Blog Single
Five minutes of caution can protect you from a very expensive mistake.
Imagine you are in the middle of buying a home. An email arrives that looks like it is from your lawyer. It says there has been a last-minute change to the trust account details and asks you to send your deposit to a new bank account today. You are busy, the deadline feels real, and the email looks right.
This is one of the most common scams targeting people in the middle of legal matters, and it works because it arrives at exactly the moment you are expecting to hear from your lawyer. Here is how to spot a fake, and what to do if you are not sure.
Why scammers target legal matters
Legal work often involves large sums of money, tight deadlines and sensitive information. Property purchases, estate settlements and business sales all involve people expecting emails about payments. Scammers watch for this, and some break into a real email account so their message appears in the middle of a genuine conversation.
Red flags to look for
1. A request to change bank account details
This is the biggest warning sign. Law firms very rarely change their trust account details mid-matter. If an email tells you the account has changed, treat it as suspicious until you have confirmed it by phone.
2. Pressure and urgency
Phrases like “pay today or the sale will fall through” are designed to stop you thinking. A genuine lawyer will understand if you want to double-check a payment instruction.
3. A sender address that is almost right
Look closely at the address, not just the display name. Scammers use look-alike domains, such as a swapped letter, an extra word or a different ending (for example, a firm’s name with a hyphen added, or a free webmail address). On a phone, tap the sender’s name to see the full address.
4. Unexpected links or attachments
Be wary of unexpected requests to “review a document”, “sign here” or “log in to view your file”. Links can lead to fake login pages designed to steal your passwords. If you were not expecting a document, ask your lawyer before opening it.
5. Tone, wording or formatting that feels off
A different greeting, unusual phrasing, missing signature details or a generic “Dear client” can all be clues. Your lawyer usually communicates in a consistent way, so trust your instincts when something feels different.
6. Requests for sensitive information
Be cautious about emails asking for your passwords, full bank login details, identity documents or one-time codes. Your lawyer may need some identity information, but they will rarely ask you to send it in an unexpected email.
7. A change in how the conversation is happening
If your lawyer normally calls, uses a secure client portal or writes from a particular address, and suddenly something arrives from a new address or with new instructions, pause and check.
What to do if you are not sure
- Do not click, reply or pay. Leave the email as it is.
- Call your lawyer or their office. Use a phone number from your engagement letter, a previous trusted email or the firm’s official website. Do not use a number from the suspicious email.
- Confirm any payment instructions verbally before you send money, every time.
- Tell the firm. If the email is fake, your lawyer will want to know so they can warn other clients.
If you have already clicked or paid
Act quickly, because speed makes a real difference.
- Contact your bank immediately and ask them to try to stop or recall the payment.
- Tell your lawyer straight away.
- Change your passwords if you entered them anywhere, starting with your email account.
- Report the scam to Netsafe (netsafe.org.nz) and the New Zealand Police, and consider reporting the incident to the National Cyber Security Centre (ncsc.govt.nz).
How law firms can help you stay safe
A good firm will make it clear from the start how it communicates. Ask your lawyer:
- Which email address and phone number will you use?
- Will payment details ever change, and how will you confirm them if they do?
- Do you use a secure portal for documents?
Agreeing on this at the start of a matter makes a fake much easier to spot later.
The bottom line
If an email asks you to move money, change payment details or share sensitive information, pick up the phone and verify it first. A quick call to a trusted number costs you a few minutes. Skipping it can cost you far more.
If you have received an email that looks suspicious, contact our office on [phone number] before taking any action. We would much rather hear from you than have you take a risk.
This article provides general information only and is not legal advice. Please contact us about your specific situation.
Article written by Rajneel Kumar
