I just heard about an interesting social engineering theft.
A friend's mom recently moved into an apartment complex.
At some point a theif contacted the apartment complex management impersonating the moms bank.
The thief convinced them that 6 months of rent money was taken from the wrong bank account and they needed it returned.
The complex, without contacting the mom, "returned" the money. Idk if this was to the moms account or if the theif provided an alternative account.
The apartment complex is now in the process of evicting their tenent. And collecting the "overdue rent".
Who's the victim in this? Are there two? Is the apartment complex victimizing their tenent? Does it matter who owned the account that the money was returned to?
The thief also played the same scam with the moms cell phone provider. They credited the account for the lost money and provided additional credits.