News for hackers. Stuff that matters.
Re:Upwork asking me for a $12.5k refund as the client was us... by danlugo92 on Sunday January 09, 2022 @09:53AM (#29863697)
Reminder to anyone reading this:

NEVER EVER give access to your bank account to ANYONE.

e.g. INTUIT (They personally scammmed me out of a month's worth of subscription that I never used).

Do NOT give your bank account to Paypal, they WILL withdraw money if they have any excuse.

You can however, give all of these your credit card, as any wrongdoing can be ammended via a Chargeback, but there's no chargeback for direct-to-bank withdrawals.

Re:Upwork asking me for a $12.5k refund as the client was us... by MWil on Sunday January 09, 2022 @10:10AM (#29863856)
Not ANY wrongdoing...

Despite Air Canada cancelling the flight (we didn't cancel our tickets), despite a public campaign waged to get them to refund passengers, despite the US Department of Transportation fining them $25 million (reduced to $2 million because US gov't), despite Air Canada changing their public website multiple times (I saved screenshots to include "we will fully refund") but then not actually allowing your ticket to be processed, despite me submitting DOZENS of responses to Chase for clarification on why all of this is wrong of Air Canada...

Chase: "I'm sorry, if they don't want to refund you, even if they said they would, there's nothing we can do."

https://viewfromthewing.com/dot-issues-largest-fine-ever-aga...

Re:Upwork asking me for a $12.5k refund as the client was us... by hedora on Sunday January 09, 2022 @10:45AM (#29864206)
Odd.

Did you use the magic phrase: “I need to issue a chargeback. They charged my card for services not rendered. I called their number to contest it and they did not issue a refund.”

That (or “they charged my card but did not send the product”) has worked 100% of the time for me. I’ve never provided documentation beyond that.

Chase has a strong financial incentive to issue the chargeback (Air Canada ends up paying Chase a fine), and it’s no sweat off Chase’s back if Air Canada sues you.

Card issuers have no incentive to investigate further, and (in my experience) never ask for further documentation.

Re:Upwork asking me for a $12.5k refund as the client was us... by tdfx on Sunday January 09, 2022 @11:56AM (#29865009)
I second this comment. Your chargeback request needs to color neatly within the lines of their procedures if you want a smooth process. How you phrase your request is incredibly important. Do not go crazy on details specific to the situation, use a template.
Re:Upwork asking me for a $12.5k refund as the client was us... by lotsofpulp on Sunday January 09, 2022 @10:51AM (#29864271)
If Chase was already involved, it seems like Chase denied the chargeback request. Banks have an incentive to not let bad chargebacks through to major merchants, it would reduce the value of the card networks over time, and hence incentivize less use of the card networks resulting in less profit for the banks.

I would have taken Air Canada to court though, assuming all the facts are true. A small claims court would have definitely supported them.

Re:Upwork asking me for a $12.5k refund as the client was us... by simplestats on Sunday January 09, 2022 @02:43PM (#29866653)
Not sure where this person is, but in the US chargebacks exist because they are required by law. There is also an arbitration processs they are required to provide for disputes, which is pretty cheap.
Re:Upwork asking me for a $12.5k refund as the client was us... by chrischen on Sunday January 09, 2022 @03:29PM (#29867016)
In my experience it’s almost too easy to create a chargeback and the whole system is grossly inefficient and ripe for abuse.

I once called in to make a price protection benefit claim (would refund the price difference of a purchase). The agent assured me it was done and I find out later all they did was create a chargeback and I got refunded the entire price because the merchant didn't respond to it.

The dispute resolution system seems like it gets no investment or attention from any stakeholder, a merchant could easily get DOSd by spam disputes if some sort of consumer protest were organized. That’s how overpowered of a consumer tool it is.

Re:Upwork asking me for a $12.5k refund as the client was us... by thecolorblue on Sunday January 09, 2022 @12:25PM (#29865325)
I have had trouble with charge backs with Chase. Generally, I think they are pretty good to work with, but I would not suggest them for any large purchases.

You are correct about credit card companies, but for whatever reason, Chase has different incentives.

Re:Upwork asking me for a $12.5k refund as the client was us... by drewg123 on Sunday January 09, 2022 @11:13AM (#29864514)
Chase seems to be one of Air Canada's credit card rewards program partners[1]. My guess is that this relationship has something to do with Chase's refusal to issue a chargeback.

