Sophisticated or Personalized scams are advanced and targeted fraudulent schemes exploiting trust, vulnerabilities, and technology, making NGOs particularly susceptible due to their funding structures and operations. Common scams include fake grant offers, phishing, cyberattacks, vendor fraud, and impersonation of donors or staff. To protect themselves, NGOs should verify communications, enhance cybersecurity, train staff on recognizing threats, adopt secure financial practices, and monitor their online presence. Vigilance and due diligence are essential to mitigating these risks.
Below is an example of a Sophisticated or Personalized Scam:
A fraudulent email impersonating a billionaire named Ernest García is circulating online, falsely offering a charitable donation.
Ernest García II, an American billionaire and owner of DriveTime, a used car retailer and finance company, is also the founder of the Garcia Family Foundation, which conducts philanthropic work in Brazil and the United States. Scammers have impersonated him by using his name and company details, as seen in the fraudulent email address ([email protected]) that falsely claims to represent DriveTime. This impersonation is highly deceptive and specifically targets individuals or organizations.
The scam involves sending a tailored email that mimics the Garcia Family Foundation’s work, expressing interest in partnerships or proposals, even in countries outside Brazil and the U.S.
From: Ernest García <[email protected]>
Date: Fri, Oct 18, 2024 at 4:54 AM
Subject: Ernest García from Virgin Islands, U.S.
To: <****@***organization.org>
Dear Team,
Please allow me to express my gratitude for the extra time, effort and financial resources you have been putting in place to achieve the goals of your mission and vision over the years.
I would be interested in speaking with the CEO/founder, President or any of the Board Members if possible in relation to my intended charitable donation.
I await your response
All best regards,
Williams Freezeu
C/O Ernest García.
When the grant-seeking organization responds to this email, they receive a reply in which the scammer references Jon Ehlinger, the Vice President of DriveTime, to further create a false sense of legitimacy.
From: Ernest Garcia <[email protected]>
Date: Wed, Oct 23, 2024 at 4:02 AM
Subject: Re: Ernest García from Virgin Islands, U.S.
To: <****@***organization.org>
Dear *****,
I acknowledged the receipt of your message and we sincerely apologize for the delay in responding to your message.
I wish to once again show my gratitude to your efforts in positively impacting lives and also to particularly thank you for your interest and willingness to contribute to achieving our philanthropic goals.
You may learn more about Garcia Family Foundation through the link below:
https://garciafamilyfoundation.org/about-us/
For more information on how to get your grant from Garcia Family Foundation to aid your contribution to our philanthropic goals, feel free to contact the Grant Director of the Foundation with the details below:
Name: Jon Ehlinger
Email: [email protected]
Phone: +1 480 918 4967
Together we can make the world a better place !
Warm regards,
Ernest Garcia.
Once a proposal is submitted, the same email address quickly “approves” it, claiming that a grant will be awarded. However, to receive the grant, the recipient is directed to liaise with a fake law firm called Mesh Elite Solicitors.
Mesh Elite Solicitors appears legitimate with a website, email address, and phone number, and claims to represent the Garcia Family Foundation. The scam escalates when the firm requests a $3,620 “service fee” to establish a legal agreement between the foundation and the recipient’s organization. They may even provide a forged agreement document to reinforce the deception.
As evident from the above communication, this is a highly sophisticated and targeted scam that employs advanced techniques and carefully tailored communication to deceive organizations. The scammers conduct extensive research on their targets, including the structure, operations, and affiliations of the individuals or organizations they aim to exploit. By impersonating well-known individuals or reputable organizations, they create a false sense of credibility, making their claims appear legitimate.
The communication is meticulously crafted to align with the specific interests, projects, or goals of the target organization. This includes personalized emails, references to real people or organizations, and even professionally designed documents or websites to reinforce the scam’s authenticity. The scam’s targeted approach leverages trust and goodwill, often exploiting the charitable nature of organizations or their eagerness to secure funding for important initiatives.
By simulating real-life scenarios—such as requesting proposals, approving grants, or involving legal agreements—the scammers guide victims through a convincing but fraudulent process. Ultimately, they exploit the trust placed in their fake personas to extract money, sensitive information, or both, leaving the victims financially or reputationally damaged.
