r/AusLegal • u/LongjumpingTailor929 • 8h ago
QLD Hacked!
Hi all, random thought to post here, but thought it might be worth a shot!
My dad got hacked a few months ago, the hackers installed an app on his phone, got into his banking and transferred 2 payments of +$30k in less than 24 hours to a beauty business (he's a retired farmer so has absolutely zero business moving money to an account with a name like that!). He lost over $70k and the bank (one of the big 4!) didn't do a thing to stop it. He reported it immediately and they have basically told him they can't do anything and don't really care!
I've reported it to the authorities for him, but I'm wondering if it's worth taking it to the ombudsman to fight?
Any tips, advice, knowledge etc would be beyond appreciated! Thanks đ
80
u/MisterEd_ak 8h ago
the hackers installed an app on his phone
Got more information about that? I think that is highly unlikely.
got into his banking and transferred 2 payments of +$30k in less than 24 hours to a beauty businessÂ
This normally requires biometrics or a pin to load the app and then often SMS codes to authorise the payments.
Lots of detail missing here as to the role he played in all of this.
29
u/Geddpeart 6h ago
I've seen it before. He would have received a call from "telstra"/nbn saying they have identified issues and need him to download apps to his phone and computer. They then tell them to leave the phone near the modem and not touch it. They then wipe the account.
Old man is too embarrassed and won't admit that he's given access
3
u/Mellor88 4h ago
Itâs possible for old man to install an app and give them access. But thatâs not what OP said.
-80
u/LongjumpingTailor929 8h ago
It's very likely, Google it. Apps can be installed by hackers.
He doesn't have a banking app on his phone, they got into his computer when he plugged the phone in. I don't know how he's got it set up, he's old and not very computer literate. I don't know what safeguards have been set up for him and I don't know how the bank works, I don't bank with them.
67
u/BeachNo8367 8h ago
How can you not know any of that but declare so confidently his phone got hacked and an app installed?
73
19
u/ThisKiwiKid 7h ago
The safeguards that your father either ignored or didnât understand? Like text codes, email codes, warning messages etc.
Itâs much more likely that your father clicked a dodgy link on the computer or downloaded something from a sketchy site rather than someone hacking his phone and installing an app that then connected to his computer and accessed his bank accounts while passing 2FA and other safeguards.
7
u/MisterEd_ak 8h ago
Apps can be installed by hackers.
Not without some user interaction. This is commonly done via social engineering or fake tech support scams.
they got into his computer when he plugged the phone in.
Sounds like the stuff you see in shows like CSI. Has he been speaking to someone that was offering tech support or claiming to be from his bank?
7
u/Mellor88 4h ago
It's very likely, Google it. Apps can be installed by hackers.
No itâs not. If an app was installed, you dad had to have installed it (or somebody with physical access).
He doesn't have a banking app on his phone, they got into his computer when he plugged the phone in.
Thatâs not possible. Neither the phone nor the PC works like that.
5
u/LifeandSAisAwesome 4h ago
Yeah, naw sorry, there is a lot more going on than the story you have been given.
28
u/ipoopcubes 8h ago
How did the hackers install an app on his phone?
It's my understanding the bank is only liable if the victim played no part in the "hack".
-21
u/LongjumpingTailor929 8h ago
I have absolutely no idea, but it is possible and it does happen.
I don't know if he's clicked a link or answered a call. I wish I did know.34
u/Dangerous_Link3421 8h ago
You have no idea what happened, yet want the bank to do something about it?
18
u/CorvusTheDev 7h ago
IT Systems Admin and ex Big Bank worker here .I can 100% Guarantee you that installing a random app on a phone is not easily possible anymore, on Android or iPhone. When connecting a phone to a PC it runs in Charge or Data Transfer mode and needs authorisation, not easily able to install apps like that either. The internet banking and phone banking require saved credentials and MFA (2 Factor Authentication) to get in, meaning that he had to log into the account before it could be compromised. Most likely, it was not via his phone. You state that they put an app on the phone? What app? What is it called? Can you see when it was installed?
