Zelle hackers ‘improve’ their scam; banks won’t help — but victims have a new place to complain

A sample of recent headlines about Zelle hacks.

A new rash of Zelle hacks has left consumers with empty banks accounts and little hope for refunds — but there is hope that federal regulators might finally impose fair rules to protect victims.  Anyone who’s lost money through Zelle, or who is currently fighting their financial institution over lost funds, should follow the instructions later on in this story.

I’ve been reporting on Zelle crime for several years. Using various methods and cover stories, criminals hijack victim accounts and send themselves money, leaving a wake of frustrated victims in their path. Consumers — many who never ever realized they had a Zelle account – then call their banks, expecting they’ll be covered by credit-card-like protections, only to face disappointment and in some cases, financial ruin.

In many cases, banks are giving consumers incorrect and self-serving opinions after the thefts. Consumers who suffer unauthorized transactions are entitled to Regulation E protection, and banks are required to refund the stolen money. (This isn’t a controversial opinion, and it was recently affirmed by the CFPB here. If you are reading this story and fighting with your bank, start by providing that link to the financial institution).

But in email after email, I hear from consumers who are denied refunds, with “fraud investigators” at banks telling account holders Zelle transactions are not entitled to any protection. This is incorrect, and I hope one day a regulator forces banks to reexamine all these fraudulent transactions, issue refunds, and other sanctions for repeatedly mistreating consumers.

However, a slightly different variation of the Zelle fraud is now common and it is less clear that Regulation E applies to it. In this scam, consumers are contacted by a criminal posing as a bank official, telling a cover story that the consumer’s account has been hacked.  After several convincing verification procedures — often there’s a text message that appears to come from the bank, which includes a toll-free number to call — the criminal convinces the victim to move supposedly at-risk funds to a new Zelle account allegedly created for their protection. In reality, the criminal is manipulating the consumer into moving the money into an account the hacker controls. Here’s just one example from the flood of emails I’ve received recently:

“I was a recent victim of someone pretending to be Bank of America letting me know my account had been hacked. This happened while I was on the way to a dentist appointment after a very stressful day of work,” the writer told me. The victim, distracted by the appointment, followed the instructions the caller laid out, “thinking I was saving myself from being hacked when in reality I was actually being hacked. After I got off of the phone I literally threw up because I realized what happened.”

Said another writer, “I was scammed and thought I was refunding myself through Zelle but really the $1,000 got sent to the scammer.”

Once victims discover the crime, and call their bank looking for help, they are told they’re out of luck. The bank’s opinion is that the consumer initiated the transaction, so it does not fall under the Regulation E “unauthorized transaction” protection.  I’d like to say banks are wrong, but Lauren Sanders of the National Consumers Law Center told me they have a point:

“(Protection applies) where the scammer takes information they got from the consumer and the scammer then initiates the payment. It sounds like in your scenario, the consumer actually initiates — sends — the payment,” she said. “Under the (Electronic Funds Transfer Act), the definition of ‘unauthorized transfer’ is one ‘initiated by a person other than the consumer.’  So if the consumer initiates the payment, you can’t challenge it as unauthorized.”

Sorry to deliver that bad news.  There is another potential route for consumers hoping their banks will help, however.  Sauders said there is a different set of protections that apply to “errors,” and that includes something designated an “incorrect transfer.”

“Arguably a payment that went to a scammer instead of yourself is “incorrect,” but banks are going to claim that it’s not an error,” Saunders said.

So, to repeat: If a criminal initiates a Zelle transfer — even if the criminal manipulates a victim into sharing login credentials — that fraud is covered by Regulation E, and banks should restore the stolen funds.  If a consumer initiates the transfer under false pretenses, the case for redress is more weak.

FILE YOUR ZELLE COMPLAINTS HERE
All the more reason anyone who’s suffered at the hands of Zelle and bank indifference should participate in a new effort by federal regulators to investigate newfangled tech-driven payment tools. In October, the CFPB announced it was ordering Amazon, Apple, Facebook, Google, PayPal, and Square to share information about their payment systems. The inquiry will examine the degree to which these firms are protecting consumer rights. The CFPB asked interested parties, including consumers, to offer commentary on the investigation.

