Family gets ripped off in mortgage phishing scam
PORTLAND, Ore. - A year and a half worth of mortgage payments were stolen from a local couple in a phishing scheme.
The money went to an offshore bank account operated by someone pretending to be a Bank of America employee. A person calling herself Lisa McNaughton sent the Schelhaas family an automatic payment agreement that looked legitimate but it wasn't from Bank of America at all.
The family bought the home 18 years ago and refinanced about five years ago. A couple years later they got a letter in their mailbox asking if they wanted to start automatic withdrawals.
The family thought it was making payments on their Southeast Portland home after agreeing to those electronic transfers. More than $1,700 was coming out of their checking account per month.
And then in May 2010 they received a foreclosure notice posted on their front door that they were 18 months behind on payments.
They were shocked and said they had every reason to believe the payments were being made.
"Yeah, no reason not to," said Dan Schelhaas. "Like I say when the letter is coming on Bank of America letterhead, with our account number, property address and all of that kind of stuff."
Schelhaas said he knows the $31,000 did not go to Bank of America but to someone living in a foreign country. He and his wife learned recently their home will go on the auction block March 30.
According to a Bank of America representative, the bank normally communicates by mail and phone and the contact is more frequent as someone becomes more delinquent.
The representative said the bank is now investigating whether the scammers were able to change the Schelhaas contact information inside the bank – things like mailing address and phone numbers. That could explain why the couple went un-notified about problems with their mortgage payments for so long.
Here are some ways you can spot a phishing scam:
- Banks and mortgage companies generally don't send out offers that were not requested.
- Get a phone number for the person contacting you. If there is no number, you're being phished.
- Also, make sure there is a street address for the company and confirm it by phone with the bank.