A consumer recently described a bank fraud situation to me that is almost hard to believe.
She got an alert about an attempted debit card transaction at a particular merchant. She knew it was not hers, so she did exactly what you would hope a responsible customer would do: she called the bank while the fraud was still happening.
She told them the attempted transaction was fraudulent.
According to her, the bank told her there was nothing it could do because the transaction had only been attempted.
Then another attempt happened.
This one went through.
So she called the bank again and essentially said:
“I just told you somebody was trying to do this.”
This time, the bank told her it would send her a new debit card.
You would think that would be the end of the story.
It wasn't.
According to what she told us, the old debit card was apparently still able to be used as the source of another fraudulent transaction involving the same merchant.
At that point, the question changes. It is no longer simply “How did somebody steal money from my account?”
Now it is:
“I warned my bank. Why did they still let the money go?”
This Is Different From Discovering Fraud Afterward
Most bank fraud victims discover the problem after the money is already gone. They wake up, check their account, see transactions they did not make, and start trying to figure out what happened.
This situation is different because you are seeing the smoke before the house burns down. You call the bank and say, “Something is wrong right now.” You believe you have caught the problem in time because you did exactly what a responsible customer is supposed to do: you noticed the alert, picked up the phone, and told the institution holding your money that somebody appeared to be trying to take it.
Then you watch the thing you warned them about actually happen. That creates a very different kind of frustration from discovering fraud after the fact.
“But It Was Only an Attempt”
Think about how strange that sounds from the customer's side of the phone. You receive an alert telling you somebody is trying to use your debit card, you tell the bank “That isn't me,” and the response is essentially, “Well, nothing has happened yet.”
That may make sense inside whatever procedure, system, or limitation the bank representative is working with. But to the person whose account is under attack, it sounds insane because the whole reason you are calling is that nothing has happened yet. You are trying to stop the thing before it happens. That is what warnings are for.
Then the Fraud Succeeds
Now imagine getting the next notification and seeing that the transaction went through. You already called, identified the suspicious merchant, and told the bank the activity was fraudulent. Now money has left anyway.
I can understand why somebody in that position would be furious. You did not merely call afterward and say, “I don't recognize this.” You tried to warn the bank in advance. That does not automatically answer every legal question about what the bank was required or technologically able to do at each point, but it certainly raises a very reasonable factual question: What happened after I warned you?
Then You Get a New Card — But Is the Old One Really Dead?
In the recent situation described to me, the consumer says the bank then told her it would issue a replacement debit card. That sounds like the obvious next step. If the existing card information has been compromised, you would naturally expect the compromised card to stop being useful.
But according to her account, another fraudulent transaction involving the same merchant was later sourced through the old card. If that is what happened, you can understand why she was stunned.
From her perspective, she had caught the attempted fraud, warned the bank, watched a later attempt succeed, warned the bank again, been told the card would be replaced, and then watched another transaction occur anyway. At some point, you stop feeling like you are dealing only with an unavoidable crime and start wondering whether some of the loss could have been prevented.
You Did What People Tell Fraud Victims to Do
Whenever fraud happens, consumers are constantly told to act quickly: watch your accounts, turn on alerts, report suspicious transactions immediately, contact the bank, protect your card, and do not wait. That advice makes sense.
But if you actually do all of those things and the fraud keeps happening anyway, you are entitled to ask what the bank did with the warning you gave it. You did your part. You noticed something was wrong and raised your hand while there was still a chance to do something about it.
That is the part that bothers me. We spend a lot of time telling consumers that speed matters, but speed only helps if somebody on the other end knows what to do with the warning.
The Front-Line Representative May Not Be the Real Problem
I do not assume that the person answering the telephone understood everything that was happening or had the ability to fix it. The representative may have been following a script. Maybe the system would not allow that employee to take a particular action. Maybe the person genuinely believed the answer they gave you was correct.
That is why I am less interested in blaming whichever customer-service employee happened to pick up the phone than I am in asking a larger question: What system did the bank have in place for a customer who was actively reporting an attempted fraud? And if the bank later says it investigated the fraud, you are entitled to ask what that investigation actually included.
If everybody followed the system exactly as designed and the money still kept leaving, that does not necessarily make the story better. It may make the system itself the interesting part.
There Is a Point Where “Fraud Happened” Is Not the Whole Story
Banks cannot stop every criminal. Fraudsters are creative, fast, and constantly finding new ways around security systems. But sometimes a case presents a different question because the bank received a warning while events were still unfolding.
What if you identified the suspicious merchant before a successful transaction? What if you called again after the first loss? What if the bank told you the card was being replaced, but the old card apparently continued to play a role in later activity? Those facts deserve a closer look together, not one at a time.
At that point, the story is no longer only about the thief. It is also about what happened after the bank had notice that something was wrong.
This Is Why We Exist
If you saw suspicious activity, warned your bank while it was happening, and fraudulent transactions went through anyway, I would not assume that the bank's eventual denial is the end of the story. The timing matters. What you told the bank matters. What happened next matters.
Call us, start a chat, or fill out the contact form on this website and select “Bank Hacking.” Tell us when you first saw the suspicious activity, when you contacted the bank, what the bank told you, and what happened afterward.
There is no cost to find out if our law firm can help. We only get paid if we recover money for you.
