A Gauteng attorney has been found liable to pay clients R1.4m, the proceeds of the sale of a property they owned, which was stolen through a ‘business email compromise’.

The ruling comes weeks after ENSAfrica was found liable, in a separate and unrelated matter, for a client's loss through email fraud.

In the latest ruling, GroundUp reports that attorney Gavin Hartog believed he was transferring the money into his client’s account, but he was unwittingly paying it into the Standard Bank account of a fraudster who had intercepted his email correspondence.

The fraudster withdrew the money almost immediately and it has never been recovered.

Hartog’s clients – Brigitte Daly, her husband Patrick Daly and her sister Karin Foulkes-Jones (now deceased) – first secured an order against him in the Gauteng High Court (Johannesburg) in June 2021. Hartog appealed this. But Judge Rean Strydom, with Judge Majake Mabesele and Acting Judge Johannes Strijdom concurring, said Hartog had initiated correspondence with the clients via email and they had responded using the ‘same means’.

He had thus ‘breached the mandate’ by not making payment of the proceeds of the property sale into Patrick Daly’s account and remained responsible.

The property in question was owned by Karin and Brigitte and was sold in June 2018. They instructed Hartog to deal with the conveyancing. The amount of R100 000 was paid into Karin’s account and the balance, about R1.4m, was to be paid into Patrick’s Standard Bank account.

Instead it was paid, via EFT, into the Standard Bank account of a Mr Simelane.

Strydom said Hartog had emailed Karin and Brigitte informing them of the amount payable to them from the sale. He requested that they send him ‘instructions and bank details’.

Three days later, Patrick emailed Hartog providing details of his Standard Bank account. Hartog sent a further email to Patrick confirming the instructions and asking for confirmation of the bank account details.

While Patrick said he responded on the same day, Hartog claimed he did not receive that email. 

Then, notes the GroundUp report, Hartog received what he believed was a further email from Patrick, asking that Hartog deposit the money into another account. Attached was a purported account confirmation from Standard Bank.

Hartog said he accepted the authenticity of this and made the payment. It later emerged that the email had been sent by a fraudster.

Strydom said Hartog did not inquire further as to the reason for the change of account number. Hartog submitted that the mandate had a ‘tacit term’ that his clients would exercise utmost caution and ensure the integrity of their emails.

‘There is no evidence that the fraudster obtained the information from the respondents. The fact remains, however, that Patrick sent the correct instruction which was received,’ the judge said.

‘The fact that a fraudster intercepted or obtained information which led to the fraudulent email and payment cannot be used to support the existence of this tacit term. That would amount to using hindsight as a consideration to determine what terms should be imputed into the mandate,’ said the judge. 

Hartog also sought an order that if he was found liable for the stolen money, then Standard Bank should pay because it had been negligent.

The bank said Mr Simelane had opened the account following a FICA process. His identity had been verified and proof of residence obtained and there was no reason to suspect that the account was going to be used for fraudulent purposes.

The bank contended that it had no duty to match an account name with an account number.

Strydom said to find the bank liable, wrongfulness and negligence would have to be established, GroundUp reports.

Hartog’s appeal was dismissed, with costs.

Full GroundUp report

Judgment