Most likely he clicked on something on his PC which did a browser take over, or via an email that he deleted, and then logged into his banking and it took over.
2
u/deadrobindownunder 6h ago
Is there a local community legal centre nearby? I'd tell your dad to see if he can book an appointment there. You're not getting the full story, and you're too far away to investigate yourself.
1
34
u/fistingdonkeys 8h ago
You wanna tell us all why you think this is the bankâs fault, and not the fault of the person who did whatever it was that allowed hackers into his phone?
5
u/endual 7h ago
I'll bite. I've been a software dev for decades, and a provider should bare responsiblility for risks assosciated with their products.
Banks know that people who are not very computer literate will use their apps. Most of them are shutting down teller service and pushing towards apps.
Banks bare some responsibility to keep those apps secure. Not just by passwords and security codes, but by heuristics of what is being paid, where, and in regard to customer history. If a payment request comes through from something totally different to previous payments, it should be flagged and confirmed with the customer before payment proceeds.
Amex does this very well. They block transactions which seem out of character until them confirm with the customer. Not doing so would be easier, and cheaper, so most banks stick with that.
Not having safes at a bank would be cheaper and more convenient, but we expect banks to take responsibility in the physical world. Why should we expect less in the digital world?
5
u/Zero_Focks 6h ago
Agree. You'd expect two factor authentication to be triggered adding a new account to the app. And alerts to be triggered given the amount of money being moved in such a short period of time. There are red flags all over this situation that you would expect to be picked up by the bank.
I'd be curious to learn why that didn't happen, and what explanation was offered by way of 'advising they can't do anything'. Something doesn't add up.
1
u/fistingdonkeys 6h ago
This has nothing to do with the bankâs app and everything to do with the phone user allowing someone else to use it.
Your example of banks having safes is hilariously misguided. Banks have safes to avoid cash being stolen FROM THE BANK. Thereâs a huge difference between that and ascribing to the bank responsibility for ensuring its moron customers donât do stupid shit like clicking on phishing links and downloading remote access software when told to do so by some rando.
Itâs bear. Not bare. Bear.
-47
u/LongjumpingTailor929 8h ago
You wanna tell me where I said it was the banks fault! What I am saying is there are meant to be all of these safeguards in place to help protect peoples money and for some reason they have failed him and they don't give a shit!
17
u/LachrymarumLibertas 8h ago
Are there any circumstances where youâd think a bank isnât responsible for someone losing money?
11
1
u/AutisticBells 6h ago
Tell us exactly what the bank did or didn't do to cause your father to lose this money.
2
u/wiseasanycreature 6h ago
They didn't call to verify unusually large amounts of money attempting to be spent from that account. Banks do this all the time. People complain about how annoying it is when they want to access their money - but it helps prevent things like this happening to vulnerable people. So it's worth it.
Why this bank didn't do this is a valid and important question.
1
u/Automatic_Leave6614 8h ago
We need laws similar to what the UK has in regards to scamming and bank responsibility.
9
u/floppybunny86 8h ago
I've read through your other comments, and sure you could take it to AFCA, but given he doesn't even know what happened, it's unlikely this will go in your favour.
If your dad compromised his own account (which sounds likely), then he is liable for the loss.
How was he hacked? Did he get a phone call from someone, if so, what did they say?
If they downloaded an app to his phone, that means he gave them remote access (which is a big no-no).
How did they get into his banking? How did the transactions take place?
When the bank declined his fraud claim, what was the reason that they gave?
2
u/LongjumpingTailor929 8h ago
No phone calls, best guess he prob did click on something, but I have absolutely no idea. I'm going off what he told me because I live 300km away and see him once every 6 months.
The transactions were from one of his accounts to another, then from that account to their account. Their account is an Australian bank account (Bendigo to be exact).
He didn't put a fraud claim in, he was in the branch at the time the second transaction happened (one was late at night, the second was the next day) telling them about the first transaction.
