Slashdot Log In
Too Easy For Bank Accounts To Spring a Leak
Posted by
kdawson
on Sun Aug 31, 2008 03:28 PM
from the drip-drip-drip dept.
from the drip-drip-drip dept.
The NYTimes has a cautionary tale of automated clearing house fraud. Parties unknown siphoned money from an individual's bank account. Nothing too unusual there, except that it was an elite private banking account at JPMorgan Chase, and the account holder is out $250K — the bank will only cover $50K of his loss. The $300K came out of the account in small transactions over 15 months. The bank offered no recourse except to open a new account, a large hassle given that the account is more than 20 years old and its holder writes a thousand checks a month. The article details how the spread of electronic settlements between banks has given rise to growing automated clearing house fraud — if anyone gets hold of the magic combination of account number and bank routing number, and once has permission to withdraw funds, all bets are off. Banks are unlikely to question future withdrawal orders. Moral of the story: go over your bank statements line-by-line every month, and question anything that looks funny.
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Well... Why? (Score:5, Insightful)
Why are not banks responsible for fraud?
Is it not the bank's responsibility to maintain security and keep secure transactions?
Then... Why the limitation of 50k$ when FDIC covers 100$k ?
Re:Well... Why? (Score:5, Informative)
Parent
Re: (Score:2, Insightful)
I'm sure these were as far the the bank could tell proper and secure transactions. The issue here is that the account holder didn't notice for 15 months!
The FDIC protects you from bank failures, not something like this.
Bottom line: being wealthy does not absolve you of the duty to balance your checkbook. Do that
Re:Well... Why? (Score:5, Informative)
Next time, try reading the article.
Or for critical reading, read the cut-n-paste
That second paragraph cues me in that he DID complain, and was given a runaround and no real answers.
Parent
Re:Well... Why? (Score:4, Interesting)
He really just complained that he couldn't balance his checkbook, though. If the difference was so large, he should have tracked it down line by line until the discrepancy was resolved, or fraud discovered.
And I don't understand how a statement can be "complicated". For each transaction, there is a line. There is an amount, and a name of some kind that tells you what it was for. You compare this with your records. If you have a match, then you're good, move to the next one. If nothing in your records matches that line, then you have an error, red alert, call your bank and tell them you've found an important mistake or fraud.
Sounds to me like he found a discrepancy but never went through the work of tracking it down. And as a result this theft went undetected for far too long.
Parent
Re:Well... Why? (Score:5, Insightful)
that's easy to say when you're not writing a thousand checks a month.
and the fact of the matter is, he didn't issue or authorize the account transfers that he's being charged for. so why should he have to pay for fraud? is there a clause in his banking contract that says "the bank is allowed to give away your money without your consent as long as we list the transactions in your monthly statement?"
Parent
Re:Well... Why? (Score:5, Interesting)
Not quite. It's more that any transaction which is printed in your statement and which is not challenged by you within a certain period of time (typically two months) is considered to be authorized.
If your financials are so complex that you are unable to audit them for evidence of fraud then you need to hire professional help.
Parent
And there's some easy ways to help simplify them (Score:3, Interesting)
Credit cards can help a lot. You don't use your bank account to make purchases, you use your credit cards to make purchases, and your bank account to pay your creditors. This does a couple things:
1) It reduces the amount of transactions to and from your bank account to just a few, rather than everything you do. Things like your mortgage payment(s), car payment(s), and of course payments come from your bank account. Just about everything else is on a credit card. Thus fraudulent bank transactions are much ea
Silly (Score:5, Informative)
Seriously with a bit of work it shouldn't be hard to keep track of your financials these days, especially with instant access via the Internet.
You've obviously never seen a private banking statement. For fun, I pulled out my July statement. There were 3 actual transactions on it (not dividend/reinvestment), and the statement was 40 pages long.
These statements really scream "DO NOT READ ME". I'm just sayin'. (Yes, I read and understand my statement, but I can fully sympathize with those who cannot. I needed my banker to go through the first one with me page by page just to understand the thing, and I do not consider myself to be an idiotic or financially illiterate person.)
