Toronto Escorts

RBC camera shows someone else took cash, but bank says customer is to blame

bver_hunter

Well-known member
Nov 5, 2005
27,340
5,560
113
RBC surveillance camera shows someone else took cash, but bank says customer is to blame:

Bank says she was careless, but tech expert says chip-and-PIN cards can be compromised

An Ontario woman says she is out thousands of dollars after her bank blamed her for two unauthorized withdrawals from her account, despite surveillance photos that show another person taking the cash right under the noses of RBC tellers.

Cleopatra Evelyn-Clark worries the chip and PIN technology — used to secure billions of debit and credit card transactions in Canada every year — isn't as safe as banks say after losing more than $6,600 to a fraudster who, according to the bank, used her debit card and PIN to steal the money.

RBC's investigation found Evelyn-Clark was to blame, insisting she must have shared her card and PIN with someone.

"The whole thing is a little bit ridiculous. At no time did I give anyone my card or my PIN. I was in possession of my card during both transactions," Evelyn-Clark said.

"There seems to be no protection for the consumer here," she said. "It just seems they're all about their profit and not about protecting consumers at all."

An expert in consumer protection says there's a "power imbalance" between financial institutions and customers that allows banks to write their own rules, run their own investigations, and determine the results without any obligation to provide proof.

"They are flipping the burden of proof back to the customer … [chip and PIN] transactions are not foolproof," says John Lawford, executive director of the Public Interest Advocacy Centre (PIAC), which provides legal and research services on behalf of consumer interests.

In December 2018, a woman walked into an RBC branch in Montreal, where Evelyn-Clark lived at the time, and made two withdrawals from her savings account within two days, for $3,000 and $3,650.

The tellers didn't ask for identification. The bank says they didn't need to because the PIN was used.

But when Evelyn-Clark asked for proof that her PIN was used and to see the surveillance photos to try to identify the thief, she says the bank refused.

In an email to Go Public, RBC spokesperson A.J. Goodman said the bank explained its decision to Evelyn-Clark, adding that it reviews potential fraud and unauthorized transactions, "on a case-by-case basis, considering all relevant facts before making a decision."

RBC told Evelyn-Clark the only way she could see the photos was through police, so she filed a report.

But it was only after Go Public got involved that police investigators requested the surveillance images from the bank, and allowed Evelyn-Clark to finally see them — more than six months after she first asked to see the images.

John Lawford of the Public Interest Advocacy Centre says the banks determine the results of their own fraud investigations without any obligation to show their evidence to anyone. (Andrew Lee/CBC)
The photos show a woman making the withdrawals at the teller counter, but Evelyn-Clark says she has no idea who that person is.

"I didn't withdraw the money. All I would like from the bank is for them to reimburse me the money that has been stolen from me," she said.

Police told her they're still hoping to identify the other woman. Go Public asked RBC for a copy of the photos but it refused.

'We don't steal. We don't cheat'

Similarly, a Langley, B.C., couple was held responsible for $4,360 after their Visa was stolen in Mexico in May. CIBC said Carol and Bill Pitts were on the hook for the losses because the four transactions were made with their card and correct PIN.

"They were basically badgering me and accusing me of having my PIN written down or giving it out," Carol told Go Public.

"That's totally not the case. I'm an office manager for a huge corporation. I know password security."

The couple says they reported the card stolen the same day Carol noticed it missing from her wallet, two days after the fraudulent charges started. They were at an all-inclusive resort and hadn't been using the Visa.

While on vacation in Mexico in May, Bill Pitts and his wife Carol Pitts found out their CIBC Visa card was missing and $4,360 in charges had been racked up. (Submitted by Carol Pitts)
The bank eventually offered the couple $1,000 as a goodwill gesture, but the Pitts say that's not good enough and have escalated their case to CIBC's ombudsman.

"I'm angry because [the bank] accused us of lying or being a fool. We're neither," Bill says.

"We don't steal. We don't cheat. So to have this go sideways and have the bank turn around and say it's our fault with no follow up, it gets me pretty angry."

Like Evelyn-Clark, the Pitts say they asked the bank for proof their PIN was used, but were refused. They also couldn't get any information on how the bank investigated.

CIBC said it worked with them on the matter and is now waiting for the ombudsman's decision.

RBC says chip-and-PIN enabled cards are secure and, to date, the bank hasn't seen a case where a chip card was counterfeited and used with a valid PIN. (Mark Blinch/Reuters)
"We thoroughly investigate fraud claims and take all relevant factors into account," wrote CIBC spokesperson Trish Tervit in an email to Go Public.

Tervit said victims of credit card fraud at CIBC are fully reimbursed if "they've met all of their requirements in the cardholder agreement."

CIBC didn't answer Go Public's questions about the security of the chip-and-PIN system.

