Email Scam Costs South Carolina Town $545K via Typo-Squatting

• •Surfside Beach lost over $545K due to a business email compromise scam.
• •Fraudsters used a lookalike domain to impersonate the contractor's email.
• •The town's insurer initially denied coverage, complicating recovery efforts.

Surfside Beach, South Carolina, lost $545,598.30 due to a business email compromise scam. A fraudster impersonated the contractor Wildcat Contractors by using a lookalike email domain, tricking the town into changing a payment method to an electronic transfer. The scammer's domain included a capital 'I' instead of a lowercase 'l', making it difficult to detect. The town's finance director confirmed that a payment was made to a fraudulent account in Utah instead of to Wildcat. Both the town and the contractor are now disputing liability, with the town's insurer initially refusing to cover the loss. Investigations revealed that the scammers used spoofed email domains and forged documents to facilitate the fraud. The town is working with law enforcement and has implemented new security measures to prevent future incidents.