We received a request over email from a client who wanted money wired to a bank for the purchase of furniture. We filled out the Schwab paperwork and email them to her (at the email her correct email address). She signed and returned the form but Schwab requires that we also call to verify bank wires. Schwab also let us know that the signature did not match the signature on file and they needed to speak with her. I called her and left a message and also emailed her saying that Schwab and we needed to speak with her.
Soon after a woman with a slight accent called saying she was our client and that we should go ahead with the wire. Our client called later and verified that she was unaware of this wire request. Someone had hacked into her email and was forwarding all emails from us and Schwab to another address.