search for "second wire transfer instructions scam" (without the quotes) and the first 3 articles that I looked at said that this is common and means that one of the parties probably has compromised email from phishing.

To me it makes the most sense that the person that received the email with the instructions has a compromised account and when the crook saw that email come in, they then sent another very similar email really quickly with the new data. Of course, it could be the email account at the other end too. Either end would work. What would be smartest would be to have the business end hacked, but if you've got enough consumer ends hacked and just monitor them for certain keywords...