The Big Issue might shut down after R600,000 cyber scam

The Big Issue is battling to survive after scammers robbed it of R600,000.

• The Big Issue, which supports about 120 vendors across the Western Cape, faces possible closure.
• The job creation project was scammed out of R600,000.
• Police are investigating but Derek Carelse, managing director of The Big Issue says it is not clear if the money will be recovered.
• Meanwhile The Big Issue is relying on donors to manufacture up the money lost and support the project going.

The Huge Issue may maintain to close early next year if enough money doesn’t arrive in to cover the R600,000 lost in a cyber scam.

“If we don’t procure funds from the public now, it will execute us,” says Derek Carelse, managing director of The Huge Issue. The Gigantic Issue now hopes to raise enough money through donations to recover the R600,000 and cover operational costs.

On 6 June, The Immense Issue received an email purporting to advance from their printers, saying the printers were changing their bank account and sharing an FNB account verification letter, which was fake. Over the next three months, R600,000 was paid into this fraudulent account from The Immense Issue’s Standard Bank account.

The mistake was discovered on 6 October. By then it was too tardy.

“It’s a very simple thing. They imitate the person and the inspect and feel of the email coming from someone, but it’s not actually coming from them,” says Carelse.

Leon Hannibal is the head of investigations at Wolfpack Risk, the cyber security firm conducting an investigation for The Huge Issue pro bono. “This was clearly a case of business email compromise,” says Hannibal. He says from the emails it is clear this was a “targeted attack”. How the fraudsters got login access to the email accounts of The Immense Issue and the printers is not clear.

Looking at the attacker’s emails, Hannibal says there are “clues” that manufacture them suspect:

• The email address isn’t that of the printers;
• On the bank verification letter sent to The Huge Issue by the scammers, there is a reference number that supposedly can be verified with the bank. But this reference number is counterfeit.

Hannibal says phishing emails are very frequent and this is one of the most common ways people lose money. According to a Surfshark report, South Africa is the fifth most susceptible country to cybercrime in the world. “We’re very technically advanced but the average person is not very technically savvy,” Hannibal says.

He says the best protection against these attacks is the 2 Factor Authentication (2FA). With 2FA, a second layer of security is created, by requiring a second device to authenticate a login. For example, a unique authentication code (or token) is sent to your cellphone when you try to log in.

The bank

Carelse says that both FNB and Standard Bank acquire investigated the fraud, but the money has already been withdrawn from the scammers’ account.

In order to open a bank account today, Financial Intelligence Centre Act (FICA) requirements need to be met. This includes an ID number and proof of address.

But Roshan Jelal, Head of Fraud at FNB, says accounts which are opened legally can later be used for “nefarious purposes”.

“Fraudsters use stolen or synthetic identities to open bank accounts, or syndicates employ the services of mules who are properly authenticated and verified, and these can delay the detection and closing down of fraudulent accounts.”

Carelse says The Immense Issue had opened a case with the police.

FNB would share relevant information with the police, said Jelal.

Hannibal thinks that banks should be more proactive and that they should be tracing where the money went when it was withdrawn from the fake account. “Was it transferred into another account?” He says that there has to be a paper trail.

“This is not an anonymous bitcoin wallet. It’s a South African bank account,” he says. Banks should gain more control over sums of this size, he says.

The cover of The Enormous Issue’s November issue is dedicated to the scam. It has a sparkling yellow cover with a immense black eye in the centre and the words “DIGITAL CRIME ALERT!” written in bold. The magazine used the scam as a public service announcement. “People really need to know how this thing works. So many people acquire fallen for this”, says Carelse.

The Immense Issue was first launched in 1991 in the UK. The first South African issue appeared in 1996. “We’re essentially a job creation project,” says Carelse.

There are about 120 vendors across the Western Cape, selling “The Immense Issue” and the “Little Issue”, a literacy magazine for young learners. The magazine costs R30 and half goes to the vendor. The organisation also runs workshops for skills development such as sewing, supports vendors by helping their kids through school and fixing their homes, and also offers health support by bringing doctors to the offices.

Carelse says it’s not clear if they’ll receive their money back. The cost of operations at The Huge Issue is around R3.5-million a year.

It’s not clear if the money will ever be recovered, says managing director Derek Carelse.

Read More at GroundUp