Parent
Ok so (Score:3, Insightful)
Is someone forcing you to use a bank with statements that complex? Seems to me there's a lot of choice in banks out there. If you bank has statements that are too complicated, get a different bank. Now supposing that you have an extremely large amount of assets and for whatever reason necessitates the use of such a bank (as a note I know a couple of multi-millionaires, all use regular banks) then maybe you need an accountant. When things get complicated, you hire a professional. My parents own a small busin
Re: (Score:3, Informative)
Is someone forcing you to use a bank with statements that complex? Seems to me there's a lot of choice in banks out there. If you bank has statements that are too complicated, get a different bank.
Nobody is forcing me to use that private bank, and I have no particular affinity for complicated statements (although I'm pretty sure all private banks have similarly complicated statements). The only reason I use my current bank is because that's where my portfolio manager works. If he moved, I'd move too. I spent months looking for one that I trusted, and now I have experience with him to validate that trust.
When things get complicated, you hire a professional.
You're preaching to the choir here. I have a banker, financial planner, portfolio manager, boo
Re:Well... Why? (Score:4, Informative)
Banks are responsible for fraudulent transactions if you tell them about it in a timely fashion. Banks don't and can't know whether every single transaction is legitimate or not. There's simply no way for them to do so. For example, what if somebody alters one of your checks, for example, to read an amount greater than what you wrote? Assuming a good alteration, there's no way they could know that this is not the amount of money that you intended.
Even in the case of more obvious fraud, it should be clear that there needs to be some kind of time horizon. What if I'm the victim of ACH fraud as this person was, but I don't tell the bank about it until five years after the fact? It's way too late for the bank to do anything about it by then. And in fact this would leave the bank open to different types of fraud. For example, you arrange for a friend to "defraud" your account by some amount, split the money between you, then have your friend seal himself off from the offending account over the intervening years. Then five years later you make a complaint and get your money "back", resulting in a healthy profit for the both of you with little risk.
If we're on the same page about it so far, the question is what that time horizon should be. Well, big daddy government has already answered that for us: that time horizon is 60 days. That's why this guy is still getting $50,000 back from his bank, because that's the amount that was stolen within the past 60 days.
If this guy had noticed the fraudulent transactions in a timely manner then I would agree that we shouldn't blame him at all for failings of the system. But he managed to miss twenty thousand dollars a month leaving his account for well over a year before he figured out that he was being ripped off. He discovered trouble earlier but apparently decided that it was too inconvenient to follow up on. When asked about the discrepancy, the bank told him that their statements were accurate. What was absolutely true! Their statements included an enormous amount of theft that his records did not. But for some reason he didn't pursue these persistent discrepancies, and he is now paying the price for that decision.
Parent
Retail vs. Private banking (Score:4, Insightful)
And I don't understand how a statement can be "complicated". For each transaction, there is a line. There is an amount, and a name of some kind that tells you what it was for.
That is because you are a retail banking customer.
Private banking statements are incredibly complex. I should post one of mine just so you can see. I can see how if you did a lot of transactions (I don't), it would be impossible to have clue #1 what the hell was going on. Truly. And I am an economist.
Personally, I have a manged portfolio at a private bank, but my day-to-day transactions are in a retail bank account for precisely this reason. My banker once asked me why I didn't take advantage of their transactional accounts and I told him because it would make my life too complicated.
The guy in the article, frankly, should have had a bookkeeper, and that bookkeeper should have known what was up.
Parent
Re: (Score:3)
Please, explain how "private" banking statements differ. My business banking account statements are laid out differently from my personal accounts (the former show credits, checks paid, and then debits; the latter is a chronological listing of all activity, line-by-line) but there's nothing extremely complex about it. Even my brokerage account statement is laid out in a categorical format (purchases, sales, current holdings, margin activity, etc.). What other way is there to lay out a bank statement other t
Re:Retail vs. Private banking (Score:4, Interesting)
Personally I don't even know what the difference is between retail banking and "private" banking, much less what a private banking statement actually looks like.