[1]https://www.aircanada.com/us/en/aco/home/aeroplan/credit-car...

Re:Upwork asking me for a $12.5k refund as the client was us... by futharkshill on Sunday January 09, 2022 @02:17PM (#29866417)
that seems like a stretch to be honest.
Re:Upwork asking me for a $12.5k refund as the client was us... by drewg123 on Sunday January 09, 2022 @04:05PM (#29867324)
These programs are worth billions for larger airlines according to https://en.wikipedia.org/wiki/Ancillary_revenue When there are billions at stake, it does not strike me as a stretch that the credit card partners would bend the rules to benefit their airline partners.
Re:Upwork asking me for a $12.5k refund as the client was us... by fortran77 on Sunday January 09, 2022 @03:00PM (#29866789)
Right! This is why I always chuckle when the HN thought-leaders always say "just do a chargeback" as if it's easy and guaranteed. I've rarely had success doing them.
Re:Upwork asking me for a $12.5k refund as the client was us... by literallycancer on Sunday January 09, 2022 @07:57PM (#29869263)
The difference is often your bank. Some of my banks don't even have a way to initiate the charge back process (you have to write a free form email), presumably to reduce overhead and to avoid losing cases needlessly, while the others make it very easy with a web form.
Re:Upwork asking me for a $12.5k refund as the client was us... by silisili on Sunday January 09, 2022 @03:05PM (#29866840)
Anecdotally, I've never had one fail. I've probably done maybe 4 or 5 in 10 years. Though I despise Chase and don't use them, so that may be the key. Amex and Discover are top notch in that department.
Re:Upwork asking me for a $12.5k refund as the client was us... by user_7832 on Sunday January 09, 2022 @10:39AM (#29864137)
Have you thought of going to consumer court? Either that, or a class action lawsuit (if multiple people can group together) should definitely help you see your money. You might also be able to find a lawyer pro-bono as the case is clear cut in your favor (and charge for legal fees in the compensation).
Re:Upwork asking me for a $12.5k refund as the client was us... by mizzao on Sunday January 09, 2022 @10:52AM (#29864289)
Same experience with an Air Canada ticket here.
Re:Upwork asking me for a $12.5k refund as the client was us... by londons_explore on Sunday January 09, 2022 @09:59AM (#29863756)
This varies country to country. In the UK, direct bank withdrawals (via Direct Debit) are guaranteed forever. Ie. in 30 years time you can reverse a transaction from a company and get all the money instantly, even if the company no longer exists.
Re:Upwork asking me for a $12.5k refund as the client was us... by brnt on Sunday January 09, 2022 @11:27AM (#29864682)
How does it work if the account is closed, company out of business etc? Does the bank eat the amount? if so, seems easy to abuse.
Re:Upwork asking me for a $12.5k refund as the client was us... by londons_explore on Sunday January 09, 2022 @11:48AM (#29864925)
The bank (or transfer provider) eats the amount. And yes, it gets quite some abuse. It's especially abused against gas and electric providers when they've gone bankrupt since people tend to have paid those companies tens of thousands over many years, and when the provider has gone bankrupt it's unlikely they'll provide any evidence to dispute any chargeback.
Re:Upwork asking me for a $12.5k refund as the client was us... by Silhouette on Sunday January 09, 2022 @12:09PM (#29865164)
Though as a point of interest my small UK-based B2C has seen significant abuse of card chargebacks (i.e., chargebacks issued against legitimate charges and the banks rejecting our dispute) but never a single abusive reversal under Direct Debit, even though in theory the Direct Debit has that indefinite liability attached. I suspect this is because in practice you can issue a chargeback because you didn't like the way someone sneezed and a lot of banks will uphold it while you normally have to give a valid reason to reverse a Direct Debit transaction.
Re:Upwork asking me for a $12.5k refund as the client was us... by dcomp on Sunday January 09, 2022 @12:48PM (#29865586)
Probably because you can't dispute for any reason. But if there wasn't enough notice. If you don't give 10 working days notice (unless initiated by the person). An immediate refund can be requested.

Bad service isn't a reason for a refund. And if the person doesn't say "This debit was in error. I wasn't given notice" or similar the bank will usually say this is a legitimate direct debit [0] https://www.directdebit.co.uk/DirectDebitExplained/pages/dir...

