News for hackers. Stuff that matters.
Re:Robinhood Accounts Looted, No Customer Support by ydlr on Friday October 09, 2020 @06:21PM (#24735025)
Robinhood is playing a game it learned from banks.

If I walk into a bank with a gun and demand money, everyone agrees I am robbing the bank. But if I walk into your bank and claim to be you, suddenly I am not robbing the bank. I am committing "identity theft," and the bank will take no responsibility and do as little as legally possible to help resolve the situation.

It is a neat trick.

Pass all the expense of being a victim of a crime down to your customers.

Re:Robinhood Accounts Looted, No Customer Support by sharkweek on Friday October 09, 2020 @06:44PM (#24735165)
A few fun side notes about bank robberies.

I used to be a bank teller and we were instructed under no uncertain terms to hand over whatever we had and enjoy a week of paid vacation to recover from any potential trauma suffered.

The bank I worked for had a corporate security team who wouldn’t even stop their lunch break to review one isolated robbery, instead they’d look for serial cases, or occasionally assess how likely it was that it had any “inside job” elements if the robbery didn’t fall within standard profiles.

The actual “vault” in most branches is barely bigger than a high school locker inside the room behind the big metal door. Most everything else kept behind that huge metal door is administrative or customer related documents (arguably worth more than the cash itself!).

Lastly, about once a week, I was tasked with filling the ATMs for a branch that was in a downtown office building lobby. The ATMs were in a wall and had a little secret door that I’d access to audit the machines and count the money I’d refill them with. Each machine could hold 200k or so and there were two of them but there was no real clear way to get the $400,000 from our secured vault to the machines without armed security or something. In order to avoid having to order an escort every time, we’d just load the cash into a printer paper box and stealthily walk it across the lobby like I was just carrying actual printer paper (insert your federal reserve jokes here).

It’d take 2-3 hours to audit and refill the machines, meaning I would have had a nice head start if I had the guts and gray morality to make a run for it.

Re:Robinhood Accounts Looted, No Customer Support by kabdib on Friday October 09, 2020 @09:50PM (#24736146)
A friend of mine (now deceased) robbed a bank once. His side of the story was that he walked into the bank (unarmed, by the way) and simply demanded money; they gave it to him and he walked out. He said he was astonished at how smoothly the whole thing went. Upon exiting the bank he just continued to walk away, turned a couple of corners, and was never caught. His take was about 80 dollars.

Later on, he got clean and sober and told his sponsor about the episode. Part of recovery is that you're supposed to be willing to make amends for the damage you've done. His sponsor thought about that one, and said, "You know what? I think we're going to let that one pass." Probably a good decision.

Re:Robinhood Accounts Looted, No Customer Support by sharkweek on Friday October 09, 2020 @10:37PM (#24736324)
I guarantee the average success rate of a person’s first bank robbery rubs up against 100% - it’s the unwillingness to stop while you’re ahead that gets people caught.

I’d guess my average teller drawer value was somewhere between 2-5k “unlocked” and maybe another 5k kept locked below my station. Not exactly “let’s leave the country and live like kings” money.

Re:Robinhood Accounts Looted, No Customer Support by webnrrd2k on Friday October 09, 2020 @11:55PM (#24736590)
FWIW, I knew a guy, briefly, who committed over 70 bank robberies. He was a next door neighbor of a friend of mine who lived in subsidized housing for the elderly. The robber had a strict schedule in and out in two, maybe three minutes once the robbery started. However, he got caught on the last one - because he stayed too long.

As a side note, I met him as he was dying of cancer, and my friend would help take care of him. Id pitch in, but it was mostly my friend doing the day-to-day helping. Absolutely f*ing heartbreaking. There was no one else in his life - no friends, no family, nothing. He was bitter and alone. It was brutal watching him die over a few months.

Re:Robinhood Accounts Looted, No Customer Support by jlgaddis on Saturday October 10, 2020 @02:39AM (#24737073)
> However, he got caught on the last one ...

