COLUMBUS – Auditor of State Keith Faber is again urging state and local government employees to be extra diligent in reviewing requests to redirect payments from public accounts, as online scammers continue to target public offices.

At least 23 governmental offices, including cities, villages, townships, and school districts, have been affected by payment re-direct attacks over the past 12 months, causing hundreds of thousands of dollars in losses of public funds.

Auditor Faber has issued a Bulletin warning of spear phishing attacks and providing information on training to help protect taxpayer resources (ohioauditor.gov/publications/bulletins/2024/2024-003.pdf).

“These criminals will stop at nothing as they try to convince government employees to send them money,” Auditor Faber said. “Stop, think, verify, and validate before signing off on any payouts of public funds. Make sure you know who you are sending money to before hitting send.”

The re-direct schemes, or “business email compromises,” often involve seemingly innocent messages to government offices from individuals impersonating vendors or other employees and seeking to have payments sent to different bank accounts. 

Unsuspecting Ohio government offices, thinking they are dealing with a known vendor or employee, process the requests and change banking information without following the guidance in the Bulletin to independently verify the legitimacy of the request or the identity of the requester. 

Once the funds are transferred, they’re often difficult to recoup. One recent example involved the theft of more than $700,000 from the Granville Recreation District in Licking County (thereportingproject.org/granville-rec-loses-713000-more-than-half-its-annual-budget-in-phishing-scam/).

The Auditor of State’s Bulletin includes tips for identifying the schemes and preventing the transfer of public funds to cyber crooks. The office also has assembled information on free training and other resources to assist government offices in avoiding the phishing scams (ohioauditor.gov/fraud/cybersecurity.html).

###

The Auditor of State’s Office, one of five independently elected statewide offices in Ohio, is responsible for auditing more than 5,900 state and local government agencies. Under the direction of Auditor Keith Faber, the office also provides financial services to local governments, investigates and prevents fraud in public agencies, and promotes transparency in government. 

Public Affairs
Contact: Marc Kovac
press@ohioauditor.gov