Wikipedia [wikipedia.org].
I just don't understand how it can be so complex. I mean, any statement should have a list of transactions, and that transaction should have a date, an amount, and a description. If the transaction is a check then it will list the check number. If it's an ACH transfer, then the description will be something about the nature of the other end. I simply don't see how you can make a list of transactions so complex that it becomes infeasible to check them. If you could provide some enlightenment on this then it would be much appreciated.
No problem. I just pulled out my unopened July statement. The entire statement is structured so that you never get past the first page, if you look at it at all.
To give you an idea of how needlessly complex these statements are, consider this: My portfolio manager manages, for my wife and myself, nothing more than our taxable investments, and one nondeductible IRA for each of us. That's it. So what do you think our statement looks like?
For one thing, it is 40 pages long, and the front page gives your portfolio's total value and change since the previous month (what you really care about, anyway). Oh, did I mention that it's printed in such a way that you need to put it into a binder to even read it. The whole thing just screams, "DO NOT ATTEMPT TO READ ME".
There is a ton of information in there, and it's all in abbreviations and shorthand. It's organized funny, and the actual transactions are difficult to pick out in between all of the dividends and reinvestments. The bottom line is once you are taught how to read the thing, you can understand it if you want to, but ... let's face it... if I really wanted to be on top of these things, I wouldn't be paying someone to do it for me.
I actually do, at one point or another, read all of our statements and make sure there isn't anything grossly wrong with them. But I can't imagine just how long our statement would be if we used the private bank for our transactional accounts. They want us to, of course, but it will never happen.
The real moron in the story is the guy in TFA's bookkeeper (he must have one, because I don't believe that the guy personally writes 1000 checks per month (33 checks per day!)). The bookkeeper should have recognized those unauthorized transactions and handled it. Surely the bookkeeper didn't believe that his employer ordered $300,000.00 worth of Dell laptops via ACH debits out of his personal checking account.
Parent
Re:Well... Why? (Score:4, Insightful)
If you have that much money, eight hours per month to keep it seems reasonable.
Parent
or a professional (Score:5, Insightful)
... that or just paying somebody monthly to keep track of it all.
Parent
Re:or a professional (Score:4, Insightful)
Indeed. Perhaps some kind of company with expertise in financial matters. One with experience in keeping peoples money and valuables safe.
Something like a bank really...
Parent
Re:Well... Why? (Score:4, Insightful)
Parent
Re:Well... Why? (Score:4, Interesting)
I do not believe he's telling the truth, and if he really is that stupid, and e.g. totally unable to hire a CPA for a few days of low impact forensic accounting, he deserves exactly what he got.
My parents are millionaires. They also did a lot of bookkeeping to get there (I can remember a number of nights when they were looking for the wrong transaction(s) that caused a balance mismatch). Nowadays they're retired and still check all their statements each month and reconcile those against their records.
I repeat: being rich does not absolve you of the duty to balance your checkbook.
Parent
Sounds like Credit Suisse (Score:5, Informative)
And a retail bank statement is kindergarten arithmetic compared with the monthly statement for a private banking client.
I used to have a Credit Suisse account, and they did, indeed, have incomprehensible statements, even for a simple situation. They had a "current account" and a "time account". The current account didn't pay interest, but the "time account" did. Interest from the time account went into the current account, and when it exceeded US$1000, it was moved to the time account in multiples of $1000. Separate statements were provided for each account, on different schedules, didn't mention what was happening in the other account, and were difficult to match up. Lots of weird fees, too, including charging commissions on their own time deposits. It all seemed to be about fee maximization.
And this was without doing much in the way of transactions on the account. If you did lots of transactions against accounts like that, it would be really tough to track what was happening. The combination of inter-account transactions and differing statement cycles confuses the issue.
Parent
Re: (Score:3, Informative)
Yes, but they weren't proper and secure transactions. Why should the account holder be culpable for the bank's failure to protect itself from fraud?
