Hi everyone.
Cam I please ask for some advice, I have just discovered my father has had his pc hacked and has also been tricked into buying into a bit coin scam.
He was tricked into transferring an initial amount of 40k. His machine I suspect had a key logger on it and his account details were captured and a further 360k was stolen from him. The bank launched a 6 month investigation and said the funds were approved by him to be transferred, we are disputing this, particularly as he is somewhat mentally compromised in his decision making due to a stroke 7* years ago.
I wish to get legal and cyber crime advice on how to challenge the bank and try to recoup some of the funds.
We are seeking to get further information about the case via the bank but in the meantime I want to get professional advice in how to approach this.
Does anyone have any advice on how to approach this situation based on their field of expertise or personal experience in this area?
Your advice would be greatly appreciated.
A few questions, I work for a financial institution but from a Technology perspective, I have some insights to the Fraud department and some of their processes and assist them in some investigations from time to time. Obviously processes etc. will vary from institution to institution. The comments section is quite lengthy so I don't know if some of these questions were already answered.
Did your father initiate the transfers himself, or was it someone who "remoted" into his computer/gained his login credentials via a keylogger, then logged in from elsewhere in the world? Do you have evidence that your father didn't initiate the transactions? If it was a keylogger and the transfers were initiated from elsewhere, the bank would see the IP Address changes and be able to validate this.
Have you previously notified the bank that your dad was not of sound mind and required restrictions on his accounts? Has he since called them to unlock the access again? Do you have Power of Attorney over his accounts?
What sort of 2nd factor does the bank provide to authorise these sorts of transactions? What are the daily limits? Were the transactions done in large single payments? e.g. 40k in a single transaction, or over multiple transactions? Are these daily limits standard, or have they been increased by your father to send the payments out? If the latter, did the bank question the reasons for the increase? This is fairly standard (not sure if legal obligation though), especially for elderly customers to ensure they aren't being scammed to send large sums out. Even if not legally required, it's pretty poor on the banks behalf not to question it first.