RBC says chip-and-PIN cards are secure and, to date, the bank, "hasn't seen a case where a chip card was counterfeited and used in conjunction with a valid PIN."

'Fundamental flaw'

It's not clear what exactly happened in either case. But cybersecurity expert Claudiu Popa says there's a "fundamental flaw" in the technology that allows fraudsters to trick ATMs and point-of-sale (POS) terminals into thinking the right card and PIN were used.

"People who adequately protect their PINs are still at risk of having their transactions compromised," said Popa, who is a risk adviser at Informatica, a data protection company.

He points to research out of Cambridge University that found fraudsters are getting around chip-and-PIN security either through shimming — when a thin, card-sized circuit board is secretly inserted into the card slot in order to clone cards, while a tiny camera is used to record the PIN — or by installing malware into the terminals so the machines think the right PIN is being used.

It's not clear how often those things happen, but the authors of the 2015 study say compromised chip-and-PIN systems could "reach a massive scale."

Cybersecurity expert Claudiu Popa says keeping your PIN safe is no guarantee your chip-and-PIN enabled debit or credit card won't be compromised. (Yanjun Li/CBC)
Popa says it doesn't matter whether someone had stolen Evelyn-Clark's PIN. "They might have been able to enter just any PIN and the chip on the card would have said that it's a legitimate PIN," he said.

There is no way to know if Evelyn-Clark's card was cloned or if there is another reason for the withdrawals. RBC isn't offering details on its investigation.

In the Pitts's case, there is another possibility. A Mexican mobile payment system called Sr. Pago doesn't always require a PIN — only a signature.

Interac, the company behind debit cards, says Canadians lost $4.4 million to debit card fraud that year, a record low according to the company.

Evelyn-Clark says RBC refused to show her the surveillance photos of the woman who accessed her account. (Dave St-Amant/CBC)
PIN rule ignored

There is some protection for customers under the Canadian Code of Practice for Consumer Debit Card Services, but it doesn't apply to credit cards.

The voluntary code addresses the power imbalance between banks and customers when it comes to fraud investigations, according to John Lawford of PIAC, and puts the onus on banks to prove customers are to blame. If they can't, financial institutions need to err on the side of the customer.

"The bank can't just say 'Oh we have the correct chip and the correct PIN therefore you're liable.' That's not the way the rules are written," he says.

"The rules say if the customer disputes the charge it's up to the bank to show that the PIN was compromised or that the customer was somehow negligent."

All the major banks have agreed to follow the code, but often ignore it in favour of cardholder agreements that give them a lot of leeway with their investigations, Lawford says.

The agreements say if someone is careless with the PIN, or chooses a PIN that's easy to guess, they are liable for losses.

RBC says it followed the code when it investigated Evelyn-Clark's case.

Promised protection falls short

Legislation that was meant to better protect bank customers passed last June, but the section of Bill C-86 related to unauthorized transactions was put on hold.

The law would have limited customer liability to $50 for unauthorized credit card transactions unless the cardholder demonstrated "gross negligence in safeguarding the credit card."

Lawford says the section wasn't put into force because banks wanted more time to negotiate terms with the government before it was implemented.

But while C-86 addresses credit card fraud, it offers no protection for debit card holders. Both the Pitts and Evelyn-Clark say better protection is what's needed.

The Pitts are waiting to hear what CIBC's ombudservice decides. "We assumed that we'd be protected," Bill said.

Carol added they "just want to bring this to the general public, because people need to know that they are not protected," says Carol.

Evelyn-Clark says she has now lost faith in the system and has hired a lawyer, hoping to get at least some of her money back.

https://www.cbc.ca/news/business/pin-fraud-customer-liable-rbc-surveillance-1.5444554
 

malata

RockStar
Jan 16, 2004
3,829
172
63
Paradise by the dashboard light.
some cc have a feature that protects you from card theft, but you must report in x number of days

 

underground

Active member
May 28, 2010
389
182
43
What if she had a deal with this person, perhaps a friend ? Here is my PIN go pull out as much cash as possible and we split it. I tell RBC that I don't recognize the person.......
 

farquhar

Well-known member
Jan 25, 2019
994
743
93
What if she had a deal with this person, perhaps a friend ? Here is my PIN go pull out as much cash as possible and we split it. I tell RBC that I don't recognize the person.......
When Banks review these fraud cases, they do so on a basis of "Balance of Probabilities." As far as RBC is concerned, it's more likely that the complainant shared the PIN with someone they knew, rather than the card and PIN were cloned/compromised somehow.

People seem to forget that the Bank is owned by their Shareholders, and look out for the Shareholders firstly; the customers are of secondary concern.

If I mail my brother a cheque, and the cheque is stolen out of his mail box and cashed by the thief, am I expected to take a loss in instance? Of course not; I have to just provide an indemnity to my Bank, and then the Bank retrieves the money from the institution that negotiated the cheque and it is that institution that takes the loss.

