Story: “My bank account number has changed…” – Caught in the trap of African phishing gangs
When a single email costs 25,000 euros—and the money is gone forever.
The story in a nutshell
A Hungarian company had been doing business with a German partner for years. Orders, invoices, payments—everything went smoothly. Then an email arrived: “Our bank account number has changed.” They transferred 25,000 euros to the new account. The money never reached the partner. The address, the language, the logo—everything was deceptively accurate. Because they had been watching them for months.
How does this work in Africa?
1. Cybercrime Networks
These scams aren’t run by lone hackers, but by professional teams. Lagos, Abidjan, Accra—dozens of “scam farms” operate here in apartments and internet cafes. Day in and day out, young people work to deceive companies.
2. Assignment of tasks
- Hackers: They hack into company accounts and steal passwords.
- Monitors: They track correspondence over weeks and months.
- Language manipulators: they write emails with native-level fluency and consistency in style.
- “Bankers”: They open accounts that are later used for money laundering.
- Front men: they’re the ones who collect the money—often in another country, under a different name.
Technology in the background
They gain access to an email account using a phishing link or a previously leaked password. They often lie in wait for months until the perfect moment arrives. When it does, they send a deceptive message from an email address that looks similar, for example:
payments@partnercompany.com→payment@partnercornpany.com
The discrepancy is almost imperceptible, but the impact is severe—companies pay automatically.
What happens to the money?
The money is usually transferred to intermediary accounts in Europe or Asia, from where it is quickly moved on or converted into cryptocurrency. Before anyone realizes what’s happening, the account has been closed, the money is gone—and so are the traces.
Why is all this happening?
In these countries, many young people have no other options. Scams are spreading as a way to “make money online,” and in some places, families even support them. Training sessions, forums, and courses help “scammers” develop their skills. In certain circles, this has become socially acceptable.
Lesson
- In any business relationship, do not accept a change in account number without telephone confirmation!
- Check email addresses carefully, letter by letter—scammers are masters of manipulation.
- Use enterprise-level security measures:
DMARC,SPF,DKIM. - Use a password manager and two-factor authentication everywhere.
- Keep in mind: these aren’t amateur attempts—they’re organized, professional, international scams.
A single careless click can result in a loss of millions of forints. In the online world, being suspicious isn’t paranoia—it’s self-defense.
