More than a month after the U.S. Department of Justice charged a Lithuanian man in a $100 million phishing scam against two Internet companies, an investigation by Fortune has confirmed the victims’ identities: Google and Facebook.
Between 2013 and 2015, the companies were reportedly fooled into wiring payments to accounts controlled by Evaldas Rimasauskas, 48, in the belief they were making payments to a legitimate supplier, Taiwan-based Quanta Computer Inc.
In its March 21 announcement of criminal charges against Rimasauskas, who was arrested and is being held in Lithuania, the Justice Department noted that “much” of the money stolen in the phishing scam had been recovered. However, it did not identify the two companies that had been scammed, describing them only as “a multinational technology company and a multinational online social media company.” The announcement also did not name the Asian-based computer hardware manufacturer whose identity was impersonated.
‘Pleased this Matter Is Resolved’
The mystery began unraveling after Reuters published an article on March 28 confirming that the Asian manufacturer was Taiwan-based Quanta Computer Inc. The article quoted a company spokesperson who acknowledged Quanta had been impersonated, but noted the company “did not suffer from any financial harm from this incident.”
After speaking with a number of unnamed sources, including some “close to law enforcement,” Fortune yesterday revealed the two tech firms that had been scammed were Google and Facebook. Both companies confirmed to Fortune that they had been fooled into approving illegitimate payments under the phishing scheme.
“Facebook recovered the bulk of the funds shortly after the incident and has been cooperating with law enforcement in its investigation,” a spokesperson told Fortune in an email. Google also acknowledged it had been a victim. “We detected this fraud against our vendor management team and promptly alerted the authorities,” a spokesperson told Fortune….