Hindustan Aeronautics Limited (HAL) has lost Rs 55 lakh ($63,000) to cyber fraud after unknowingly transferring funds to a fraudulent account due to an email spoofing scam. The cybercriminals manipulated email addresses and bank details, leading to the erroneous transaction.  

According to NDTV, the fraud came to light when PS Engineering Inc, a US-based aircraft parts supplier, informed HAL that they had not received the payment. Upon reviewing transaction records, HAL officials discovered that the payment had been made to an imposter email account, which differed from the legitimate one by a single missing letter ‘e’.  

"HAL got in touch with a US company, PS Engineering Incorporated, to buy aircraft parts. When the talks began, there was a legitimate email ID. Somewhere in the middle, the proper email was replaced with a fake one. There was only one difference between the two IDs: the missing letter 'e'," Deputy Commissioner of Police (Crime) Anjali Vishwakarma said, as per NDTV's report.  

Due to this oversight, HAL transferred Rs 55 lakh to an incorrect account. "When the vendor said that he did not receive any payment, then this fraud came into limelight. In this, HAL has paid approximately $63,000 i.e. Rs 55 lakh in a fraud account," the officer added.  

Hackers May Have Compromised HAL’s Email Servers Or Intercepted Communications

According to Financial Express, the scam unfolded in May 2024, when HAL sought a quotation for three fighter jet components from PS Engineering Inc. The official correspondence began with the vendor’s genuine email ID, gledbetter@ps-engineering.com. However, cybercriminals, likely monitoring the exchange, introduced a deceptive email ID, jlane@ps-enginering.com, omitting the letter ‘e’. They then provided altered bank details, tricking HAL into making the payment.  

Following the discovery of the fraud, HAL Kanpur’s Additional General Manager, Ashok Kumar Singh, filed a police complaint on 13 March. The Cyber Police Station has registered a case under the Information Technology Act, launching a formal investigation.  

Investigators suspect that hackers may have compromised HAL’s email servers or intercepted communications to execute the fraud, Financial Express reported. The police have enlisted cybersecurity experts from IIT Kanpur to trace the origins of the fraudulent account and track down the perpetrators.  

Authorities are also probing whether the fraud originated from another US-based company or an Indian entity.