Close
Close
Browser Compatibility Notification
It appears you are trying to access this site using an outdated browser. As a result, parts of the site may not function properly for you. We recommend updating your browser to its most recent version at your earliest convenience.
Skip to Content Skip to Subnavigation

OBSI – Ombudsman for Banking Services and Investments

Consumer Portal LoginFirm Portal Login
Français
Increase Contrast
Fran�aisFR Main menu icon Open Menu
  • For Consumers
    • Can OBSI Help?
    • Consumer Bulletins
    • Consumer Portal
    • Consumer Resources
    • FAQs
    • Find Your Firm
    • How the Complaint Process Works
    • How We're Funded
    • Make a Complaint
    • Past Feedback and Input

    View our Make a Complaint page

    Make a Complaint

  • For Firms
    • Apply for Membership
    • Fee Payment Structure
    • Firm Bulletins
    • Firm Feedback and Input
    • Firm Helpdesk
    • Firm Portal
    • Firm Resources
    • Membership Resources
    • Participating Firms

    Log in to OBSI Firm Portal

    Firm Login

  • How We Work
    • FAQs
    • OBSI and the Legal System
    • Our Approaches
    • Our Process
    • Our Service Standards
    • Our Vision, Mission and Values
    • Principles and Practice
    • Reconsiderations and Complaints About OBSI
    • Responsibilities of Firms and Consumers

    View our FAQs page

    FAQs

  • Case Data and Insights
    • Case Data
    • Case Studies

    View our Case Studies page

    Case Studies

  • News and Publications
    • Annual Reports
    • Firm Refusals
    • Media Releases
    • OBSI News
    • Presentations, Reports and Submissions
    • Print Materials
    • Public Consultations

    View our OBSI News page

    OBSI News

  • About Us
    • About OBSI
    • Accessibility
    • Careers
    • Contact Us
    • COVID-19 Update
    • Governance
    • How We're Regulated
    • Our History
    • Privacy
    • Staff
    • Strategic Plan
    • Terms of Reference

    View our Contact Us page

    Contact Us

I'd Like To... Open icon Close Icon
  • Make a complaint
  • Contact OBSI
  • Find my firm
  • Apply for membership
  • Log in to the Consumer Portal
  • Log in to the Firm Portal
  • Know how the complaint process works
  • Subscribe
  • Follow OBSI on Twitter
  • Follow OBSI on LinkedIn

Case Studies

HomeHow We Work
Print Print link
Share Share icon
  • Open new window to share this page via Facebook Facebook
  • Open new window to share this page via LinkedIn LinkedIn
  • Open new window to share this page via Twitter Twitter
  • Email this page Email
Increase link Increase text size
Descrease link Decrease text size

Bank customer is a victim of multiple incidents of fraud

Posted Friday December 18, 2020

Category: Fraud

Key lessons:

  • Unfortunately, not all frauds are committed by strangers. “Familiar fraud” refers to situations where someone who has access to the personal information and financial documents of a family member or close friend assumes their identity to gain access to money in their accounts.
  • Although banks have security measures to reduce the risk of fraud, consumers must keep their personal information such as security questions and PINs (personal identity numbers) confidential – even from those they love and trust. Documents containing personal information, such as account statements, should either be shredded or kept in locked storage. Devices and accounts that can be used to authenticate identity through email or SMS should also be kept private and secure.
  • Consumers should always take precautions that can help identify fraud quickly, including reviewing their account transactions at least every month and maintaining low withdrawal limits on debit and credit cards. If available, e-alerts should be set up to notify account holders of every withdrawal. If a consumer discovers any discrepancies or unrecognized transactions, it is important that they inform their bank immediately.

Consumer discovers unauthorized transactions on different accounts

Mr. B held various financial products with his bank, including a personal chequing account with debit card access, investments, and a credit card. He worked outside the home and his adult children lived with him. Mr. B said that he kept his PIN confidential but did not keep his personal information in locked storage. His children had unrestricted access to his house.

Mr. B had been a victim of fraud in the past. To protect himself from future frauds, he disconnected online access to his accounts, limiting his account access to in-person visits at his bank branch. One day, about a month after discontinuing online access to his accounts, Mr. B went to the branch to do his regular banking and realized that he had forgotten his bank card at home. When he got home, he called telephone banking instead of returning to the branch.

During this phone call with his bank:

  • Mr. B was informed that online access to his accounts had been reconnected using his personal information and that several transactions had taken place.
  • The bank representative told Mr. B his account balances and Mr. B responded that they did not seem right.
  • The bank representative also told Mr. B it had recently taken two days to transfer funds from his investment account into his personal chequing account – longer than it would have if Mr. B had made the request in-person.
  • Mr. B had difficulty identifying which transactions had been made without his knowledge or consent and told the bank representative that all the transactions were unauthorized.

As soon as the bank was made aware that Mr. B may have been a victim of fraud again, it immediately cancelled his debit card and credit card and suspended his online account access.

