Wire Fraud on the Rise… Could the VC Community Be Hit Next?
It has been widely reported that cyber criminals are hijacking real estate transactions by finding increasingly sophisticated ways to intercept and make alterations to wiring instructions being distributed between parties leading up to a real estate closing, resulting in the wiring party being duped into releasing funds to an alternative (and often times, off shore) bank account. Over the last year, hackers are starting to apply the same techniques to prey on the venture capital community and financings transactions. Read here.
This got me thinking about the standard practice for how venture financings are closed, specifically the process around how wiring instructions are shared between a company and its soon-to-be investors as well as the particular ripeness of the industry to be targeted by similar scams.
It is customary that leading up to the final moments before a VC transaction closing, lawyers find themselves caught in the middle of coordinating distribution of final deal documents along with the company’s wiring instructions. Here’s how it typically unfolds: (1) a company will email its lawyers the company's wiring instructions to distribute along with executed documents and the filed charter, (2) the company's lawyers turn around and send a closing email, which contains those instructions, to the Investor’s lawyers, (3) Investor’s lawyers then forward along to their client with confirmation that the closing conditions have been met and the wire should be released. By my count that is 3 emails sent containing wiring instructions…. which is 3 emails too many!
It is time for lawyers to insist that the parties to a transaction take much more calculated steps to limit the risks associated with this particular style of cyber crime. Founders and VCs should communicate directly on wiring instructions, separate from the lawyers' deal document distribution, through secured means other than email and, prior to wiring any funds, the VC (or a member of their finance team) should contact the company by phone and confirm that the wiring information sent over email is accurate. In my experience, this isn’t common practice. But it should be.