{"id":5009,"date":"2026-07-08T08:52:12","date_gmt":"2026-07-08T08:52:12","guid":{"rendered":"https:\/\/capitaliststoday.com\/index.php\/2026\/07\/08\/cyber-fraud-stole-3-million-from-vermont-the-fbi-just\/"},"modified":"2026-07-08T08:52:12","modified_gmt":"2026-07-08T08:52:12","slug":"cyber-fraud-stole-3-million-from-vermont-the-fbi-just","status":"publish","type":"post","link":"https:\/\/capitaliststoday.com\/index.php\/2026\/07\/08\/cyber-fraud-stole-3-million-from-vermont-the-fbi-just\/","title":{"rendered":"Cyber Fraud Stole $3 Million From Vermont. The FBI Just\u2026"},"content":{"rendered":"<\/p>\n

Federal authorities have recovered more than $2.27 million stolen from a Vermont public agency after a cyber fraud in which criminals redirected payments through a business email compromise scheme, highlighting the importance of rapid reporting in combating increasingly sophisticated payment fraud.<\/p>\n

The U.S. Attorney’s Office for the District of Vermont announced that it had secured a forfeiture judgment for $2,270,202.39, allowing the funds to be returned to the Chittenden Solid Waste District after they were seized from a bank account used in the fraud.<\/p>\n

The recovery follows a cyber-enabled payment diversion scheme in which fraudsters impersonated a legitimate construction contractor and tricked the agency into sending more than $3 million to an account controlled by criminals.<\/p>\n

Fraudsters Redirected Construction Payments<\/h2>\n

According to court documents, the fraud began in late January 2026 while the Chittenden Solid Waste District was working on an ongoing construction project.<\/p>\n

The agency received an email appearing to come from its construction contractor that instructed it to redirect future payments to a different bank account.<\/p>\n

Believing the request to be legitimate, the agency transferred two payments totaling more than $3 million to an account held at Citibank.<\/p>\n

Investigators later determined the account did not belong to the construction company but was instead part of an ongoing fraud scheme.<\/p>\n

Rapid Reporting Helped Recover The Funds<\/h2>\n

After discovering the fraud, the Chittenden Solid Waste District quickly contacted law enforcement.<\/p>\n

The FBI worked with the U.S. Attorney’s Office to identify and freeze funds remaining in the receiving account.<\/p>\n

Using a civil seizure warrant, authorities successfully seized approximately $2.27 million before the funds could be fully transferred through the criminal network.<\/p>\n

On July 2, U.S. District Judge William K. Sessions III approved the forfeiture order, clearing the way for the money to be returned to the agency through the U.S. Marshals Service.<\/p>\n\n\n\n\n\n\n\n\n\n
Recovery Summary<\/th>\nDetails<\/th>\n<\/tr>\n<\/thead>\n
Victim<\/td>\nChittenden Solid Waste District<\/td>\n<\/tr>\n
Total fraudulent payments<\/td>\nMore than $3 million<\/td>\n<\/tr>\n
Funds recovered<\/td>\n$2,270,202.39<\/td>\n<\/tr>\n
Recovery method<\/td>\nCivil seizure and forfeiture<\/td>\n<\/tr>\n
Funds returned by<\/td>\nU.S. Marshals Service<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Authorities Credit Immediate Notification<\/h2>\n

Federal officials said the successful recovery would not have been possible without the victim’s rapid response.<\/p>\n

First Assistant U.S. Attorney Jonathan A. Ophardt praised the agency for quickly involving law enforcement.<\/p>\n

“Recoveries of stolen funds from sophisticated cyber actors are only possible when impacted entities quickly alert law enforcement about their losses.”<\/p><\/blockquote>\n

He added that the Chittenden Solid Waste District coordinated closely with investigators immediately after identifying the phishing attack.<\/p>\n

“Because of CSWD’s actions in the wake of the phishing scam, we were able to seize and return over $2 million dollars to CSWD, a benefit to all residents of Chittenden County.”<\/p><\/blockquote>\n

FBI Warns Business Email Compromise Remains Major Threat<\/h2>\n

The FBI said business email compromise continues to rank among the most costly forms of cyber-enabled financial crime.<\/p>\n

Unlike ransomware attacks, business email compromise schemes often rely on social engineering rather than malware, convincing victims to voluntarily transfer funds into accounts controlled by criminals.<\/p>\n

FBI Albany Special Agent in Charge Craig L. Tremaroli said immediate reporting remains critical.<\/p>\n

“This type of fraud is one of the most pervasive threats facing our communities today, but the FBI is here to help.”<\/p><\/blockquote>\n

He noted that investigators were able to begin tracing and freezing the transactions almost immediately after receiving notification.<\/p>\n

“I implore the public to immediately report this type of fraud to law enforcement so we can work together to achieve a similar outcome.”<\/p><\/blockquote>\n

Business Email Compromise Continues To Target Organizations<\/h2>\n

Business email compromise schemes have become one of the most profitable cybercrime tactics worldwide.<\/p>\n

Attackers typically compromise or impersonate legitimate email accounts before sending convincing payment instructions to businesses, government agencies or nonprofit organizations.<\/p>\n

Rather than stealing credentials or deploying malware, the criminals exploit trust between organizations and their suppliers, making fraudulent payment requests appear routine.<\/p>\n

Once funds arrive in mule accounts, they are often rapidly transferred through multiple domestic and international accounts or converted into cryptocurrency, making recovery significantly more difficult.<\/p>\n

Why It Matters<\/h2>\n

The recovery demonstrates that while business email compromise remains one of the fastest-growing forms of financial fraud, rapid action can substantially improve the chances of recovering stolen funds.<\/p>\n

Financial institutions, public agencies and private companies increasingly face sophisticated invoice redirection attacks in which legitimate supplier relationships are exploited through carefully crafted phishing or email impersonation campaigns.<\/p>\n

Federal authorities continue to advise organizations to independently verify any requests to change banking instructions, particularly for high-value payments, and to contact both their financial institution and law enforcement immediately if fraudulent transfers are suspected.<\/p>\n","protected":false},"excerpt":{"rendered":"

Federal authorities have recovered more than $2.27 million stolen from a Vermont public agency after…<\/p>\n","protected":false},"author":1,"featured_media":5010,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-5009","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business"],"_links":{"self":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts\/5009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/comments?post=5009"}],"version-history":[{"count":0,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts\/5009\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/media\/5010"}],"wp:attachment":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/media?parent=5009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/categories?post=5009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/tags?post=5009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}