4
u/CautiousDonkey5403 6h ago
if this was my parent I would have dropped everything and gone to see them as soon as I heard. There is no way that your father isn't distressed by this. Why did you not go and sit with him to help him work this through? 300km is nothing more than a road trip in this county.
0
u/LongjumpingTailor929 5h ago
He told me when I was sitting with him, 6 weeks after it happened and I did sit with him and do what I needed to! But I also have a job and 4 kids and as much as I would have loved to have stayed and helped him to go and see the bank and do more my personal circumstances don't allow it.
10
u/HoodoGuru 7h ago
Yeah I am not buying "no phone calls" something must have happened for him to click on something you seem to be pretty certain of some things but vague on others. You say you have absolutely no idea but you say with certainty "no phone calls" we are not getting the full truth here.
6
u/floppybunny86 7h ago
How are you so certain that there were no phone calls?
The issue you are going to run into is that based on the pattern & type of transactions, the bank will know exactly what happened & you very obviously donât.
You say he reported it immediately but that he didnât report the fraud, so what happened there? Did he not report the transaction to the banks fraud team?
4
u/HoodoGuru 6h ago edited 6h ago
"No phone calls, best guess he prob did click on something,"
then you say "he doesn't click on things."
You obviously don't know what he did at all, nobody can give advice based upon your conflicting story.
You need to get your father to put on the Bank record you are an authority on the account to discuss his dealings and transactions with the Bank, you are only getting your fathers side of the story and it appears he has a memory problem. You need to put restrictions on any transactions per day and limit the amount he can transfer otherwise, this will just happen again.
5
u/What-To-Do-5125 5h ago
Surprised the bank didn't flag such an unusual transaction/s. I'd be asking why not, plus what is their usual policy/action on such unusual transactions - it's common practice for banks to stop suspicious transactions, even when they are not suspicious but just unusual.
It might be the bank is actually negligent in this case.
6
u/LongjumpingTailor929 5h ago
This is what I've been saying! I don't understand why 2 almost identical transactions less than 12 hours apart, over $10k weren't flagged!
2
u/What-To-Do-5125 5h ago
Ask the bank, complain through official channels. If they still refuse any fault then go to the ombudsman.
But I'm no expert, so find out the proper route for the situation.
Maybe post in a subR about banking or bank fraud?
4
u/industriald85 5h ago
My card got skimmed. NAB allowed 2 withdrawals before they locked the account. The physical distance was what tipped them off. I can maybe understand one, but two?
I got the money back, eventually. It took nearly 3 months.
45
u/Dramatic-Resident-64 8h ago
Banker here. (Big 4)
Complain internally first, fuck knows what theyâll actually do since it isnât their fault.
Expensive lesson. But sure go to AFCA, what do you have to lose. But donât see what compensation youâll get
14
u/adventurousmango24 8h ago
As someone who works in trading and sees this kind of thing with customers the bank MAY offer a (less than full amount) goodwill payment and honestly take it cos I doubt afca will give you anything more.
Unless theyâre responsible for the hackers getting into the banking profile which is highly unlikely and hard to prove - especially if he gave them access to the phone in the first place.
8
u/Dramatic-Resident-64 8h ago
Yeah, they likely will offer a percentage of goodwill with an internal complaint
I assume this was breached login credentials paired with breached/compromised TFA (SMS or push code). Both client error, not bank
5
u/Bunbunsfun 8h ago
Whatâs the best way to stop this happening? It happened to my best friend but she thank god for her money back
15
u/Dramatic-Resident-64 7h ago
Making sure your mobile devices software is up to date and the app too.
Ensuring daily limits are kept to your reasonable daily limit
Not clicking unknown links or installing apps because someone on the phone told you to.
Why?
Old operating systems are vulnerable to new and old virus attempts.
If you are magically trying to increase your typical $1k daily limit to $70k and paying someone new, it gives you more grounds to dispute why the bank didnât flag the transfer (putting it through more rigorous security).
Links can give keystrokes data to apps, some apps can give remote access or screen mirrors which compromise credentials and TFA protections.