I guess it makes sense that he quit robbing banks once he got caught.

Re:Robinhood Accounts Looted, No Customer Support by cutemonster on Sunday October 11, 2020 @08:14AM (#24745264)
> I met him as he was dying of cancer

He got out from prison before he died?

How did he spend the days alone before he got cancer

Re:Robinhood Accounts Looted, No Customer Support by dmoy on Friday October 09, 2020 @06:55PM (#24735243)
I had family who worked in banking for a long time

The policies across the board are to just hand over money. As a result, there's essentially zero fatalities from bank robbery. Maybe a few every year, usually the criminal themselves.

However, bank robbers only get away with about 10% of cases. Clearance rates are super, super high now. And because they're usually serial, almost every single bank robber gets caught. There's a whole slew of tactics used.

Re:Robinhood Accounts Looted, No Customer Support by WalterBright on Friday October 09, 2020 @07:41PM (#24735510)
> The policies across the board are to just hand over money.

Makes perfect sense. They lose a few bucks, vs the $$$$ they'd have to pay in the lawsuit. Let the cops deal with the crooks.

Re:Robinhood Accounts Looted, No Customer Support by dmoy on Saturday October 10, 2020 @01:55AM (#24736938)
They don't lose a few bucks, it's insured.

I vaguely recall it's part of FDIC even.

Re:Robinhood Accounts Looted, No Customer Support by sharkweek on Saturday October 10, 2020 @11:18AM (#24739527)
This isn’t true but appreciate that it’s what most people think. Just gets written off as a loss. Same goes for cashing bad checks, etc.
Re:Robinhood Accounts Looted, No Customer Support by WalterBright on Saturday October 10, 2020 @02:56AM (#24737123)
> They don't lose a few bucks, it's insured.

That's not how insurance works. If you file claims against the insurance company, they pay the claim, but your rates go up to cover it. YOU wind up paying.

Re:Robinhood Accounts Looted, No Customer Support by ficklepickle on Saturday October 10, 2020 @03:26PM (#24741219)
I can't believe you were down-voted for that. It is absolutely true. Insurance, especially for things likely to happen, is basically a payment plan.
Re:Robinhood Accounts Looted, No Customer Support by WalterBright on Friday October 09, 2020 @07:39PM (#24735495)
Going through my bank statements at tax time, I noticed a weird check for $80 that was unaccounted for. Getting the check image, it was:

1. Not my name for the payer

2. An out-of-state address

3. Check was not on my bank's paper, they did the logo wrong, etc.

4. Signature was someone else's

Essentially, everything was wrong but the account number. The bank cashed the check, and blamed me. I got very angry about that, and basically sat in the manager's office until he agreed to refund my money.

A couple months later, I ran out of blank checks, and went to the bank to order more. They gave me a song-and-dance about the advanced "security paper" for the expensive check blanks they wanted to sell me. I literally laughed, and told them you guys don't check the name, the address, the signature, and certainly not the paper, and walked out and bought more checks from an online company.

Re:Robinhood Accounts Looted, No Customer Support by orf on Friday October 09, 2020 @07:54PM (#24735581)
Still using checks is the problem here.
Re:Robinhood Accounts Looted, No Customer Support by WalterBright on Friday October 09, 2020 @07:59PM (#24735617)
See my other posts on this topic :-/

Also, the image of the bad check was what got my money refunded. An electronic trail is simply not as good as a paper one when there's a dispute. A cancelled check is gold in a dispute.

Re:Robinhood Accounts Looted, No Customer Support by orf on Saturday October 10, 2020 @05:26AM (#24737709)
How does the rest of the world manage disputes fine without using a paper slip as proof?

The fact “bad checks” can exist is the problem, which necessitates the use of a literal paper trail.

Re:Robinhood Accounts Looted, No Customer Support by gallego2007 on Friday October 09, 2020 @08:31PM (#24735764)
Can’t upvote this enough! Checks should have been done away with long ago, but I guess some landlords still like to cash them in-person...
Re:Robinhood Accounts Looted, No Customer Support by mcny on Saturday October 10, 2020 @01:23AM (#24736857)
Did you know that accepting credit card payments could mean you have to pay three percent (maybe more?) in charges and fees?

