Invoice hijacking fraud - Court adopts practical approach to assist recovery

• United Kingdom

• Commercial litigation
• Litigation and dispute management

16-10-2019

Email scams are becoming more and more difficult to spot.  Hackers replicate genuine email traffic, posing as genuine suppliers providing invoices that appear genuine.  It is often only when the supplier chases on payment, which as far as you are concerned has already been made, that the scam is uncovered.  The civil courts have made clear that they will assist and, if urgent action is taken, there is a fighting chance of recovering the stolen funds.

The decision in World Proteins Kft v Mateen and another [2019] EWHC 2030 (QB) provides a useful case study and a welcome outcome.  World Proteins had paid some €2,000,000 under the mistaken pretence that it was paying a genuine supplier that was chasing payment of genuine invoices.  False emails had induced the payment to a new bank account.  After cancelling certain payments, World Proteins was out of pocket for €500,000.

World Proteins successfully applied for a freezing injunction over the bank account to which the payments were made – thus immediately preventing the further dissipation of the remaining funds. 

World Proteins then set about recovering the funds in High Court proceedings.  No attempt was made to defend the legal proceedings.  World Proteins successfully applied for default judgment.

Key to quickly recovering the funds is obtaining a declaration from the Court that the victim of the fraud has a proprietary interest in the funds held in the frozen bank account – that way the funds can be returned by the bank.  Historically, the Courts have been reluctant to make such a declaration without there being a trial – meaning that the claimant would have to go through the hoops of preparing a case for trial and incurring significant legal costs that it is unlikely to recover.

However, the Court in World Proteins gave default judgment on the relief sought, including by declaring that the funds in the frozen bank accounts were held for the claimant and were to be paid to World Proteins within 14 days.  The Court decided that the First Defendant had been provided with the opportunity to put forward its position but had failed to do so, and that it was “difficult to understand what possible defence to the Claimant’s proprietary claims and ensuing the [sic.] declaration the First Defendant could raise”.

Having made the mistaken payments on 27 February 2019, World Proteins had by 1 July 2019 obtained a judgment requiring the return of the sums held in the frozen bank accounts by 15 July 2019.

As always, the key is acting quickly.  It seems fortunate that in this case World Proteins uncovered the scam within one day.  It obtained a freezing injunction in short order which prevented further dissipation of the funds and, ultimately, enabled it to make a quick recovery. 

Invoice hacking is a difficult risk for businesses to manage.  Close communication and clearly established protocols in respect of supplier payments will minimise the risk and, if the worst should happen, ensure that any issue is quickly identified.