Dubai: A UAE-based HR services provider has been conned out of nearly Dh50,000 after cybercriminals impersonated Emirates Flight Catering (EKFC), one of the country’s largest catering companies. The sophisticated scam involved fake email domains, spoofed company names, and a fraudulent vendor onboarding process that closely mirrored legitimate corporate practices.
How the Scam Unfolded
The incident, which occurred last month, came to light when the HR firm discovered it had been communicating not with EKFC but with fraudsters. The attackers used deceptive domain names — project[at]vendor-emireteflightcatering[.]com and project[at]vendor-emiretesflightcatering[.]com — both containing subtle misspellings of “Emirates.”
To make the ruse appear authentic, emails displayed the sender name as “Emirates Flight Catering EKFC.” The fraudsters convinced the HR firm to pay a “refundable registration deposit”, followed by a demand for a $300,000 bond, claiming it was part of EKFC’s vendor approval process.
The company grew suspicious when communication abruptly stopped. A review revealed multiple red flags: no official EKFC staff were copied in emails, domains were slightly altered, and the fraudsters created pressure with urgent payment demands.
EKFC Responds
Emirates Flight Catering confirmed it had been alerted to the fraudulent activity and urged all partners to remain vigilant. The company is cooperating with authorities to investigate the case.
Expert Warnings on BEC Attacks
Cybersecurity experts say the case highlights how business email compromise (BEC) attacks are increasingly targeting UAE businesses.
“Criminals often weaponise small details, like a misspelled domain or an urgent payment request, to trick victims into acting fast,” said Maher Yamout, Lead Security Researcher at Kaspersky. “BEC attacks are among the costliest cyber threats globally, and the UAE is no exception.”
The FBI estimates that BEC scams cause billions of dollars in losses every year worldwide. Experts warn that the Gulf region’s reliance on procurement and vendor partnerships makes it a prime target for cybercriminals.
Call for Action
Kaspersky urged businesses to report scams promptly to police and banks, not only to improve recovery chances but also to protect other firms from falling victim.
The victim in this case, currently abroad, has yet to file a formal complaint.