It is insane.

Maybe FedNow will change things?

Re:Robinhood Accounts Looted, No Customer Support by sizzle on Saturday October 10, 2020 @01:23PM (#24740395)
Cozy.co direct deposit for my tenants has been great for years absolutely no hiccups.
Re:Robinhood Accounts Looted, No Customer Support by Thorrez on Saturday October 10, 2020 @02:49AM (#24737104)
Aren't there other options besides checks and credit cards? Like Venmo?
Re:Robinhood Accounts Looted, No Customer Support by Larrikin on Saturday October 10, 2020 @09:41AM (#24738940)
I don't think Venmo permits high volume commercial transactions. They want you to use PayPal for that.

The real answer is more prevalance of free ACH transfers. Some companies still like to charge the unneeded credit card fee for those too sadly.

Re:Robinhood Accounts Looted, No Customer Support by wasdfff on Saturday October 10, 2020 @04:22PM (#24741604)
There are services like zelle but the daily limit is often too low to make a rent payment in a high cost of living city.
Re:Robinhood Accounts Looted, No Customer Support by codeduck on Saturday October 10, 2020 @03:41AM (#24737263)
EFT.
Re:Robinhood Accounts Looted, No Customer Support by jlgaddis on Saturday October 10, 2020 @02:34AM (#24737063)
Meh, using paper checks -- and being able to pull up the scanned image online at any time -- has saved my butt at least twice in the last two years (to the tune of a few thousand dollars).

There's only one thing I (typically) use them for nowadays but they do occasionally come in handy at times.

Re:Robinhood Accounts Looted, No Customer Support by m463 on Saturday October 10, 2020 @02:40AM (#24737079)
Can you explain to me why you're not making a

"why is this gate here, let's take it down!"

type comment?

Checks are extremely useful to individuals. You can pay for something, it has no overhead, and you have your own audit trail.

You can probably fake a fax machine or a certified letter too, but I think they are useful too.

Re:Robinhood Accounts Looted, No Customer Support by orf on Saturday October 10, 2020 @05:13AM (#24737654)
The rest of the world is doing fine without them and the associated levels of fraud that comes with a random slip of paper allowing you to transfer large quantities of money. I haven’t even seen a check in decades and even if they are technically legal in the UK for a few more years, nobody accepts them. Why would you?

The US has a ridiculous level of bank/payment fraud compared to Europe (~15x in some areas, according to the fed), who invested in chip+pin, SEPA, IBAN, etc etc. This all lets me pay for something with no overhead and maintain my own audit trail in a way that doesn’t involve a trust-based system from the 1800s.

Re:Robinhood Accounts Looted, No Customer Support by m463 on Saturday October 10, 2020 @12:06PM (#24739851)
> The US has a ridiculous level of bank/payment fraud

The US also has strong consumer protection laws.

I remember a friend of mine had a father in mexico and someone misused his bank card and he was SOL.

In the US, there are laws protecting credit card holders. The most that can be lost is $50 (or $500 in cases of extreme negligence).

What is really happening is that with minimized repercussions a lot of things have almost been decriminalized.

Re:Robinhood Accounts Looted, No Customer Support by JackFr on Friday October 09, 2020 @06:48PM (#24735197)
That’s why I’ve never understood the utility of debit cards. When a debit card is abused fraudulently I am out the money. When a credit card is abused fraudulently the bank is out the money.

In both cases neither the bank nor I have done anything wrong. We’re both literally victims of a crime. And through the payments system and the justice system we’ll hopefully be made whole in the end. But the difference is the incentives. When I lose the money the bank has less of an incentive to rectify the situation.

