A luxury property firm in New York City has been scammed out of nearly $19 million due to a single phishing email, according to sources and emails obtained by The Post. Milford Entities/Management Company, which owns several high-end properties including Liberty View and Liberty Luxe in Battery Park City, was targeted in early July.
The scam involved a “spoofing” email that led the firm to accidentally transfer $19 million into a TD Bank account posing as the Battery Park City Authority. The Department of Homeland Security is now leading an investigation into the incident, which has also been taken up by law enforcement agencies.
The scam affected buildings owned directly by Milford Management and others managed by the company. PILOT fees, or “Payment In Lieu Of Taxes,” were involved in the theft, with funds collected from over 2,000 units being sent to the Battery Park City Authority on a quarterly basis. The BPCA confirmed it did not receive the company’s quarterly payment due in early July.
The incident has sparked warnings from residents and property managers in the area, with some urging caution against cyber threats. The Department of Homeland Security is continuing to investigate the matter.
Source: https://nypost.com/2025/08/05/us-news/milford-entities-of-nyc-allegedly-scammed-out-of-19m-thanks-to-single-phishing-email