PEXA to introduce multi-factor verification to thwart conveyancing fraud

The E-conveyancer PEXA have announced they are introducing a new consumer guarantee for transactions conducted on its platform.

It will provide greater safeguards to property buyers and sellers whose conveyancer or lawyer uses PEXA.

"We're assisting the conveyancers and lawyers who use our platform to uphold the highest possible security standards," James Ruddock, the acting CEO advised.

"We understand the importance of security to the industry as a whole, and as a result PEXA will be introducing a new consumer guarantee for transactions conducted on our platform.

Its anticipates the guarantee will go above and beyond any guarantee available in the paper-based settlement process. 

Following an incident reported to PEXA on 31 May, PEXA sped up existing plans to introduce multi-factor verification.

"When PEXA was alerted to a second incident, we immediately increased our monitoring of potential unusual activity surrounding password resets, new user creations and changes to BSB and account numbers," he noted.

"We know that buying and selling a home is an emotional time and understand the stress that can be felt when things don’t go to plan.

"We clearly regret the distress felt by those impacted in these two recent events and will ensure all outstanding funds are covered, without condition," Ruddock said.

The fraudster appears to have gained access to a subscriber’s email account and intercepted a change of password email allowing them to change the subscriber’s password. This then allowed them to create a new user account which gave them access to the workspace where they changed the bank account details that had already been entered.

When the subscriber returned to the workspace to complete the transaction they did not notice the account details had been changed and the transaction was completed with money transferred to the wrong account.

In addition to existing cyber security systems and processes, PEXA are assisting the conveyancers and lawyers by:

• Reinforcing and strengthening existing scanning measures, including implementing daily monitoring in relation to password reset activity, new users and change of account details; including follow-up with our Members;
• Creating new users in an “inactive” mode, meaning only PEXA can activate all new users on your behalf after confirming the new user with you;
• Introducing Workspace time stamps so you can see who and when the Workspace was last updated; and
• Introducing an additional verification layer upon sign-in.