# Someone drained our bank account...

**URL:** <https://boards.straightdope.com/t/someone-drained-our-bank-account/216147>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [December 1, 2003, 1:28am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147 "2003-12-01T01:28:52Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anonymous\_Coward](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anonymous\_Coward](https://boards.straightdope.com/u/Anonymous_Coward)\
**Post date:** [December 1, 2003, 1:28am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/1 "2003-12-01T01:28:52Z")

</div>

I tried to use my debit card tonight to pay for some groceries, and I got a generic service error from the ATM. Thinking it was a a little odd I got my wife to check the account status online, and our chequing account was in the overdraft.

We always keep around around $2000 in there, with the rest of our savings in a higher interest account. My wife noticed that there were 4 ATM withdraws in the last 2 days, each day someone withdrawing $800 and $180. Apparently yesterday the bank flagged our account as suspicious and deactivated my debit card, but neglected to tell us about that little detail until we called. It was too late anyways as the crook sucked that account dry.

I just got off the phone with the bank emergency line, and all accounts and credit cards are frozen on my request until we figure out what the hell is going on (a little late…). Obviously someone duplicated my debit card and has my PIN, but my card has never been out of my sight. I know there are portable scanners out there and all it takes is one bad clerk.

Tomorrow I’ll talk to a fraud specialist and we can see what the odds are that we’ll get our money back. I’ll also get the process started of getting all of our funds moved to new accounts, as well as new cards. I only hope that the withdraws took place somewhere outside of town so it will be easier for the bank to determine that we couldn’t have withdrew the money ourselves.

$2000 is not going to bankrupt us, but it will make things lean for the next while. I only hope that this was random and that it wasn’t a targeted attack.

Things to be thankful for:

- It wasn’t our savings
- My wife’s last paycheque wasn’t deposited yet
- A large payment just came out a few days ago.
- We have a credit card from another bank we can use until things get sorted out.

I decided not to put this in the pit because I’m more upset than angry. Depending on how the bank treats us tomorrow I may change my mind.

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [December 1, 2003, 2:19am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/2 "2003-12-01T02:19:49Z")

</div>

Most banks have a policy similar to credit cards concerning fraudulent ATM withdrawals. That is, you’re only responsible for the first $50, provided you report the suspicious activity to the bank with a stated time period, usually 30 days. You should be Ok, I think. Good luck tomorrow,

---

<div class="post-metadata">

**Author:** ![Archergal](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@Archergal](https://boards.straightdope.com/u/Archergal)\
**Post date:** [December 1, 2003, 2:36am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/3 "2003-12-01T02:36:18Z")

</div>

Jeezopete, **AC** , if you find out what happened, let us know! I tend to think I’m “safe” because I keep my debit card in my hot little hands, but it sounds like that’s not enough!

Good luck, and best wishes! The only thing remotely like that I’ve ever had happened was when my credit card company mistakenly cashed a $200 check as a $2000 check. The credit union handled everything and apologized to me.

---

<div class="post-metadata">

**Author:** ![misstee](https://avatars.discourse-cdn.com/v4/letter/m/958977/32.png) [@misstee](https://boards.straightdope.com/u/misstee)\
**Post date:** [December 1, 2003, 3:05am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/4 "2003-12-01T03:05:03Z")

</div>

I am so sorry **Anonymous Coward**. Some people are just bastards. It makes me angry to hear about this kind of thing. How hard is it to get off ones ass and get a job to make money instead of stealing it from those who earned it.

---

<div class="post-metadata">

**Author:** ![hardygrrl](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@hardygrrl](https://boards.straightdope.com/u/hardygrrl)\
**Post date:** [December 1, 2003, 4:44am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/5 "2003-12-01T04:44:42Z")

</div>

> [@](#):
>
> \*Originally posted by Anonymous Coward \*  
> \*\*Obviously someone duplicated my debit card and has my PIN, but my card has never been out of my sight. I know there are portable scanners out there and all it takes is one bad clerk.
> 
> \*\*

Just one bad clerk can be responsible for thousands of counterfeit cards - just takes one swipe. As for the pin, anything from a person watching you enter it to a keystroke logger could have been used.

