USAA savings acct hacked for 5 figures

[mickeyd]

Hi davismills. So sorry for your banking problems.

You mentioned

Quote:

when I returned home the account had been hacked again.

Unless I missed something, was that second "hack" also a forged check or was it something else?

[davismills]

Quote:

Originally Posted by mickeyd Hi davismills. So sorry for your banking problems. You mentioned Unless I missed something, was that second "hack" also a forged check or was it something else?

To the best of my knowledge it was another forged check (triple the size of the first one). I could not verify because the second phone call to USAA apparently caused them to actually freeze the account. I can see the amount of the forgery, but not the instrument. The thief seemed to be fishing for the "bottom" of my account.

[mickeyd]

I agree with others who indicate that the bank will "make you whole." It's clearly not your fault. I am surprised that USAA FSB has not provided you with better customer service. They thrive on that stuff.

[mystang52]

OP: For the life of me I don't see how these forged checks - or whatever the term is - could possibly be your legal liability. I'm sure this is stressful until the money is reinstated, but it sure looks like a no-brainer that you will get your money back.

[MichaelB]

Quote:

Originally Posted by davismills To the best of my knowledge it was another forged check (triple the size of the first one). I could not verify because the second phone call to USAA apparently caused them to actually freeze the account. I can see the amount of the forgery, but not the instrument. The thief seemed to be fishing for the "bottom" of my account.

Even though you have spoken with USAA at least twice on this and your account has been frozen, you still need to report this in writing - proof that you reported the fraud in a timely manner. You should send the letter certified, with return receipt. Mentioning in the letter that you have filed a police report can be helpful.

[davismills]

Quote:

Originally Posted by MichaelB Even though you have spoken with USAA at least twice on this and your account has been frozen, you still need to report this in writing - proof that you reported the fraud in a timely manner. You should send the letter certified, with return receipt. Mentioning in the letter that you have filed a police report can be helpful.

Will do. Picking up the police report tomorrow.

[Texas Proud]

Quote:

Originally Posted by MichaelB It's in the thread title.

OK... missed that... thanks!!!

[Another Reader]

I split cash among several banks for this reason. If someone empties one account, there are others that will supply emergency funds while the bank taking the loss straightens out the mess.

I would include a copy of the police report in the certified letter.

[davismills]

Update: After a week of phone calls and certified mailings of police reports and letters, USAA has made me whole. Apparently, the banking industry is regulated differently regarding forged checks versus ATM/credit card fraud. Of the dozen or so calls I made, I was given a different explanation each time, so I'm convinced that the experience level at USAA has decreased somewhat.

I've run virus/spyware scans on both of my computers and each time they've come up clean. We've moved all financial info to one dedicated Ubuntu (Linux) based laptop that remains offline 99 percent of the time. That laptop has one purpose and one purpose only. All my money has been moved to a local backup bank. I still don't know HOW someone got my account number and I suppose that will remain a mystery.

I sincerely hope that no one following this thread ever experiences a week such as this one. Thanks for all the advice...which was spot on.

[MichaelB]

Good news! Thanks for the update.

[REWahoo]

Good news that you've been made whole, and although it may have seemed like a long battle, a week is really a short time to get full restitution.

Quote:

Originally Posted by davismills I've run virus/spyware scans on both of my computers and each time they've come up clean. We've moved all financial info to one dedicated Ubuntu (Linux) based laptop that remains offline 99 percent of the time. That laptop has one purpose and one purpose only. All my money has been moved to a local backup bank. I still don't know HOW someone got my account number and I suppose that will remain a mystery.

Check fraud pre-dates computer hacking by a hundred years or more. Account numbers are relatively easy to obtain, especially for a skilled check forger. I doubt your computer was involved, but it never hurts to take precautions.

[target2019]

Quote:

Originally Posted by davismills Update: After a week of phone calls and certified mailings of police reports and letters, USAA has made me whole. Apparently, the banking industry is regulated differently regarding forged checks versus ATM/credit card fraud. Of the dozen or so calls I made, I was given a different explanation each time, so I'm convinced that the experience level at USAA has decreased somewhat. I've run virus/spyware scans on both of my computers and each time they've come up clean. We've moved all financial info to one dedicated Ubuntu (Linux) based laptop that remains offline 99 percent of the time. That laptop has one purpose and one purpose only. All my money has been moved to a local backup bank. I still don't know HOW someone got my account number and I suppose that will remain a mystery. I sincerely hope that no one following this thread ever experiences a week such as this one. Thanks for all the advice...which was spot on.