“Consumers expect certain assurances when dealing with companies that move their money,” the CFPB said in announcing the probe. “They expect to be protected from fraud and payments made in error, for their data and privacy to be protected and not shared without their consent, to have responsive customer service, and to be treated equally under relevant law. The orders seek to understand the robustness with which payment platforms prioritize consumer protection.”

There is a deadline however, and it’s soon: December 6. Instructions for contributing comments are available here, but basically – send an email to BigTechPaymentsInquiry@cfpb.gov. Include Docket No. CFPB-2021-0017 in the subject line of the message.

“That is the perfect place for people to express their anger and push for better protections,” Saunders said.

NOTE: The inquiry does not officially mention Zelle and other cash-like apps, but any efforts to extend credit-card-like consumer protections to new payment systems might very well apply to Zelle in the end.

 

Don’t miss a post. Sign up for my newsletter

About Bob Sullivan 1536 Articles
BOB SULLIVAN is a veteran journalist and the author of four books, including the 2008 New York Times Best-Seller, Gotcha Capitalism, and the 2010 New York Times Best Seller, Stop Getting Ripped Off! His latest, The Plateau Effect, was published in 2013, and as a paperback, called Getting Unstuck in 2014. He has won the Society of Professional Journalists prestigious Public Service award, a Peabody award, and The Consumer Federation of America Betty Furness award, and been given Consumer Action’s Consumer Excellence Award.

51 Trackbacks / Pingbacks

  1. Zelle fraud emergency kit and FAQ — bobsullivan.net
  2. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Krebs on Security
  3. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – My Blog
  4. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - jcn50.com
  5. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Ken Gilmour
  6. How it Works, How to Fight Back – Krebs on Security - InfoSec Today
  7. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Riste Stojanov Blog
  8. How it Works, How to Fight Back – Krebs on Security – Oracle Dætalytica
  9. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – on November 19, 2021 at 4:36 pm – STETSON CyberGroup
  10. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Tech News Feed by Milkyweb Technologies
  11. The ‘Zelle Fraud’ Rip-off: The way it Works, Combat Again – Tech News Feed by Milkyweb Technologies
  12. How it Works, How to Fight Back – Krebs on Security - Cyber Bharat
  13. The way it Works, Combat Again – Krebs on Safety – Kilden Info
  14. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Network Securitas
  15. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back | MK Security Solutions
  16. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – | Lost in the Noise |
  17. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Norman McKellar
  18. Wie es funktioniert, wie man sich wehren kann – Krebs on Security | Crime News Time
  19. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – on November 19, 2021 at 4:36 pm – AttackFeed.com
  20. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - F1TYM1
  21. How it Works, How to Fight Back – Krebs on Security - Correct Success
  22. How it Works, How to Fight Back – Krebs on Security - KVSP Power 103.5
  23. How it Works, How to Fight Back – Krebs on Security - thecowbotchannel.com
  24. How it Works, How to Fight Back – Krebs on Security | WFXA
  25. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - InfoHub
  26. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Computer Security Articles
  27. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – CyberOPs
  28. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – ZBM Security News
  29. The ‘Zelle Fraud’ Rip-off: The way it Works, How you can Struggle Again – hqwallbase
  30. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – The CyberSecurityLoop
  31. How it Works, How to Fight Back – Krebs on Security - Pyramid Empire
  32. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - s0x
  33. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Development tools
  34. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - Shackle Media
  35. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back | Health Care SD
  36. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Nasni Consultants
  37. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Hi, I`m Umair Junaid
  38. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Absolute Cental Technologies
  39. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Krebs on Security – BlackWeb Security
  40. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back » Digit Theme
  41. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back | HackFence Manages Wordpress Security Service
  42. How it works, how you can defend yourself - Krebs on Security - Real Digital Market
  43. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Secure Cyber Solution
  44. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - Cybersecurity
  45. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Best Techz
  46. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Imobiliare 24
  47. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – Cybersecurity News
  48. How it Works, How to Fight Back – Krebs on Security - The Latest in Cyber Security News | Malware Attack Updates | Tech News
  49. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back - Cyber Security Crypto News
  50. How it Works, How to Fight Back – Krebs on Security - Edu2all
  51. The ‘Zelle Fraud’ Scam: How it Works, How to Fight Back – IncidentResponse.News

Leave a Reply

Your email address will not be published.


*


This site uses Akismet to reduce spam. Learn how your comment data is processed.