So far, you’ve done everything to take care of this account - but check your other accounts to be on the safe side.

When you get the new card, change the pin to something new - as we say in the business, your pin should not be information found in your wallet - date of birth, last four digits of social, address #, etc. Also, do not use the same pin for all accounts - makes it easier to use the wrong card accidently and gives a thief free use of all accounts versus just one.

Based on the amounts, they may have used an ATM at/near a casino - most ATMS are calibrated to give $500 maximum. File a police report and they can _hopefully_ get security camera footage.

---

<div class="post-metadata">

**Author:** ![Daftbugger](https://avatars.discourse-cdn.com/v4/letter/d/9fc29f/32.png) [@Daftbugger](https://boards.straightdope.com/u/Daftbugger)\
**Post date:** [December 1, 2003, 11:50am UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/6 "2003-12-01T11:50:56Z")

</div>

Security camera footage is useless. My boyfriend and his mates got mugged, forced thier pin numbers from them, and the muggers were caught on camera at the cash point. It couldn’t be used as evidence! Apperently there was a long queue at the the cash point and the timings of the camera/withdrawl weren’t good enough. What’s the point in having cameras?!  
Yes, I’m still bitter about. The guys who did it were eventually caught when they beat up a girl in the street (which wouldn’t have happened if they could have used the camera evidence)

---

<div class="post-metadata">

**Author:** ![Anonymous\_Coward](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anonymous\_Coward](https://boards.straightdope.com/u/Anonymous_Coward)\
**Post date:** [December 1, 2003, 12:07pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/7 "2003-12-01T12:07:15Z")

</div>

Thanks to everyone for your kind thoughts and suggestions…

I’m not counting on camera footage to save us. In Ontario we have privately owned and operated ATMs in small corner stores, bars, etc and I’m betting that the crooks used one of these as there are usually no cameras.

**hardygrrl** , should we file our own police report or will our bank take care of that for us? Are two reports better than one?

---

<div class="post-metadata">

**Author:** ![SkyBum](https://avatars.discourse-cdn.com/v4/letter/s/a88e57/32.png) [@SkyBum](https://boards.straightdope.com/u/SkyBum)\
**Post date:** [December 1, 2003, 12:16pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/8 "2003-12-01T12:16:48Z")

</div>

> [@](#):
>
> \*Originally posted by hardygrrl \*  
> **your pin should not be information found in your wallet - date of birth, last four digits of social, address #, etc.**

Just an anecdote here but something I’ve done in the past when presented with a new PIN that I was likely to forget before I had it committed to memory…

I’d take a random business card (My wallet seems to be a catch-all for them), scratch out the original telephone number and add a new number using the same prefixes with my PIN added in a certain re-arranged order as the last four digits. Certainly not foolproof but it saved my bacon a couple of times when I’d forgoten a new PIN. After the pin had been committed to memory I’d toss the card.

Good luck **A.C.**!

---

<div class="post-metadata">

**Author:** ![hardygrrl](https://avatars.discourse-cdn.com/v4/letter/h/a3d4f5/32.png) [@hardygrrl](https://boards.straightdope.com/u/hardygrrl)\
**Post date:** [December 1, 2003, 12:58pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/9 "2003-12-01T12:58:20Z")

</div>

> [@](#):
>
> \*Originally posted by Anonymous Coward \*  
> \*\*  
> **hardygrrl** , should we file our own police report or will our bank take care of that for us? Are two reports better than one? \*\*

File your own - the bank may just recover the funds and not actively look for a suspect.\* Being proactive is always a good idea. Honestly, it is rare that a suspect can be a) substaniated and b) successfully prosecuted - fraud ranks low on the law’s priority list unless the dollar amounts are high/it is tied to other crimes.

- I do not speak for all banks or all possible situations. Every bank is different.

