Surfside Beach, South Carolina lost $545,000 to email fraud in March 2026 when town officials sent the payment to a scammer's account instead of contractor Wildcat Construction. The town's verification procedures failed to catch the fraudulent routing instructions, and as of July 2026, the South Carolina Law Enforcement Division (SLED) has an active investigation with no resolution announced. The case centers on a dispute: the town says the contractor bears the loss since the money never reached Wildcat; Wildcat's leadership disputes the town's account of verification attempts and claims town officials never verbally confirmed the payment change directly. No criminal charges have been filed, and the $545,000 remains unrecovered.
Table of Contents
- How the Fraud Happened
- Investigation Status and Findings
- Who Bears the Financial Loss
- Employment Consequences and Disputes
- Frequently Asked Questions
How the Fraud Happened
Scammers created typo-squatted email domains and sent spoofed messages on March 9, 2026, appearing to come from Wildcat Contractors. The fraudulent emails redirected surfside Beach's ACH payment to an account controlled by the attackers. The town sent $545,000 via ACH on March 13, 2026, according to WMBF News.
An independent forensic investigation found no unauthorized access to Surfside Beach's Microsoft 365 accounts, meaning the attackers did not breach the town's email system. Instead, the fraud relied entirely on email manipulation—creating convincing lookalike domains and spoofed sender addresses. The forensic findings showed town systems were not compromised, per WPDE's report.
Investigation Status and Findings
SLED began investigating after Surfside Beach Police filed a request on April 28, 2026, as reported in May 2026. The investigation remains active as of July 2026, but no charges, arrests, or fund recovery have been announced.
The case is ongoing and no public resolution date has been provided. The town commissioned a forensic report that concluded town employees made a verification attempt before sending the payment. However, Wildcat Construction's CEO disputes this finding, stating the town never verbally confirmed the payment change directly with the contractor.
Who Bears the Financial Loss
The town's mayor stated that Surfside Beach does not believe it is liable, arguing the contractor should bear the financial loss since the money never reached Wildcat's legitimate account, per WMBF News in June 2026. This position assumes the contractor's insurance or bank fraud protections should cover the loss.
Wildcat Construction's CEO disputed the town's forensic report, claiming the town selectively released emails and contending that no verbal confirmation ever occurred between town officials and the contractor, according to WMBF News in July. Wildcat asserts it never received the funds or verbal approval from the town. This disagreement creates legal uncertainty about who ultimately recovers the loss.
Employment Consequences and Disputes
Two town employees—Brian Gray and Nicole Kindzia—were initially fired for their role in the payment error. However, the town administrator later disputed the extent of their involvement.
The terminations suggest the town held individual employees accountable for the verification failure, though the accuracy of that judgment has been challenged internally. This employment action remains disputed and may be relevant to potential liability claims. The circumstances of their terminations are not fully resolved in public records as of July 2026.
Frequently Asked Questions
Can I recover money sent to a fraudulent account?
Recovery depends on the bank that received the transfer, whether fraud was reported within your bank's timeframe, and the outcome of law enforcement investigation. Surfside Beach's $545,000 remains unrecovered, suggesting recovery from the recipient account has not succeeded. Contact your bank immediately if you suspect fraud.
Is email domain spoofing hard to detect?
Yes. Typo-squatted domains (like "surfsidesbeach.org" instead of the real town domain) can appear legitimate at a glance. Scammers also spoof sender email addresses. Verification should include a phone call or in-person confirmation with a known contact, not just email or message replies.
What happens if the investigation finds criminal charges?
If SLED identifies and charges a suspect, recovery of the $545,000 would depend on the defendant's assets and restitution orders. However, criminal recovery is often incomplete. Civil lawsuits between Surfside Beach and Wildcat may resolve the loss independently of criminal charges.