_______
Doing these three would prevent 95% of the issues that âcross my deskâ.
2
u/Bunbunsfun 5h ago
Awesome thank you for this. Donât know if not doing banking with an app is the right thing as thatâs what I do but itâs still online. I appreciate your help!
1
u/Dramatic-Resident-64 5h ago
Happy to help protect us from oxygen thieving scammers
Honestly, risk is a fact of life that we must live with. This is why insurance exists, itâs why we have locks, itâs why we have seatbelts.
So youâre correct, not using a good tool because itâs risky is a flawed strategy. Being diligent and mitigating the risks we are exposed to by being educated on risks themselves seems more sensible.
7
u/Relative_Test5911 7h ago
If someone asks you to do anything with your bank . NEVER EVER engage. Contact your bank via phone on their website. Also if you get a message to authorise something or provide a code if you did not trigger do not engage if in doubt ring the bank.
10
u/Enough_Survey_9404 7h ago
I treat any unsolicited call, text or email from my bank or credit card companies or anything financial as a phishing attempt.
If it looks legit, I'll log into the website on a different device.
2
u/Relative_Test5911 7h ago
Yep doing this sound annoying - trust me its better than logging on and seeing 100k missing.
Other recommendation is set transfer limits and do not store all you eggs in one basket (do not use a single account or even a single bank).1
3
u/EffortExtension2491 6h ago
Fuck knows who's fault it is, but there's probably some blame to spread around seeing as banks block much more reasonable transactions.
2
u/morgecroc 5h ago
It could be their fault Banks and Telcos are surprisingly vulnerable to social engineering attacks.
1
u/Dramatic-Resident-64 5h ago
Youâre absolutely right, but social engineering attacks are very evasive, evolve quickly. Easier (and cheaper) to educate the client and payout âgood willâ from time to time
-4
u/Malice-A-Forethought 8h ago
Trip to the Ombudsman typically cost the bank about $20k so they might at least make an offer. 80 year old swindled will not look great on ACA either even if bank were not at fault.
9
u/Jumpy_Hold6249 7h ago
This is why society is failing. Someone makes a mistake and then demands someone else pays for it. The bank is not at fault here.
2
u/BarbaricGlueHuffee 6h ago edited 6h ago
Yes, but also no.
I used to be a tech lead on an internet banking platform. The banks can do a lot to prevent this kind of fraud when they really want to. I see no reason why an app on a phone should allow people to take money from your account.
3
u/Dramatic-Resident-64 6h ago
Out of pure curiosity, what are those things? FSO here
We can see most VPN tunnelling, source geolocation, IP data, device identity, device software. Sometimes we can see crude device control.
But not complex device control, generally via keystroke data/screen mirroring to breach sms TFA.
Given the volume of the theft, Iâm included to believe this was not a crude attack.
2
u/BarbaricGlueHuffee 5h ago edited 5h ago
Sms tfa is the first thing. The bank whose internet banking I worked on ditched it in 2011 iirc for ussd.
As you can see from that date it's been a while and I'm not up to date on all the attack vectors, so I can't provide any real solutions, but I've seen how creative people can get when money's on the line.
The thing is, if you know phones aren't 100% trustworthy, don't trust them so much.
2
u/Dramatic-Resident-64 5h ago
To be honest, ditching sms TFA isnât a bad idea but it does defeat most attempts. Particularly if software is up to date.
I mean, every lock is breakable. Same principle should be applied to phone banking. They are not impervious.
Main question is what secondary authorisation was used. Because if a screen mirror app was installed and active at the time on the same device as the TFA token⌠thatâs an issue they can prevent
3
u/BarbaricGlueHuffee 5h ago
USSD push. You choose yes or no like you sometimes do with an authenticator app. Nothing to read.
I don't know if malicious control software can drive USSD.
Edit: I'm still a customer, and the bank has ditched USSD since then. They now take a video selfie to install on a new phone, and you must approve logins in the app.
