To be clear, I'm "looking at" my accounts just to make sure everything is there, and not obsessively checking performance. Mr. Bogle's advice to not "peek at your statements" is excellent metaphorically, but in today's world of on-line thievery, it is dangerous when taken literally. Look at your statements, just ignore the performance information.
So here's the problem, as grabbed from NW-Bound's excellent quote about ACATS above:
Another benefit is that clients do not need to let their previous brokerage firm or advisor know beforehand. If they are unhappy with their current broker, they can simply go to a new one and start the transfer process.
So ACATS "pulls" from the existing broker. This does not require 2FA, MFA, security questions, etc. It just happens. Most brokers, including Fidelity and Vanguard won't even send you a text or email even if you have notifications turned on. ACATS just happens silently. One day your securities are just gone.
I remembered when I moved from E*Trade to Vanguard just how simple it was. It seemed too simple.
The thief needs to have successfully obtained your identity info. They need your exact name, DOB, SSN. Most of this is freely available on the dark web. They use this to open an account at the "pulling" broker in your name. The next thing they need is your brokerage account number, and maybe some rough information about the account.
The problem with Fidelity is that the brokerage account number is encoded on checks if you have their brokerage checking account. If you have such a Fidelity account and use it, make sure to "lock" your account in their security section.
Other things to consider:
- Snail mail feels good, but it is insecure. Go electronic. Print your own. Thieves can and do steal mail for financial information and sell it on the dark web.
- If you have a history of being hacked at your brokerage (somehow someone got your credentials), and even though you've changed passwords and "nothing" happened, well, something happened and they may have saved a view of your brokerage life. Get the broker to get you a new account number (an internal transfer)
- If you use Fidelity, consider the "locking" feature in their security. I don't think Vanguard has this.
ACATS fraud is not running rampant. Don't panic. Just be on the lookout. I suspect if this kind of fraud gets more common, we'll see some changes to ACATS, or at least options to "lock" at more places.