MANCHESTER, N.H. — Homeland Security Investigations (HSI) and the Londonderry Police Department announced Nov. 6 that approximately $1.8 million in stolen funds have successfully been recovered and returned after a business email compromise illegally diverted the fund to Chinese bank accounts controlled by the thieves.
“This case shows the remarkable results possible when law enforcement works together. Money lost to business email compromises are notoriously difficult to recover, but the united effort from our partners around the world allowed investigators here in New Hampshire and in China to track down the lost funds and return them to the victims,” said HSI New England Special Agent in Charge Michael J. Krol. “The victim company did everything right in this case after they realized they had been scammed. It is essential for victims of cybercrime to come to law enforcement as quickly as possible for the best chances at a successful resolution.”
“A successful case of this magnitude, involving international collaboration, shows what teamwork, dedication, and hard work can do. Far too often, cases are dismissed at the local law enforcement level once it is discovered to have been perpetrated outside of the United States. This is an example of why that should not happen and how we can work together to bring justice to a victim,” said Detective Sergeant Chris Olson of the Londonderry, New Hampshire, Police Department.
In August of 2024, a furniture company located in Londonderry (“Company 1”) reported to Londonderry Police Department suspected fraudulent wire transfers totaling approximately $1.8 million to a commercial bank located in China. The wire transfer was intended to be payment to a Chinese company (“Company 2”), which is a known supplier for Company 1. Unbeknownst to Company 2, its business email had become compromised by an unknown actor. The hacker contacted Company 1 with updated wire instructions for payment of supplies, resulting in wire transfers for nearly $1.8 million to Chinese bank accounts not owned or controlled by Company 2.
Once Company 1 personnel became aware of the fraudulent wire transfers, they notified the Londonderry Police Department who contacted HSI New England’s Manchester Resident Agent in Charge office for assistance. HSI Manchester contacted the HSI Regional Attaché office in China, who partnered with China’s Ministry of Public Security and China law enforcement to freeze the thieves’ accounts and recover the funds.
“This case underscores the critical importance of collaboration in combatting cybercrime. The swift action and cooperation among local and international law enforcement agencies demonstrate that recovery is possible, even in the most challenging circumstances. We encourage all victims of business email compromise to report incidents immediately, as timely intervention is key to safeguarding assets and holding perpetrators accountable,” shared HSI International Operations Assistant Director Ricardo Mayoral.
“This collaborative effort is a testament to the commitment and dedication of HSI China and MPS and various law enforcement agencies in China to continue to cooperate on transnational law enforcement matters of mutual investigative interest,” added HSI Beijing Regional Attaché Ramon Romo.
The case was led by HSI New England’s Manchester Resident Agent in Charge office with support from HSI China and the Londonderry Police Department. China’s Ministry of Public Security – International Cooperation Department, MPS Criminal Investigation Department, Zhejiang Provincial Public Security Department, and the Hangzhou Municipal Public Security Bureau provided significant investigative support.
HSI regularly engages in international collaboration in conducting cross-border financial criminal investigations and disrupting illicit financial networks that facilitate transnational crime.