Mr. B thought that by limiting his bank account access to in-branch only, he had taken extra precautions to protect himself from fraud. He asked his bank to reimburse him for the unauthorized transactions in his accounts which totaled $24,700.

Bank investigates and suspects familiar fraud

During its investigation, the bank noted that most of the transactions Mr. B had disputed were either:

  • purchases made while online or over the phone, suggesting that his actual credit card may not have been in the fraudster’s possession at the time of the transaction, or,
  • purchases made while inserting the actual debit card or credit card into a chip-reader machine and entering the PIN at the time of the transaction.

The bank confirmed it had followed its normal procedures to prevent fraud, such as:

  • resetting the passwords required for online access to Mr. B’s accounts when requested,
  • sending one-time verification codes to Mr. B’s phone or in the mail to activate his new cards after receiving requests to cancel the old ones, and
  • validating his personal information before releasing account details.

The bank confirmed that:

  • Mr. B’s passwords were changed after the bank had helped him reset them.
  • Mr. B’s new cards were activated with the one-time verification codes.
  • Mr. B’s personal information was validated by the bank over the phone as required.
  • If Mr. B had not taken these actions, they must have been done by someone close to him who had access to his personal information.

As a result, the bank suspected that “familiar fraud” had occurred.

The bank agreed to reimburse Mr. B $13,700 for the transactions that were made without using his physical credit card. However, the bank would not reimburse Mr. B for the transactions that were made using his debit and credit cards with his PIN. Because Mr. B refused to report these transactions to the police, the bank closed its investigation.

Mr. B felt that he was still owed $11,000 to make up for his loss due to fraud. Frustrated by his bank’s decision, Mr. B came to OBSI for help.

Our findings

During our investigation, we reviewed the details of the investigation that led to the bank’s decision not to reimburse Mr. B for the PIN transactions. Despite the extra precautions that he and his bank had taken, the evidence indicated that if these actions were not Mr. B’s, someone close to him had been able to access his personal information, reset his passwords, obtain his bank cards, withdraw funds using his PIN and return his cards to their normal place.

We concluded that the bank had no reason to suspect fraud or take further actions because it had verified Mr. B’s identity appropriately through its normal validation process on a number of occasions. We also found that the bank’s position to close its investigation, unless Mr. B was willing to file a police report, was reasonable in the circumstances.

The outcome

We had no basis to recommend that the bank offer any additional compensation to Mr. B.

Back to News
Subscribe




debit card fraud

Consumer responsible for unauthorized transactions after not taking enough care to protect his debit card and PIN

Posted Friday, February 26, 2021

fraud

Bank customer is a victim of multiple incidents of fraud

Posted Friday, December 18, 2020

investment suitability

Investors incur significant losses and seek compensation, believing themselves to be unsuitably invested in high-risk securities

Posted Tuesday, November 10, 2020

mortgage

Bank errors when arranging a mortgage transfer lead to costly penalties for borrower

Posted Monday, August 31, 2020

  • FAQs
  • OBSI and the Legal System
  • Our Approaches
  • Our Process
  • Our Service Standards
  • Our Vision, Mission and Values
  • Principles and Practice
  • Reconsiderations and Complaints About OBSI
  • Responsibilities of Firms and Consumers
  • For Consumers
  • For Firms
  • How We Work
  • Case Data and Insights
  • News and Publications
  • About Us
  • Other Links
  • Can OBSI Help?
  • Consumer Bulletins
  • Consumer Portal
  • Consumer Resources
  • FAQs
  • Find Your Firm
  • View All...
  • Apply for Membership
  • Fee Payment Structure
  • Firm Bulletins
  • Firm Feedback and Input
  • Firm Helpdesk
  • Firm Portal
  • View All...
  • FAQs
  • OBSI and the Legal System
  • Our Approaches
  • Our Process
  • Our Service Standards
  • Our Vision, Mission and Values
  • View All...
  • Case Data
  • Case Studies
  • Annual Reports
  • Firm Refusals
  • Media Releases
  • OBSI News
  • Presentations, Reports and Submissions
  • Print Materials
  • View All...
  • About OBSI
  • Accessibility
  • Careers
  • Contact Us
  • COVID-19 Update
  • Governance
  • View All...
  • Privacy
  • Sitemap
  • Accessibility
  • Subscribe to Our News
  • Contact Us
  • Website Feedback
  • View All...

Ombudsman for Banking Services and Investments logo

Toll-Free Telephone: 1 (888) 451-4519
Greater Toronto Area: (416) 287-2877
TTY Telephone: 1 (855) TTY-OBSI

Toll-Free Fax: 1 (888) 422-2865
Greater Toronto Area Fax: (416) 225-4722

Design by eSolutionsGroup

© 2017 Ombudsman for Banking Services and Investments (OBSI), 20 Queen Street West, Suite 2400, P.O. Box 8, Toronto ON M5H 3R3

High Contrast Mode is on