1. European Championships 2017
Fraud Event

2. What Happened
Alan Ludkin’s account was compromised (Alan was sending out all of the invoices)
s to and from Alan were being intercepted, amended to alter bank payment details and sent on.
They still appeared to be sent from Alan’s address but were in fact coming from elsewhere.
A number of s never reached Alan, the ‘criminal’ created appropriate invoices and sent them back. We were unaware of those bookings.
There was even whole conversations questions/answers going on.

3. How?
Possibly – a ‘man in the middle attack.

5. Infected by Malware?
Yes – that’s very easy to happen if you aren’t very careful.
Malware can modify you programmes such as Outlook properties
Malware is often in an attachment – Word, Excel, .pdf and more
Don’t open attachments unless you know where they came from and check if the seems suspicious – check – by other means – not – with the sender.
Don’t ever click on a link – again unless you are absolutely sure.
People who were subject of the fraud in 2017 also received fraudulent s with links about their accreditation.

6. Secure or Not Secure?
s are NOT secure – they are very easy to intercept
Word documents are easily edited
So are .pdf files now!!!
You used to have to purchase a .pdf writer – but now Word will do it for you!! And create the .pdf for you again.

7. Suggestions Don’t put bank details on the invoice.
However that doesn’t stop a criminal adding information or creating their own invoices!
ONLY put your bank details on the website – yes it can be changed but it is harder and more easily recognised if it has been changed
Should we agree, as hosting countries that is what we will do and will NEVER put ANY payment details in an invoice?
Send invoices by encrypted .pdf files – send password by alternate means – from a second address or even split between a second and third address
Or by other secure means such as Whatsapp

8. Thank you – I hope that was useful Any questions - debate