How a Romance Scam Led to $25,000 in Unauthorized HOA Transactions

Romance scams are typically viewed as crimes impacting individuals. However, the stolen financial information used to facilitate these schemes can expose HOAs and community associations to fraud as well. 

A recent client case demonstrates how an online romance scam led to more than $25,000 in unauthorized ACH transactions against an association’s bank account. The community association had no relationship with the scammer or victim, yet became an indirect victim when its account information was used to advance the fraud. 

This case illustrates how the fraud occurred and how proactive monitoring helped identify and stop the unauthorized activity before greater losses occurred.

When Romance Meets Fraud: A Real-Life Story

During routine fraud monitoring, Western Alliance Bank noticed suspicious activity on an association’s operating account: several ACH debits to a subprime credit card company, an unusual payee for this type of account. The merchant had been flagged multiple times before and appeared on the bank’s internal “gray list” of suspicious vendors.

The association and its management company confirmed it had never authorized payments to this vendor. A deeper investigation revealed an alarming pattern: 30 unauthorized ACH transactions totaling $25,000 in attempted charges had been processed in just 24 hours. Western Alliance quickly recovered all but three of these charges, preventing thousands of dollars of losses. 

Where Did the Fraud Originate? The Romance Scam Connection

As the HOA’s Western Alliance Bank fraud manager began reclaiming the unauthorized ACH debits, the bank received a concerned call from a man we’ll call “Jerry.” 

Jerry explained that he had helped his girlfriend, “Yvonne,” make a credit card payment using bank information she provided. The connection became clear when investigators discovered the account number belonged to the association.

Jerry was not attempting to steal from the association. He believed he was helping someone he trusted. Instead, he had been given stolen bank account information and directed to use it to make payments on Yvonne's behalf.

How Did the Scammer Access the Association’s Account Information?

Jerry had never met Yvonne in person; they had only communicated online. Now he learned that he had fallen victim to a romance scam and unknowingly participated in fraud.

Yvonne most likely obtained the association’s bank account information from a compromised check or dark web activity. Learn more about preventing check fraud.

How Having a Specialized Community Association Bank Can Help Prevent and Address Fraud

As this case demonstrates, associations can become victims of fraud even when they are not the scam’s primary target. Working with a bank that understands HOA and community association transaction patterns can improve fraud detection by quickly identifying unusual activity for this industry. 

In this instance, the transactions were flagged because the credit card company appears on Western Alliance’s dynamic “gray list” of merchants reported by associations and community management company clients for prior fraud activity. Western Alliance always verifies transactions involving these merchants. Once the client confirmed the payment was unauthorized, the team conducted a comprehensive account review, identified the matching transactions and recovered the vast majority of the stolen funds.

The relationship manager at Western Alliance Bank helped the client close the compromised account, open a new one with enhanced security measures and understand how the breach likely occurred. Unlike outgoing wire transactions, which are virtually unrecoverable, debited ACH transactions offer a window for returns, but early detection remains crucial.

How Can Community Associations and Management Companies Avoid Falling Victim to Scammers?

Community associations and management companies can take active steps to protect themselves through a combination of fraud protection solutions and strong policies and procedures: 

• Implement Check Positive Pay, Check Payee Positive Pay and ACH Positive Pay: Create an approved list of vendors authorized to debit your account. New merchant transactions are presented for verification, and unauthorized transactions are declined. 
• Reconcile accounts daily: Frequent reconciliation allows for faster identification of suspicious activity. 
• Take fraud alerts seriously: Investigate thoroughly, even for small or unfamiliar amounts. 
• Safeguard payment information: Limit access to account numbers and check stock. Securely store, mail and dispose of checks. 
• Contact your banking relationship manager immediately with concerns: Report unusual account activity or communications right away.