{"id":2817,"date":"2020-03-24T12:22:14","date_gmt":"2020-03-24T12:22:14","guid":{"rendered":"https:\/\/www.dpscomputing.com\/blog\/?p=2817"},"modified":"2021-03-01T21:27:43","modified_gmt":"2021-03-01T21:27:43","slug":"scam-alert-cordwell-group-invoice-on-file","status":"publish","type":"post","link":"https:\/\/www.dpscomputing.com\/blog\/2020\/03\/24\/scam-alert-cordwell-group-invoice-on-file\/","title":{"rendered":"Scam Alert &#8211; Cordwell Group Invoice On File"},"content":{"rendered":"\n<p>As COVID-19 intensifies, unfortunately, we&#8217;re seeing an increase in scams.  <\/p>\n\n\n\n<p>The latest one to be aware of is one purporting to be from Cordwell Group regarding an invoice on file.  <\/p>\n\n\n\n<p>This scam seems to be taking advantage of the fact that numerous companies are indeed chasing up invoices to preserve cashflow as businesses are hit hard by the ongoing Coronavirus pandemic.  <\/p>\n\n\n\n<p>We must stress that Cordwell Group does appear to be a legitimately trading property company and that we believe these e-mails are spoofed to give them an air of legitimacy.  <\/p>\n\n\n\n<p>The e-mail runs as follows:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Afternoon<\/p><p><br>Just checking on an invoice we have on file for \u00a393.86<\/p><p>Can you give us an idea when it will be paid or let me know if you need another copy.<\/p><p>Have a lovely weekend J!<\/p><p><br>Best wishes,<\/p><p>Hilary Pitchford<br>Finance Manager<\/p><p><br>Cordwell Property Group<br>2 Mill Pool, Nash Lane,<br>Belbroughton<br>Worcestershire<br>DY9 9AF<\/p><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Signs of the scam<\/h2>\n\n\n\n<p>Note that the e-mail does not address you directly of specifically.  Whilst there are occasional e-mails sent in such an impersonal fashion, many companies now include a piece of personally identified information (such as the last 3 characters of your postcode) to help you determine genuine e-mails from those that are now.  <\/p>\n\n\n\n<p>Additionally, the &#8216;Reply to&#8217; address seems to have been forged to send to another domain &#8211; cordwelgroup.com &#8211; note the lack of a second &#8216;l&#8217; in Cordwell:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"373\" height=\"79\" data-attachment-id=\"2818\" data-permalink=\"https:\/\/www.dpscomputing.com\/blog\/2020\/03\/24\/scam-alert-cordwell-group-invoice-on-file\/image-11-6\/\" data-orig-file=\"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11.png\" data-orig-size=\"373,79\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"image-11\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11-300x64.png\" data-large-file=\"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11.png\" tabindex=\"0\" role=\"button\" src=\"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11.png\" alt=\"\" class=\"wp-image-2818\" srcset=\"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11.png 373w, https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11-300x64.png 300w, https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11-150x32.png 150w\" sizes=\"auto, (max-width: 373px) 100vw, 373px\" \/><\/figure>\n\n\n\n<p>It&#8217;s also worth noting that the &#8216;From&#8217; address has been made to look like the real domain.  <\/p>\n\n\n\n<p>Thirdly, the sense of urgency in the title is designed to make a rash decision &#8211; always stop to think and if unsure consult someone else.  <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to react<\/h2>\n\n\n\n<p>Don&#8217;t do anything hastily!<\/p>\n\n\n\n<p>If you believe it is a genuine e-mail contact that company directly yourself on a number you already have for them (<strong>DO NOT<\/strong> use any contact details provided in the e-mail).  <\/p>\n\n\n\n<p>Ring the company directly rather than e-mail.  <\/p>\n\n\n\n<p>If in doubt, or you aren&#8217;t expecting an invoice, do not pay!  Seek confirmation from the company via independent means &#8211; i.e. a contact you already have at the company.  <\/p>\n\n\n\n<p>Unfortunately, the global pandemic is being used by unscrupulous scammers to con businesses and individuals out of money.  <\/p>\n\n\n\n<p>Stay safe, stay healthy!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As COVID-19 intensifies, unfortunately, we&#8217;re seeing an increase in scams. The latest one to be aware of is one purporting to be from Cordwell Group regarding an invoice on file. This scam seems to&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":2818,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"#Scam Alert - Cordwell Group Invoice On File\n\nThese e-mails are not genuine!\n\nAs scams increase during the global #Cornavirus pandemic, stay safe!  Get the full details here and tips to avoid being scammed\n\n#Phishing #Scams #COVID19 #Email","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[55],"tags":[2621,2620,2623,2624,686,2622],"class_list":["post-2817","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","tag-cordwel-group","tag-cordwell-group-invoice","tag-invoice-on-file","tag-property-invoice-scam","tag-scam","tag-scam-email"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.dpscomputing.com\/blog\/wp-content\/uploads\/2020\/03\/image-11.png","jetpack_shortlink":"https:\/\/wp.me\/p3nsfA-Jr","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2817","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/comments?post=2817"}],"version-history":[{"count":2,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2817\/revisions"}],"predecessor-version":[{"id":3007,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/posts\/2817\/revisions\/3007"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/media\/2818"}],"wp:attachment":[{"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/media?parent=2817"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/categories?post=2817"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dpscomputing.com\/blog\/wp-json\/wp\/v2\/tags?post=2817"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}