---

<div class="post-metadata">

**Author:** ![Caricci](https://avatars.discourse-cdn.com/v4/letter/c/85f322/32.png) [@Caricci](https://boards.straightdope.com/u/Caricci)\
**Post date:** [December 1, 2003, 2:08pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/10 "2003-12-01T14:08:38Z")

</div>

It happened to us just a few weeks ago and it wasn’t the pin and it wasn’t online and nobody actually took the card. It was a debit/ATM card with a visa logo and somebody used the account in local stores, ostensibly in person (one of the charges was to Block Buster, for example). A card like ours can be used as a debit card or a credit card transaction wise, meaning you can either use your pin or sign. Still I have no idea how it happened and I’m sure I never will. One of the things I’m hearing now is that dishonest wait people are jamming their hands onto the card to get the imprint, but I still don’t know how in person transactions are being made.

I will say that it was my husband’s card that was compromised and his pin could be more mysterious.

---

<div class="post-metadata">

**Author:** ![Anonymous\_Coward](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anonymous\_Coward](https://boards.straightdope.com/u/Anonymous_Coward)\
**Post date:** [December 1, 2003, 2:21pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/11 "2003-12-01T14:21:04Z")

</div>

I don’t know if this is related or not, but it seems awfully close to our situation. I’m in Ottawa as well, and use Scotiabank.

[http://www.cbc.ca/stories/2003/10/24/Consumers/abm\_scam031024](http://www.cbc.ca/stories/2003/10/24/Consumers/abm_scam031024)

---

<div class="post-metadata">

**Author:** ![Stupendous\_man](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Stupendous\_man](https://boards.straightdope.com/u/Stupendous_man)\
**Post date:** [December 1, 2003, 2:25pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/12 "2003-12-01T14:25:54Z")

</div>

The crooks used what is commonly known around here as a “sniffer”. It is a device that connects to the card reader of the ATM machine. When you insert your card, the sniffer scans the magnetic strip, and stores it in memory. Meanwhile, off to the side or above, a secretly hidden camera is set up to watch you enter your PIN

After awhile, the crook disconnects the sniffer, and makes new cards that they use to get into your account using your own PIN

The sniffer and camera are often disguised to look like a part of the machine, painted it the colors and what have you.

So, the good rule of thumb is never use a machile that the card reader seems “different” on. If a machine looks different than the one beside it, examine it, and if you suspect a device is installed, call the police.

---

<div class="post-metadata">

**Author:** ![Archergal](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@Archergal](https://boards.straightdope.com/u/Archergal)\
**Post date:** [December 1, 2003, 4:46pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/13 "2003-12-01T16:46:17Z")

</div>

**Stupendous Man** , I’ve heard about sniffers and folks watching you enter your PIN. I used to cover my hand when I was typing in my PIN number (I’m pretty paranoid), but I started feeling stupid when I did so.

Do these kinds of things happen at “reputable” places (e.g., Target, CompUSA) or are they more likely to be at the quickie ATMs in the corner of the local convenience store? Just curious…

---

<div class="post-metadata">

**Author:** ![Archergal](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@Archergal](https://boards.straightdope.com/u/Archergal)\
**Post date:** [December 1, 2003, 4:51pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/14 "2003-12-01T16:51:11Z")

</div>

Hmm, I posted before I read **Anonymous Coward’s** link.

I’m guessing Scotiabank is a major banking chain in the area, yes?

Jeezopete…

---

<div class="post-metadata">

**Author:** ![GingerOfTheNorth](https://avatars.discourse-cdn.com/v4/letter/g/cdc98d/32.png) [@GingerOfTheNorth](https://boards.straightdope.com/u/GingerOfTheNorth)\
**Post date:** [December 1, 2003, 5:37pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/15 "2003-12-01T17:37:39Z")

</div>

Archergal, Scotiabank is one of the chartered banks in Canada. There are about 10 national banks, and many local credit unions. The banking system there is not like it is here. Banks are not privately held businesses like they are in most places in the US.