1) Also examine the router and/or wireless for any vulnerabilities.
2) Think about who has physical access to your "secrets."

[akck]

Quote:

Originally Posted by davismills I still don't know HOW someone got my account number and I suppose that will remain a mystery. I sincerely hope that no one following this thread ever experiences a week such as this one. Thanks for all the advice...which was spot on.

They simply could have gotten your information off a check you wrote. We had that happen several times where I used to work. In one case, I suspected an employee copied a check at a vendor. There were two likely vendors in the area where the forged checks were being passed. They just created personal checks using our bank account info that is at the bottom of each check.




Sent from my iPad using Early Retirement Forum

[mickeyd]

Quote:

USAA has made me whole.

Great news. Nice job staying with it!

[MichaelB]

Quote:

Originally Posted by davismills Update: After a week of phone calls and certified mailings of police reports and letters, USAA has made me whole. Apparently, the banking industry is regulated differently regarding forged checks versus ATM/credit card fraud. Of the dozen or so calls I made, I was given a different explanation each time, so I'm convinced that the experience level at USAA has decreased somewhat. I've run virus/spyware scans on both of my computers and each time they've come up clean. We've moved all financial info to one dedicated Ubuntu (Linux) based laptop that remains offline 99 percent of the time. That laptop has one purpose and one purpose only. All my money has been moved to a local backup bank. I still don't know HOW someone got my account number and I suppose that will remain a mystery. I sincerely hope that no one following this thread ever experiences a week such as this one. Thanks for all the advice...which was spot on.

Just curious - did USAA share with you if this fraud was carried out at a USAA branch or did it take place at another bank?

[harley]

Quote:

Originally Posted by target2019 1) Also examine the router and/or wireless for any vulnerabilities. 2) Think about who has physical access to your "secrets."

You're over-thinking this.

Quote:

Originally Posted by akck They simply could have gotten your information off a check you wrote. We had that happen several times where I used to work. In one case, I suspected an employee copied a check at a vendor. There were two likely vendors in the area where the forged checks were being passed. They just created personal checks using our bank account info that is at the bottom of each check.

There's very little easier to come by than an account number. Then you can look up the routing number on the web. I do it all the time when I don't have my checkbook nearby. According to the OP's statements someone kited a couple of checks on him. That doesn't have anything to do with his computer. It would be like running Malwarebytes because somebody stole your car.

[jazz4cash]

Ok I'm confused about how a fake check can be drawn against a savings account. I know every check has the account and routing info in plain text (why is that not encoded) but how does that provide access to a savings account ?


Sent from my iPhone using Early Retirement Forum

[MRG]

Quote:

Originally Posted by jazz4cash Ok I'm confused about how a fake check can be drawn against a savings account. I know every check has the account and routing info in plain text (why is that not encoded) but how does that provide access to a savings account ? Sent from my iPhone using Early Retirement Forum

The reason the MICR isn't encoded is that today it's read by machines at about 100 checks a second. I'm assuming that's because prior when humans had to read cheques they had to be readable.

Can't explain the savings account.

[jazz4cash]

Quote:

Originally Posted by MRG The reason the MICR isn't encoded is that today it's read by machines at about 100 checks a second. I'm assuming that's because prior when humans had to read cheques they had to be readable. Can't explain the savings account.

Thanks but it seems your point is more in favor of encoding than plain text. (I can guess the meaning.but what does MICR stand for?)


Sent from my iPhone using Early Retirement Forum

[gauss]

Quote:

Originally Posted by MRG The reason the MICR isn't encoded is that today it's read by machines at about 100 checks a second. I'm assuming that's because prior when humans had to read cheques they had to be readable. Can't explain the savings account.

Paper Account statement that fill into the hands of a bad actor?

I am pretty sure that banking ACH/EFT transfers will in general work for savings as well as checking accounts.

-gauss