DES MOINES, IA — A city in Iowa could be out $655,000 after a fraudulent email mimicked a real invoice for a public works project, according to a warning from State Auditor Rob Sand’s office.
The email appeared legitimate enough to match the amount the city expected to pay, making the scam harder to catch at first. Officials realized something was wrong only when the actual contractor later reached out asking to be paid.
Sand’s office said the case is part of a broader pattern of increasingly polished attempts to steer public money into criminal accounts. The advisory was released to help other local governments spot the same kind of attack before they transfer funds.
How the fake invoice got past city staff
According to the advisory, a city clerk received an email requesting electronic payment for a project bill. The message was fraudulent, but it was dressed up to look like a routine request from a legitimate vendor.
The invoice matched the expected payment amount, which made it especially convincing. That detail likely helped it blend in with normal municipal bookkeeping and delayed suspicion.
The city did not discover the fraud until the real contractor contacted officials seeking payment. By then, the money had already been sent to the wrong account.
The Auditor’s office did not identify which Iowa city was involved in the case.
One earlier payment was recovered while other losses remain uncertain
Officials were able to recover a separate $211,000 payment that had been sent to the same fraudulent account. The city’s financial institution was able to get that money back, according to Sand’s office.
That recovery offered some relief, but it did not eliminate the larger problem. The city also filed an insurance claim in hopes of recouping additional losses and notified law enforcement about the scam.
At the same time, officials are adding more safeguards to reduce the chance of another fraudulent transfer. Sand’s office did not say whether the full $655,000 loss has been prevented or recovered.
Rob Sand says local governments are being targeted again and again
Sand said this was the second fake-email scam involving local governments that his office had learned about in less than a month. He said the public notice was meant to alert other agencies before they fall for the same type of deception.
The warning reflects a broader concern that scammers are getting better at mimicking routine financial requests. A convincing invoice, familiar dollar amount, and urgent request can be enough to push a busy employee into acting too quickly.
Sand also noted that his office has faced a similar attempt in the past. In 2022, the state’s human resources department received an email asking that his paycheck be sent to a different account.
An employee called Sand directly before making the change, which stopped the scam. He said that simple step of speaking with a known contact can make all the difference.
What Iowa auditors say staff should do before changing payment details
Sand’s office is urging government workers to verify any request to change routing or banking information by using a phone number already on file, not the one included in the email. Replying to the suspicious message could simply reconnect staff with the scammer.
The advisory also recommends sending payment notices to vendors through established email addresses and asking them to confirm receipt quickly. If a payment does not arrive in the correct account, vendors should report it right away.
Workers are also told to inspect email addresses and website links closely, look for odd phrasing or grammar problems, and avoid opening attachments from unknown senders. The guidance applies to messages received by email or text.
Those steps are designed to slow down decisions that might otherwise be made in minutes. In cases involving public funds, that pause can be enough to stop a loss.
State law requires officials to report suspected theft quickly
The auditor’s office said Iowa officials who discover suspected theft or major financial irregularities must notify the state auditor immediately under state law. Sand’s office also says suspicious scams should be reported to the FBI and local law enforcement.
That reporting chain is meant to help investigators move fast while there is still a chance to trace transfers or recover funds. It also gives other agencies a warning if the same scammer is trying to hit multiple targets.
For local governments, the case underscores how a single fraudulent message can create serious financial exposure. Even when some money is recovered, the process can leave taxpayers, staff and vendors dealing with a costly and time-consuming mess.