---

<div class="post-metadata">

**Author:** ![Lady\_Venom](https://avatars.discourse-cdn.com/v4/letter/l/9fc348/32.png) [@Lady\_Venom](https://boards.straightdope.com/u/Lady_Venom)\
**Post date:** [December 1, 2003, 5:49pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/16 "2003-12-01T17:49:14Z")

</div>

**Anonymous Coward**

I’m in Ottawa as well and we had this happen to us last January. We were able to figure out where my s/o’s card was cloned and reported it. I will tell you it was a popular gas station at the corner of Baseline & Merivale.

The thieves attempted to deposit and empty envelope with the value of $4000 attached to it. They tried to take out $1000 4 times, but his card was set up for a max of $300 at that time. So they took out $300 at 11:55 pm and $300 at 12:03 am. The bank re-imbursed us all of it. The reason they caught it was the phony deposit of $4000, which threw up a red flag. We have direct deposit for our pay cheques and have NEVER deposited any where near that much.

Hope you get it all sorted out.

---

<div class="post-metadata">

**Author:** ![Trunk](https://avatars.discourse-cdn.com/v4/letter/t/87869e/32.png) [@Trunk](https://boards.straightdope.com/u/Trunk)\
**Post date:** [December 1, 2003, 5:59pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/17 "2003-12-01T17:59:47Z")

</div>

AC: "In Ontario we have privately owned and operated ATMs in small corner stores, bars, etc "

StupendousMan: The crooks used what is commonly known around here as a “sniffer”.

From what I understand from various news stories, these two things go hand in hand. Try not to use those small private ones.

---

<div class="post-metadata">

**Author:** ![SnoopyFan](https://avatars.discourse-cdn.com/v4/letter/s/d07c76/32.png) [@SnoopyFan](https://boards.straightdope.com/u/SnoopyFan)\
**Post date:** [December 1, 2003, 6:05pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/18 "2003-12-01T18:05:15Z")

</div>

So sorry to hear about this, **AC**. People who do this … ESPECIALLY so close to Christmas … are just the scum of the earth.

When they find who did this, PRESS CHARGES!!!

---

<div class="post-metadata">

**Author:** ![Anonymous\_Coward](https://avatars.discourse-cdn.com/v4/letter/a/94ad74/32.png) [@Anonymous\_Coward](https://boards.straightdope.com/u/Anonymous_Coward)\
**Post date:** [December 1, 2003, 7:32pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/19 "2003-12-01T19:32:09Z")

</div>

Update:

First, thanks again to all for the good vibes 🙂

The bank is assuring us that we will get a full reimbursement of the missing funds within days. First we need to visit our branch, review the last few days and then sign an affidavit stating we did not withdraw the funds in question.

The bank manager we spoke with was kind and informative. She told us that debit card fraud is very common in Ottawa, and that the fraud policies we will be following are polished and customer friendly. She’s in the process now of getting an emergency overdraft increase on our account so any car/mortgage payments that come due don’t bounce. She also told us that our accounts aren’t compromised and a new ATM card is all that is needed.

I did file a private police report, but I doubt I’ll ever learn who cloned my card or what charges are filed. Actually, I wouldn’t be suprised if my private report is closed as the bank will be the party with the stolen money, not myself.

I hope a great big karmic train runs over the dirtbag that did this to my family and who knows how many others. Like **SnoopyFan** said, stealing money this close to Christmas could put a real hurt on families that are paycheque to paycheque.

---

<div class="post-metadata">

**Author:** ![World\_Eater](https://avatars.discourse-cdn.com/v4/letter/w/f04885/32.png) [@World\_Eater](https://boards.straightdope.com/u/World_Eater)\
**Post date:** [December 1, 2003, 7:41pm UTC](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147/20 "2003-12-01T19:41:43Z")

</div>

I wonder about the actual logistics of using a sniffer, (not that we need to discuss the fine details here) because it sounds like someone would need access to the hardware of the ATM.

[Next page](https://boards.straightdope.com/t/someone-drained-our-bank-account/216147.md?page=2)