Yet, when it comes to Debit/Credit Card fraud, or even E-transfer fraud, as far as the Banks are concerned, the client is SOL because the client contributed somehow to the loss....something really is wrong here.
 

Grimnul

Well-known member
May 15, 2018
1,482
27
48
I’ve had fraudulent charges on my credit card twice, and both times it took a 10 minute phone call to get it sorted out. Charges removed, I didn’t have to pay a cent.
 

jeffmont55

Member
Apr 4, 2012
51
1
8
Same here. It happened in August of 2019. Two consecutive charges of almost exact amount. I wondered if the fraudster made a mistake in the first one. I called the bank, answered a few questions, they verified my Amazon order history and they reversed both charges. Phew.
 

Grimnul

Well-known member
May 15, 2018
1,482
27
48
Same here. It happened in August of 2019. Two consecutive charges of almost exact amount. I wondered if the fraudster made a mistake in the first one. I called the bank, answered a few questions, they verified my Amazon order history and they reversed both charges. Phew.
It was two separate incidents on two different cards for me. One was a guy charged a bunch of Uber trips on my card, but my Uber account didn’t show any of those trips. The other one was some dude in Montreal bought a bunch of stuff from like 5 or 6 different Bell stores over the course of a week before I noticed. They were both relatively small amounts, though. The Uber trips totalled around 300.00 and the other dude bought around 900.00 worth of stuff. Maybe the outcome would’ve been different if it was more money? The weird thing was that one of the cards that was used was my backup card that I’ve only used a handful of times and have never used online. No idea how they got my info.
 

bver_hunter

Well-known member
Nov 5, 2005
27,340
5,560
113
I think that the credit card fraudulent charges are normally reversed by the credit card companies. In fact my MasterCard was being fraudulently charged in the USA and the credit card company called me at my workplace and asked that I return their call. They informed me about these fraudulent charges and stated that my account will be credited accordingly. Also, they shipped me a new card that arrived the very next day. It had a new card number. This happened to me twice.

However, Debit Cards are a totally different kettle of fish. You are asked to never disclose your PIN number to even your own family members. Otherwise, you will be on the hook for any fraudulent transactions. So, it is advisable not to use your Debit card to pay at stores or gas pumps etc. Either pay by cash or use a credit card.
 

TeeJay

Well-known member
Jun 20, 2011
8,052
731
113
west gta
I’ve had fraudulent charges on my credit card twice, and both times it took a 10 minute phone call to get it sorted out. Charges removed, I didn’t have to pay a cent.
Ditto

I have had 2 different credit cards compromised no issues whatsoever (one was stolen by a taxi driver, the other no idea but I suspect online transactions based on use patterns)
I had a debit card skimmed at a gas station which took a bit longer to reimburse but again no issue
The worst ones are store cards; I had a Starbucks card cloned and it took alot of hassle to get that back (despite it being the smallest amount of fraud lol go figure) but on positive side they gave me extra after complaining
 

GameBoy27

Well-known member
Nov 23, 2004
12,518
2,375
113
Banks can be dicks. Like others have said, you have a better chance of getting fraudulent charges reversed on your credit card than you will on your debit. As is the case with that woman. She said she was in possession of her debit card the whole time. I wonder if she can somehow prove that. Like if she used the card in a different part of the city around the same time as the woman withdrew the cash.
 

bver_hunter

Well-known member
Nov 5, 2005
27,340
5,560
113
Banks can be dicks. Like others have said, you have a better chance of getting fraudulent charges reversed on your credit card than you will on your debit. As is the case with that woman. She said she was in possession of her debit card the whole time. I wonder if she can somehow prove that. Like if she used the card in a different part of the city around the same time as the woman withdrew the cash.
The banks have every reason to challenge her account of it. But we do not know the full details as yet. It is a real cause for concern if these Chip and PIN cards are compromised that easily. Let's be clear, that there are numerous fraudsters who have those skimmers / scanners and can compromise your pins when they either walk past you with these gadgets or even install them in gas stations:

https://www.youtube.com/watch?v=gJo9PfsplsY
 

Big Sleazy

Active member
Sep 13, 2004
3,535
8
38
Banks don't actually have any money.

"Gold is money. Everything else is credit ".

J.P Morgan 1916
 

whiteshaft

Been Around
Mar 15, 2014
1,783
251
83
Room 38DD
However, Debit Cards are a totally different kettle of fish. You are asked to never disclose your PIN number to even your own family members. Otherwise, you will be on the hook for any fraudulent transactions. So, it is advisable not to use your Debit card to pay at stores or gas pumps etc. Either pay by cash or use a credit card.
bver_hunter, I tend to agree with your advise since it's been proven pretty safe based on my own experience so far!:yo:
 
Ashley Madison
Toronto Escorts