Promises High-Dollar Commissions on Medical Equipment Purchases

Fortify Security Team
Jul 1, 2022

The FBI Minneapolis Field Office, in coordination with the Internet Crime Complaint Center and the Office of Private Sector (OPS), warn of an attorney trust account scam involving acquisition of medical equipment. The scam has resulted in approximately $2 million in losses to date.

Method used by the criminal actors in the attorney trust account scam:

  • A criminal actor posing as a would-be client contacts an attorney either listed on a professional networking site or claiming to have found their information on such sites, requesting their services in reviewing a lease, loan, or purchase agreement for medical equipment. The attorney is also requested to serve as an escrow agent for the client.
  • An individual posing as a broker representing a client emails the attorney an offer letter, and sends a cashier’s check by mail.
  • The cashier’s check for settlement is received, and deposited into the attorneys (or firm’s) trust account.
  • The client then requests the attorney wire transfer a portion of the funds from the trust account to another account, most often located in Mexico.
  • After the funds are wired as directed (some attorneys doing so before the cashier check has cleared), the attorney learns the check was fraudulent, and is liable to the bank for the funds, if not recovered.

The scam is successful for several assumed reasons:

  • The perpetrators entice lawyers with potential high dollar commissions on transactions involving multi-million dollar medical equipment such as MRI machines, ventilators, and CT scanners.
  • A potential need for new clients or quick cash flow by the attorney, may lead the attorney to take short-cuts when verifying information, following firm policies, or waiting for funds to clear.
  • The criminal actors place pressure on the attorney to act quickly in sending wires and refer to the importance of the business transaction or short time frames.
  • The criminal actors use cashier’s checks not easily detectable for fraud, provide websites that appear legitimate, and sometimes pose as legitimate medical companies.

To reduce the chances of becoming a victim, verify the validity of any payment method and wait for funds to clear, especially checks, before depositing or utilizing the funds.

To report internet fraud and scams, go to Be sure to include emails, phone numbers, and bank accounts used, along with a thorough description of the incident or reach out to your Fortify 24×7 account team to assist.

Recent Posts

Ransomware Attacks on Agricultural Cooperatives

The Federal Bureau of Investigation (FBI) is informing Food and Agriculture (FA) sector partners that ransomware actors may be more likely to attack agricultural cooperatives during critical planting and harvest seasons, disrupting operations, causing financial loss,...

Google Chrome Could Allow for Arbitrary Code Execution

A vulnerability has been discovered in Google Chrome that could allow for arbitrary code execution. Google Chrome is a web browser used to access the Internet. THREAT INTELLIGENCE: There are currently no reports of this vulnerability being exploited in the wild....

Google Chrome Vulnerabilities Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Google Chrome is a web browser used to access the Internet. Successful exploitation of the most severe of these vulnerabilities could...