Dodged a bullet today. Bank account got hacked

[dave]

Savings accounts were consolidated into checking and a draft had been requested to clean out my account in a different bank to transfer it into the same checking. I can only assume from there the account would be cleaned out.

Fortunately the draft request generated emails and we shut it all down before any money was lost.

Moral of the story is.....read those annoying emails from your bank.

 

[Boomboom521]

Glad you caught it Dave!

 

[WVU82]

mind telling us which bank ?

 

[dave]

mind telling us which bank ?

They hit it from BB&T mobile banking and it was their email that tipped the wife off. To their credit they were all over it and shut down all our accounts there and blocked the transfer from my bank accounts before the even went through my bank.

 

[WVU82]

Thanks !

I had a similar occurrence happen last week...

also BB&T...

 

[JLW71073]

It's a continual battle for banks. Bad actors can buy your personal information off the dark web, things like log in credentials and then execute fraud. Always be vigilant.

 

[rog1187]

Another lesson - stay off the midget porn sites.

 

[Popeer]

Thanks !

I had a similar occurrence happen last week...

also BB&T...

Only on mobile? Our account is with BB&T, and I'm doubly paranoid about that stuff since wife and I were both swept up in the giant hack that hit government workers' info a few years ago. So far, fingers crossed, if anyone has our info they haven't used it. But I log in (not via mobile, as if that matters these days) every morning to check it just to be sure, and I do read those email alerts. I learned that BB&T only processes transactions Monday-Thursday at something like 3 a.m.

 

[WVUCOOPER]

Only on mobile? Our account is with BB&T, and I'm doubly paranoid about that stuff since wife and I were both swept up in the giant hack that hit government workers' info a few years ago. So far, fingers crossed, if anyone has our info they haven't used it. But I log in (not via mobile, as if that matters these days) every morning to check it just to be sure, and I do read those email alerts. I learned that BB&T only processes transactions Monday-Thursday at something like 3 a.m.

It's so easy to check your accounts these days, I have little sympathy for anyone that doesn't.

 

[Keyser76]

Another lesson - stay off the midget porn sites.

lol

 

[dave]

Another lesson - stay off the midget porn sites.

Nah. No bbt mobile account on my phone.

 

[WVUCOOPER]

Nah. No bbt mobile account on my phone.

Maybe I'm dense here, but how or why would the mobile app on your phone be less secure?

 

[WVUBRU]

Glad you caught it. I've been dealing with similar issues over the past 3 years. It is a real pain and lesson everyone needs to learn is as others have said and keep track and watch your financial accounts and don't ever assume nothing will happen to you. Chances are you will eventually get affected.

 

[WVUBRU]

Maybe I'm dense here, but how or why would the mobile app on your phone be less secure?

Signing in on an unsecured connection. They can get your credentials and the real sophisticated scum can mirror your login to another device.

 

[WVUCOOPER]

Signing in on an unsecured connection. They can get your credentials and the real sophisticated scum can mirror your login to another device.

But I use a thumb print! Makes sense. I'm going to continue to use my mobile app tho, and just keep track of my accounts.

 

[WVUBRU]

But I use a thumb print!

That is good. I don't know if they can mirror the thumbprint login. I will ask as that technology is right down the hall from me at work.

 

[Mntneer]

Signing in on an unsecured connection. They can get your credentials and the real sophisticated scum can mirror your login to another device.

Yep. Airports... free WiFi... coffee shops... etc. Stay off of unsecured WiFi on all mobile devices.

Myself, I'm leary to use a mobile banking app right now, but if a finger print ID on the iPhone keeps it "secure" then I might be willing to try it.

 

[WVUCOOPER]

That is good. I don't know if they can mirror the thumbprint login. I will ask as that technology is right down the hall from me at work.

I think the thumbprint only helps on the device I am using. I do still have to login with my user and password, so I'm guessing it's not all that much of a help.

 

[Mntneer]

I think the thumbprint only helps on the device I am using. I do still have to login with my user and password, so I'm guessing it's not all that much of a help.

So the thumbprint unlocks your phone, but your username and password still have to be entered?

 

[WVUCOOPER]

So the thumbprint unlocks your phone, but your username and password still have to be entered?

Thumbprint is also needed to complete any transaction on the app, but I still need the login credentials to open the app. lol. Worthless.

 

[WVUBRU]

So the thumbprint unlocks your phone, but your username and password still have to be entered?

The technology my company will sell is thumbprint identification at a financial institution, not a cell phone identifier. So, my previous comment is a little off.

 

[Boomboom521]

Lots of good info here....good community thread!

 

[Mntneer]

The technology my company will sell is thumbprint identification at a financial institution, not a cell phone identifier. So, my previous comment is a little off.

If they could incorporate that into the phone apps, where the apps don't use regular username and passwords, and instead use the print, then I would think that's pretty secure.

It's amazing how more common that technology is becoming. I remember 20 years ago how it was expected to be used for everything. Goes to show how much better the engineering has gotten with it.

Was at Disney the first week in July, and they use it now when you go into the parks. An RFID wrist band and finger print on entry, no need to carry around a ticket.

 

[dave]

Maybe I'm dense here, but how or why would the mobile app on your phone be less secure?

I am assuming that they hacked my wifes phone but I guess they could have just hacked in through the mobile account. I dont have a BBT mobile account. So I dont think they hacked us through the midget porn.