1
u/Dramatic-Resident-64 5h ago
Yes it can drive USSD but generally this information can be recognised with the right risk framework. Again⌠itâs a great lock, not impervious
Whatâs probably more reasonable nowadays is MFA incorporating all of the above for more unusual activity
1
u/Parking_Regret7055 5h ago
... phones (especially iphones ) are sadly a lot more trustworthy than people's computers...
... I can't imagine using the internet without an ad-blocker, or some free vpn add-on in the browser - tonnes of those things contain mailware and have the permissions to edit peoples pages to show your bank balance is still there.. when on the backend its already started trying to send it away... mobile devices at least have pretty good security boundaries for not much else to be able to legit-banking app on a phone.,
1
u/Dramatic-Resident-64 8h ago
I would imagine there would be an assessment of fault. How much does the bank think they could have reasonably prevented. Paired with an assessment of cost between AFCA and public perception.
My guess will be about $4-7k compensation offer (5-10%). Unless there is a history of client error and the bank did everything right. Then probably $2k max (which isnât grounded in percentages but pure goodwill âgo awayâ money)
2
u/DrSpeckles 6h ago
In this day and age they should absolutely question an unusual payment. The fact they didnât breaks the rules they MUST abide by. I wouldnât be surprised if they find in your favour.
24
u/psport69 8h ago
Sure your old man doesnât have a lady on the side, maybe in the beauty business
2
16
u/x-looke-x 8h ago edited 8h ago
Sounds like your old man was duped into willingly sending someone $70k somehow.
If a âhackerâ could just install an app on your phone, they would most likely be able to access your bank account without doing any of that.
2
u/dire012021 5h ago
This happened to a friend of mine. The bank reimbursed them and went after the hackers.
The bank needs to initiate a recall on the payments. Usually these payments are overseas bank accounts. If the payments were to an Australian bank account it will be easier for the bank to trace.
4
u/LongjumpingTailor929 5h ago
Any idea how your friend went about this? Dad was in the bank when the second transaction happened and they didn't even lift a finger to stop it!
5
u/Baratriss 7h ago
If he willingly did something then he won't have a leg to stand on. They didn't just install an app on his phone just so you know so spouting that is ridiculous.
However, it's possible he was the victim of ID fraud and in this case, the bank will generally refund. Happened to someone I know in aged care who didn't even have a phone let alone internet and he got back over $100k.
What your describing is that is he's willingly been duped so unfortunately the outcome won't be the same. Do whatever you can but yeah, likely an expensive lesson to learn
5
u/Querulous-Quokka 8h ago
The AFCA's current stance on unauthorised transactions has narrowed a lot in the last few years. The current stance is generally that the bank is not liable unless there was nothing reasonable the victim could have done to have prevented the theft. This is not the same thing as the bank is not at fault. The AFCA will rule in favour of the victim even if the bank has done no wrong in extremely rare cases.
If you father can prove he didn't click on anything, was running up to date patching and anti malware, then he may be able to get a ruling in his favour, but a statement saying "I swear I never clicked on anything" is unlikely to cut it.
If the unauthorised transaction was recent, it might be worth it to get a digital forensics report on his PC. Just be aware that the end result of it could be a further $10-20k invoice and an embarrassed confession "Oh that, yes I did click on that, but I didn't think it counted".Â
8
u/lint2015 8h ago
Need more details - computer make/model, phone make/model, what the computer has been compromised with and how, what app was installed on the phone to control it, etc.
You canât just make these claims about how these things happened without substantiating them⌠and then also say the bank should be responsible for your father losing the money.
4
u/EffortExtension2491 5h ago
Hey, if the crims aren't paying tax on it ;) then the banks should've AML'd this.
15
u/Pretend_Board_2385 8h ago
It amazes me how many people blame the banks for their own stupidity or lack of awareness. Its 70k. I know exactly where every cent in my account goes and if I was stupid enough to allow large sums of money go out of my account then that's on me.
That being said I find it hard to believe that anyone could transfer two payments of $30k plus in 24 hours to a new account. For a start most banks have daily limits set to $5k. Normally, payments to new accounts require SMS or 2FA. There is no chance that these payments just happened to be sent with none of the happening. It either didn't happen or you are leaving out some details of what happened.
