The town of Surfside Beach, South Carolina, is facing significant financial turmoil after $545,000 intended for Wildcat Construction, a company performing utility work, was rerouted to a fraudulent account. This incident, which occurred in March, is believed to be the result of a sophisticated email phishing scam. Mayor Robert Krouse stated that the town's processes were followed, and the payment was made based on instructions from what appeared to be a legitimate email address. However, the funds never reached Wildcat Construction, which maintains its email system was not compromised.
Investigations are ongoing by the South Carolina Law Enforcement Division, the FBI, and banks, with officials trying to determine whether the town or the contractor is liable. Surfside Beach's insurance provider, Great American Insurance Group, has indicated it will not cover the loss, though Mayor Krouse believes the town could potentially recover a portion through other insurance. Retired FBI agent Richard Kolko highlighted the difficulty of recovering such funds, especially when scammers operate overseas, noting that South Carolina ranks 21st in cybercrime complaints and 20th in losses.
The incident led to the termination of two city finance department employees, although they claimed no knowledge of the fraudulent transfer. Mayor Krouse initially said he saw no reason to fire anyone, but job openings were later posted. Surfside Beach officials are adding additional checks and balances to payment processes and increasing training in response to the scam. Meanwhile, Wildcat Construction's president, Kyle Bowker, confirmed in May that his company still had not received the $545,000 payment.