Re:Robinhood Accounts Looted, No Customer Support by snazz on Friday October 09, 2020 @07:16PM (#24735378)
Some people with particularly bad spending habits use debit cards as a way to enforce self-control, but there are probably much better ways of achieving that. Teenagers also use them when paying with their own money because you can't have a credit card until you're 18 unless it's an authorized user card on your parents' account. Costco used to make you pay with a debit card, if I remember correctly.

But those are pretty much edge cases. Credit builder and secured credit cards exist for people with poor or no credit.

Re:Robinhood Accounts Looted, No Customer Support by yencabulator on Friday October 09, 2020 @09:26PM (#24736019)
> Costco used to make you pay with a debit card, if I remember correctly.

Costco, gas stations, and some mom & pop shops really want to save on that credit card processing fee.

Personally, I consider missing out on the cash discount at a gas station a convenience & fraud protection fee.

Re:Robinhood Accounts Looted, No Customer Support by brewdad on Saturday October 10, 2020 @02:13PM (#24740734)
Costco used to have an exclusivity deal with AmEx that prevented other credit cards from being accepted. They did accept debit cards however.

They now have a deal with Visa, along with their own branded Visa card but will accept any bank's Visa card.

Re:Robinhood Accounts Looted, No Customer Support by ZainRiz on Friday October 09, 2020 @08:41PM (#24735797)
Venmo fraud is even worse. My sister got scammed out of thousands of dollars recently and her bank just said "pay up"

I wrote about the story here:

https://www.zainrizvi.io/blog/how-banks-help-scammers-with-t...

Re:Robinhood Accounts Looted, No Customer Support by TylerE on Friday October 09, 2020 @08:57PM (#24735881)
That's a bit of a different case.

As cruel as it sounds, your sister performed a legitimate transaction.

Re:Robinhood Accounts Looted, No Customer Support by paultopia on Saturday October 10, 2020 @01:15AM (#24736840)
I'm not sure I agree. How should anyone know that it might take six months for their bank to know whether a check is real or not? Does anyone who isn't actually a bank employee know that? (What percentage even of bank employees know that?)

It seems to me that a person ought to be able to reasonably rely on a bank acting like a check has cleared, at least after some clearly stated period of time.

Re:Robinhood Accounts Looted, No Customer Support by TylerE on Saturday October 10, 2020 @01:23AM (#24736858)
As far as the bank and the law is concerned, they are two separate issues.

There isn’t a dependency.

The legitimate account holder said “Send $x from my account to y” and the bank did.

There was no fraud in that transaction.

As for your second point - funds are required to be available before the check clears by federal law. Complain to your congresscritter, not the bank.

Not sure why I’m getting downvoted for stating simple facts...

Re:Robinhood Accounts Looted, No Customer Support by paultopia on Saturday October 10, 2020 @09:15AM (#24738778)
Fair points, but not directly on the issue raised by the complaint. Its not about the legitimacy of the sending money off transaction, or about the funds availability policy. What the victim was complaining about---and what I was agreeing with---is the bank's failure to have any mechanism to communicate when a check actually cleared.

Fixing that wouldn't require a change to the funds availability policy, and wouldn't require it to dishonor any transactions. As the original complaint indicated, it would literally just be a UI tweak: the online banking system could highlight provisionally available funds differently from really really available funds, and in that way communicate to customers what is actually cleared and safe to spend. This isn't a big ask.

In addition to protecting account holders from a massive range of fake check scams, that would also protect them from a bunch of other crooked stuff.

For example: did you know an employer can reverse a direct deposit of a paycheck for some amount of time after it seems to go through?[1] Employees get screwed all the time when their employer randomly decides "oops, we paid you too much" after the money is already spent. Which is insane and unfair but---we wouldn't even have to change the system to protect many employees. Just have banks clearly indicate which direct deposits are final and which might still go poof if the employer unilaterally decides.

[1] old example https://www.nytimes.com/1997/03/23/business/turning-direct-d... --- but I know people to whom this has happened this year.

