Cleveland issues alert after fraudsters target permit applicants with fake wire transfer demands

Cleveland officials launched a citywide awareness campaign on Wednesday to warn residents about a growing imposter scam that targets people who have submitted applications to the City. The fraud involves emails that claim an application, such as a building permit or civil ticket, needs an immediate wire transfer to cover administrative costs. The City says the scheme has increased in recent weeks and is currently targeting users of several municipal services.

The Department of Building and Housing, the Office of Information Technology and Services, the Law Department, and the City Planning Commission opened an investigation after learning of the fraud. They determined that the likely source of the problem was the Permit Portal, a website hosted by a City vendor. The portal displayed customer email addresses and phone numbers alongside legitimate permits. Fraudsters used this data to look up real projects and send emails that included accurate details, such as a new garage installation or a roof replacement.

The City contacted the vendor and instructed them to turn off features that exposed this contact information. The data has since been removed from the site. Officials noted that phone numbers and email addresses tied to permits and civil tickets were not posted on the City’s Open Data portal. The matter has been referred to law enforcement for further investigation.

Residents and business owners should verify any payment request by logging into their accounts on the City’s Permit Portal. The City states it will never ask for payment via wire transfer. Authorized payment methods include credit cards or bank payments through the portal, or cash and checks in person at City Hall at 601 Lakeside Ave. in Cleveland. Official emails from the Permit Portal come from Auto_Sender@mail.permitcleveland.org, while payment receipts come from customerservice@acipayonline.com.

The City has already taken steps to inform the public, including direct outreach to recent permit applicants and signage at City Hall. Fraud alert banners are now visible on the City’s main homepage and the permit portal. Given the uptick in occurrences, the City is expanding its efforts with social media posts and voice broadcasts in the coming days. The City is also working with the Cuyahoga County Scam Squad to spread the message to suburbs where scammers have targeted people doing business in Cleveland.

As of Wednesday, no one has reported paying the scammers, and no confidential information such as social security numbers or bank accounts has been compromised. The City encourages anyone who receives a suspicious email to report it to phishing@clevelandohio.gov. Residents can also call 311 to confirm the validity of a payment request with a Citizen Support Specialist.

The alert arrives just after Cybersecurity Awareness Month. The City reminds residents to watch for warning signs such as aggressive language demanding quick payment, requests for large sums for unexpected fees, or wire instructions sent through unauthorized third-party websites. Emails with suspicious sender addresses, distorted logos, or numerous typos are also common indicators of a scam. The Cybersecurity and Infrastructure Security Agency offers additional guidance on recognizing and reporting phishing attempts.