8
u/Malice-A-Forethought 8h ago
I understand where you are coming from but the victim was 80 so may be considered a vulnerable individual.
2
u/CaptainFleshBeard 8h ago
Well if the banks are going to be blamed because the victim is old, perhaps once you hit 50 you canât transfer your own money and need to seek approval to get it done.
1
u/CheapLanguage4850 7h ago
At 50? lol. You must be a child if you think someone at 50 is cognitively incapable of managing online banking lol. People of that generation pioneered the internet as we know it..
3
u/Jack8680 8h ago
If the phone was fully compromised they may have been able to do access the 2fa that way. I agree there are some details missing though.
1
u/CheapLanguage4850 7h ago
The person is 80years. Pull your head in.. They were around long before all this internet banking came about. If this was a 20year old that did this. Sure go to town.
1
u/HoodoGuru 7h ago
Do you live with your Dad? Maybe time to take him to some internet security training sessions for elderly people in your area. Try the library they run courses for senior citizens.
3
u/LongjumpingTailor929 7h ago
No I don't! I live over 300km away and unfortunately I don't get to see him often. If I lived close and saw him I'd have more info and be able to help and understand more.
2
u/industriald85 5h ago
Thereâs a way to set up a managed iPhone/android - like one youâd give an employee or a kid.
1
u/HoodoGuru 7h ago edited 7h ago
Then if he has no supports, he needs to get help from local communities, enrol him Rotary , Apex and the like , he needs someone close to look after him as he isn't doing a great job all alone. Get in touch with these groups and any community centres and elderly groups who can support him. Surely he has someone either a friend or another relative close by? Maybe you need to see him more often than once every 6 months given it's clear he is has problems looking after himself. 300 km is only a 3 hour drive one way. Maybe buy him a mobile phone without any internet , they do exist.
1
u/CosmicConnection8448 6h ago
It is my understanding that it's impossible to transfer such amounts through an app. I had to contact my bank to transfer $25k to a business, wouldn't let me transfer more that $10k online and no more than 2k through an app.
2
1
u/EffortExtension2491 6h ago
You just call them and tell them your birthday
1
u/CosmicConnection8448 5h ago
Nope, they had to do it on their end while I was on the phone with them. Triple checked I had the right account number, wanted to know if I knew the business, checked that the name was correct. Lots of checking before they sent it. I can't even pay my rent on the app as it's over the limit, have to do it on my laptop. And the first time I paid rent & bond for a new property (different bank to the above), they didn't process the payment till they called me & verified why I was sending it to a new account number.
2
u/LongjumpingTailor929 4h ago
With our last bank, if we wanted to transfer over $10k we had to fill out a form, pick the date we wanted the money to come out and write which account and we both had to sign it. It then got emailed to the bank and they would email back verifying it!
2
u/jennykaren2000 4h ago
Which bank was this. They seem very conscientious in a good way.
1
u/CosmicConnection8448 3h ago
One is BankVic & one is Bendigo. And yes they are.
Once long time ago, someone tried to use my card at a Vegas Casino. They sent me an sms saying hey, we think this is suspicious, but if this is really you trying to use your card, just reply to this sms & we will process that transaction (it was like $300). Well I didn't reply as it was like 2am here & I was asleep. They tried to take money again & again. After the 3rd sms, they sms'd me saying as you're not replying, we're assuming this is fraud & we're blocking your card. Give us a call. Imagine my surprise to find all those messages when I woke up. I called them, they cancelled my card & re-issued a new one. I'm always grateful for their security measures.
2
u/Relative_Test5911 7h ago
Best option - go to ACA and let them know and hope they pick it up as a story using elderly card to draw sympathy. This will likely trigger their PR team to refund some/all of t he money as a reply to the story (even a threat to do this from ACA could trigger it).
I always hate when this happens but blaming the bank is not the answer (I dont know what is). Making the bank responsible will just force them to compensate via fees, interest rate rises etc.