Re:Robinhood Accounts Looted, No Customer Support by sgerenser on Tuesday October 13, 2020 @08:38PM (#24771973)
Checks actually “clear” quite quickly nowadays. As in, the money gets pulled from the check writer’s account and made available to the depositor within a day or two (notwithstanding whatever the depositor’s bank hold policy happens to be). The problem is, if the transaction proved to be fraudulent (as in the check was written by a fraudster on a random persons bank account) the real account owner can dispute the transaction weeks or months afterwards. This is normally going to be long after the check has nominally “cleared.”

Once the check is disputed, the money gets yanked back from the depositor’s account. That’s why personal checks are just a completely unreliable method of payment and should only be used between trusting parties.

Re:Robinhood Accounts Looted, No Customer Support by jlgaddis on Saturday October 10, 2020 @02:41AM (#24737082)
> Not sure why I’m getting downvoted for stating simple facts...

Welcome to HN.

Re:Robinhood Accounts Looted, No Customer Support by ALittleLight on Friday October 09, 2020 @11:46PM (#24736569)
That's not true of debit cards. If the card is used fraudulently you just dispute the charges the same as you would with a credit card. The bank reverses the charge and the vendor has the opportunity to sue you if you really did make the alleged charges.
Re:Robinhood Accounts Looted, No Customer Support by TylerE on Saturday October 10, 2020 @12:00AM (#24736600)
The distinction is this.

Your card gets stolen.

Scammer empties out the account.

With a credit card, transactions against the card will get declined after it maxes out (if the fraud checks don't kick in sooner). You report the theft. Everything solves itself quickly. A minor inconvenience at worst.

When your debit card gets stolen, that's YOUR money going out, then your rent check bounces, and it takes weeks to get the money back, and in the meantime, YOU HAVE NO MONEY.

Re:Robinhood Accounts Looted, No Customer Support by vaccinator on Friday October 09, 2020 @08:30PM (#24735758)
I just disputed an ACH transfer and they refunded it ... That is probably even less secure then a debit card?
Re:Robinhood Accounts Looted, No Customer Support by cosmie on Friday October 09, 2020 @06:34PM (#24735120)
Same with credit cards. The banks/issuers get the benefit of advertising "no liability" to consumers for fraudulent transactions, yet ensure they're able to contractually shift as much of the cost onto the merchants that were ripped off, rather than eat it themselves[1].

[1] https://www.nerdwallet.com/article/credit-cards/merchants-vi...

Re:Robinhood Accounts Looted, No Customer Support by thatjamesdude on Saturday October 10, 2020 @03:30AM (#24737219)
That's side stepping the real problem very neatly though.

Speaking as a citizen of a country with "real" identification laws, how would you like the banks to identify you?

SSN? Absolutely not. That number is not meant to be used as formal identification, it's completely unprotected.

America has a particular weakness to identify fraud because you don't have an identity system.

My ID number is formally defined in law, protected and verified by various check sums built into the number (like so many tokens out there). Banks are required, by law, to ensure they have identified the right individual before transacting and they carry the full burden if they get it wrong.

The SSN in the US is sequential and I never fail to laugh at the idea of forcing your banks to verify you with such a flimsy structure. It's just gonna make the problem worse

Re:Robinhood Accounts Looted, No Customer Support by ryandrake on Saturday October 10, 2020 @12:24PM (#24739983)
Maybe we should be going back to local banks, personal relationships and a real-life web of trust? I remember long time ago when you could get a bank account without any identification at all. The bank tellers knew you by name from talking to you at the grocery store. The bank manager hunts with you. The owner of the bank has seen you on the local golf course.

These days, you're CUSTOMER #52219945 at SuperUltraMegaBank with such-and-such mother's maiden name. The local bank employees live 80 miles away where there are cheaper houses, and to them you're just one of thousands of customers in their corporate database. But, you never even see each other because almost all of the banking you do is via their web site, with the occasional telephone call that gets answered by a teller in southeast Asia. It's totally impersonal.

Re:Robinhood Accounts Looted, No Customer Support by im3w1l on Friday October 09, 2020 @07:13PM (#24735365)
It's the silicon valley game they are playing. Cost no money, offer no support.