To your second point, I agree. Someone who has so much money that they don't notice an average of $20,000 per month missing from what is apparently a very active account should probably hire an accountant. For that much money you can get a very good one and apparently still have enough money left over that you will come out ahead.
Not true... (Score:3, Insightful)
To your second point, I agree. Someone who has so much money that they don't notice an average of $20,000 per month missing from what is apparently a very active account should probably hire an accountant. For that much money you can get a very good one and apparently still have enough money left over that you will come out ahead.
*IF* you happen to be stolen from. If you're not unlucky enough to be stolen from, then the accountant to watch your account is a waste of money.
Since the odds you become a victim
Indeed. (Score:5, Insightful)
A bank account is a loan to the bank in exchange for money or services. If the bank is defrauded out of some money, why is it the account holder who loses out?
If someone claims to be my bank and tricks me into giving them $200, can I deduct that amount from my next car payment?
Really think about what has happened here. Person A loans Person B $100. Person C tells Person B that Person A owes them $100, so if Person B pays Person C $100 everyone will be square. Person B obliges not realizing Person C is lying. Is Person A the one out $100?! He had no control over the actions of Person C or Person B!
Parent
Re: (Score:3, Insightful)
Yes, but in this case Person B tells Person A about the transfer to person C, in the form of a printed statement.
Person A acknowledges the correctness of the written statement by failing to report an error after Person A has examined it.
The banking laws give Person A a legal obligation to take due care in examining the statement within 30 days. If there was an unauthorized ACH transaction, it may be reported within 60 days time, which is ample opportunity for Person A to rectify the situation.
In this
Re: (Score:3, Interesting)
A bank account is a loan to the bank in exchange for money or services. If the bank is defrauded out of some money, why is it the account holder who loses out?
Sadly, it's because the bank has much more resources than the individual. Sure, the individual could hire lawyers and mount an attack, but the bank is big enough, has enough political ties, and has so many more resources that they're probably able to just weather the attack until the individual is spent. Even worse, the bank probably has the laws on
Re: (Score:3, Informative)
Then... Why the limitation of 50k$ when FDIC covers 100$k ?
FDIC is not fraud insurance, it's total bank failure insurance. Big difference.
Moves (Score:2, Insightful)
Re: (Score:3, Insightful)
Re: (Score:2)
Magic numbers on every check.... (Score:5, Insightful)
Ummm, you do realize that's on the bottom of every check that you write (in MICR [wikipedia.org]). That's how your check gets matched up to your account for processing....
Re: (Score:3, Insightful)
Yes; if you never write me a check, or provide me with your account information in some other way, then I can't steal all your money.
The only form of authentication on a check is your signature. Electronic funds transfers don't have that.
Re: (Score:2)
Also from the post "...and its holder writes a thousand checks a month."
Wonder how this happened.
Re: (Score:3, Insightful)
No, he didn't. What's to stop someone from claiming to have authorization? Think a minute. When was the last time, when paying by automatic debit from your account (e-check), you told your bank that the merchant had authorization? You didn't. You told the merchant he had authorization, but the bank is simply trusting that he does. So what exactly stops a fraudster from claiming he's got authorization too?
scary (Score:2)
Does this mean that your account number is enough to make a withdrawal from it ? No secret code necessary ?????? no card required ?
Re: (Score:3, Informative)
Thats correct.
I trawl through your trash looking for checks (photocopies or voids, it doesnt matter).
All I need is your routing number and checking acct number. Even the routing number can be obtained by calling the bank and asking for it. It's nearly public knowledge.
The only tricky thing is the requirement of ACH access. One could "pay via e-check" by getting the 2 chunks of information and forge them. There's not a damned thing that can be done about that. Once it hits an approved ACH dealer, you're scre
Re: (Score:2)
Damn, I'll stay in Europe with my money ...
Re: (Score:3, Insightful)
Banks allowing automated withdrawals are standard here too in the Netherlands (although you can block automated invoicing for your account all together). The companies keep your admission slips and only have to reproduce your admission when you challenge a payment (in time).