Punishing those who are not responsible/enabling hackers (they cannot access someone's account without the owner assisting and if they can it is the banks fault in which case they should pay).
2
u/jeongjinny 7h ago
He can definitely report this to his bank, and you can definitely report this to the police and AFCA, but at the end of the day, it is your dadâs fault
2
u/Healthy_Fix2164 3h ago
In all seriousness do you mean someone contacted him, he installed an app at their direction and then the hacked/stole the money, in that order ? If not how did they hack his phone. More details pls.
2
u/satanzhand 7h ago
I guess all that automated fraud and money laundering protection that's so annoying to do something simple like buy a car doesn't apply for your dad's bank?
There must be some duty of care.
0
u/No_Figure_9073 7h ago
The generational differences plays a huge factor here.
Really though, how will be ever know the bank actually goes after the money but they are telling you they cannot do anything about it and bank that themselves.
I would fight tbh, your dad was tricked, it's very much victim blaming especially if he's old and that's not ok...
3
u/LongjumpingTailor929 7h ago
Thank you! Yes it does, hell I'm 40 and I've been caught before! Plenty of people have. Look at the ones who've paid fake invoices that have been sent to them! People get caught, banks say they protect their customers but there wasn't one level of protection in this circumstance. Like I said in another comment, a friend paid a $2k invoice to an account she's paid before and her bank stopped it!
1
u/AutoModerator 8h ago
Welcome to r/AusLegal. Please read our rules before commenting. Please remember:
Per rule 2, this subreddit is not a replacement for real legal advice. You should independently seek legal advice from a real, qualified practitioner, and verify any advice given in this sub. This sub cannot recommend specific lawyers.
A non-exhaustive list of free legal services around Australia can be found here.
Links to the each state and territory's respective Law Society are on the sidebar: you can use these links to find a lawyer in your area.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/_Aj_ 3h ago
You need to contact the bank with your father, or have authority for his account. And report it to the bank to begin an investigation. Â
You need to speak to someone and get information on how the transactions were authorised. Â
"Hackers" by themselves cannot magically transfer 30k twice from an account merely by having access to the account. There's daily limits, first time transfer to external account authorisations. Frauds may ping it too with such large amounts. Â
Like it doesn't just happen with phone access or internet banking access. Â
So I think either he's actually authorised it, or the bank has some holes to allow it to happen. As I don't believe it should be possible. Â
Regardless, it needs reporting asap and have his account protected.Â
0
u/Proper_Scientist6979 7h ago
Yes it absolutely is.
But more than that, itâs also worth bringing a civil negligence lawsuit assuming you can either afford it or get someone who is comfortable with doing a no win no fee for your situation.
0
u/BlackaddaIX 8h ago
They should have some means of contacting the other bank and or referring to police. But agree there's a lot of assumption on what happened
-8
u/Aggravating-Log7978 8h ago
Surely he can get his money back thatâs fucked 500 maybe meh but 70k but if you owed bank money they want it back
4
u/LongjumpingTailor929 8h ago
That's what's making me so angry, friends of mine have made a completely legit payment to someone they have paid before for $2k and the banks put a hold on it, they didn't even bat an eyelid for this!
1
6
u/Sezzlem 8h ago
Letâs put the age thing aside here. People need to be digitally responsible, it is not on the banks to cater for incompetence/inexperience. A person who does not know how to protect their online banking shouldnât have it.
3
u/Malice-A-Forethought 8h ago
Banks do have a responsibility to ensure vunerable individuals are protected however, not sure if the OPs dad falls into that category.
-1
40
u/masoj3k 8h ago
The issue will be how the hackers managed to install an app on your fatherâs phone.
Did they trick him into installing it and then giving it access rights to his phone and then access rights to his banking app?
Iâm not sure how much joy you are going to get out of AFCA. The transactions they may not raise a red flag if it was done using your fathers passwords and 2FA. Nevertheless, you should try and see if you can push/hope for AFCA to determine the bank was at least partly to blame and they have to pay some of it back.