There should obviously be an automated system where you yourself can allow automated invoicing for specific accounts and for specific maximum amounts ... but there isn't. All the banks have are some heuristic automated checks to make sur
Cover (Score:2)
What's to keep the bank themselves from taking $100k out sometimes and then saying they only cover $50k of it? They have access to all of that information and I wouldn't put it above one of them to do so.
If I were the company that lost $200k+ mentioned in the article, I would make the bank spend at LEAST $200k+ in legal fees to defend against my many lawsuits I'd file. Run them into the fucking ground if they won't insure your money and investigate problems on their own dollar.
Re: (Score:3, Informative)
The bank's responsible for 100% if you catch it within 60 days of the transaction. This guy did not piece together what had happened until 15 months after the first transaction.
Re: (Score:2)
Run JP Morgan into the ground with legal fees? Yea good luck with that.
It's easier than that. (Score:2)
Or you could just compare expected balances. You know, I started with X, authorized Y debits and now should have Z. If balance ~ equals Z, no need to go line by line.
Sure, it royally sucks if someone made off with your money. But the account holder has some responsibility, wouldn't you agree? If someone is siphoning money out of my account for 15 months, I'd definitely notice and report it in the first mont
Re: (Score:2)
If someone is siphoning money out of my account for 15 months, I'd definitely notice and report it in the first month.
He actually did. From TFA:
"I kept complaining that the bank's records showed I was overdrawn when I shouldn't be"
Re:It's easier than that. (Score:4, Insightful)
There's a big difference between "your records don't agree with mine" and "this transaction, right there, was not authorized by me and does not appear in any of my records". This fellow did the former but apparently never got as far as the latter.
Parent
Re: (Score:2)
Re: (Score:3, Informative)
Or you could just compare expected balances.
He did. He called to complain several times and was told that there was nothing wrong.
But the account holder has some responsibility, wouldn't you agree? If someone is siphoning money out of my account for 15 months, I'd definitely notice and report it in the first month.
Actually, you probably wouldn't have clue #1. Especially not the first month.
If you RTFA, you'll see why. Private banking statements are really hard to read if you're not used to them. Hell, they're hard to read even when you are used to them.
After my wife and I got our first statement, we had to go into our private banker and ask for a lesson on how to read the thing, and my wife and I are not financially illiterate.
Bank accounts springing leaks? (Score:2)
That's their own fault, putting up access via the intertubes and all.
Checks suck (Score:4, Insightful)
We just had a story on automatic bill pay where I voiced [slashdot.org] my support for credit cards over writing checks. This story supports that:
First, if someone defrauds your credit card, you're not liable. Dispute the charge and you're done, the onus is then on the merchant to prove the validity of the transaction. With cash accounts, once the money is gone, it's gone.
Second, checking accounts are difficult to reconcile as can be seen from the linked story. The person in question despite being financially sophisticated, was not able to be SURE about what his balance should be. Because the checks settle out of your account at the timing discretion of the recipient of the funds, it's not possible to say what your balance on any given day should be, which makes it hard to spot problems as they occur.
While the Guy (hah) in the article probably cannot avoid writing many checks due to his business, the fewer checks an individual writes the easier it is to keep track of one's balances. As long as you have the discipline to not abuse your credit card, it's the way to go.
-Ed
Re: (Score:3, Interesting)
I use Quicken to take care of my finances. Every day, I enter in every check or debit transaction I made that day. Then, I download transactions from my bank online, usually every morning. If there's a transaction that doesn't match up to something I've already entered, I can see it immediately. This allows me to not only easily spot fraudulent transactions, but also allows me to keep an eye on how much money I really have available, regardless of what the bank says.
Now granted, I only have a couple of
Re: (Score:3, Informative)
This allows me to not only easily spot fraudulent transactions, but also allows me to keep an eye on how much money I really have available, regardless of what the bank says.
Great. So, like this guy did, you go to your bank with your QuickBooks or whatever, showing that you should have substantially more money than you do, and the bank tells you to go soak your head, they're the bank goddammit, and there's no way in hell that your accounting could be more accurate than theirs.
You know, like they told this g