Re:Upwork asking me for a $12.5k refund as the client was us... by danlugo92 on Sunday January 09, 2022 @11:22AM (#29864609)
My bank doesn't even offer a dispute option in direct debit transactions.
Re:Upwork asking me for a $12.5k refund as the client was us... by londons_explore on Sunday January 09, 2022 @11:24AM (#29864645)
you have to call them.
Re:Upwork asking me for a $12.5k refund as the client was us... by jdkenney on Sunday January 09, 2022 @12:28PM (#29865356)
This bank and banking system specific. My bank (Canada) doesn’t offer any dispute option either.
Re:Upwork asking me for a $12.5k refund as the client was us... by commandlinefan on Sunday January 09, 2022 @10:17AM (#29863949)
> NEVER EVER give access to your bank account to ANYONE.

The thing is, that’s the only way to do direct deposit. It makes me uncomfortable too, but that’s been the standard for decades.

Re:Upwork asking me for a $12.5k refund as the client was us... by chrisseaton on Sunday January 09, 2022 @10:41AM (#29864170)
To allow someone a direct deposit they should only need your name and bank account numbers. You shouldn't be giving them access with things like your password.
Re:Upwork asking me for a $12.5k refund as the client was us... by gruez on Sunday January 09, 2022 @11:22AM (#29864610)
Giving them your name/account number is all that's needed for someone to withdraw from your account. That's how gyms work. They just require your account number and/or a void check (which has your account number). They don't need you to sign into your bank account.
Re:Upwork asking me for a $12.5k refund as the client was us... by chrisseaton on Sunday January 09, 2022 @11:26AM (#29864670)
I don't think any responsible bank would let you withdraw using just an account number. What kind of security would that be? My bank certainly doesn't - allowing a debit requires me to authorise via 2FA - they obviously can't just take money.
Re:Upwork asking me for a $12.5k refund as the client was us... by TuringNYC on Sunday January 09, 2022 @11:58AM (#29865030)
>> I don't think any responsible bank would let you withdraw using just an account number.

That is literally how checking works in the united states. You can withdraw money from a bank account if you have a routing number and bank account number and "permission." The permission could be a signed check, it could be an auto-pay ACH you set up by handing a paper form to someone, it could be a web-form you signed without looking over the fine-print.

Most extractive companies (e.g., gyms, verizon) have so many fine print and so many lawyers that they can literally take anything from you without recourse. You'd spend tens of thousands in lawyer fees without getting the money back. You could go to the attorney general's office for your state. Good luck with that, unless its a common issue, you just have to eat the cost as part of being American.

Or it could be nothing. In this case, its still on you to figure it out and get the money back in time.

Re:Upwork asking me for a $12.5k refund as the client was us... by KennyBlanken on Sunday January 09, 2022 @01:09PM (#29865789)
My state prohibits gyms from requiring ACH exactly to prevent this sort of abuse. It doesn't stop them from trying, or structuring their fees.

The gym industry is very predatory and it needs far more regulation.

It should be noted that in the US, some banks will allow you to request a default ACH block/lock on your account, and I highly encourage you to ask for such.

Re:Upwork asking me for a $12.5k refund as the client was us... by jokethrowaway on Sunday January 09, 2022 @02:42PM (#29866650)
That's not only a States thing. Direct debit works similarly in Europe.

That said I haven't heard of companies or fraudsters abusing it

Re:Upwork asking me for a $12.5k refund as the client was us... by Symbiote on Sunday January 09, 2022 @03:58PM (#29867264)
Direct Debit in Europe has strong guarantees in favour of the customer, e.g. reversing charges.

"A no-questions-asked, fast and simple Refund procedure available within eight weeks of the debit date."

Within 8 weeks of the charge, you just phone (or otherwise) your bank and ask them to undo the charge.

Re:Upwork asking me for a $12.5k refund as the client was us... by CRConrad on Sunday January 09, 2022 @08:22PM (#29869425)
> That's not only a States thing. Direct debit works similarly in Europe.

Maybe it still works that way in some parts of Europe, but in others it has been changed to work differently, or doesn't exist anymore and has been replaced by other systems, depending on how you want to put it.

Re:Upwork asking me for a $12.5k refund as the client was us... by gruez on Sunday January 09, 2022 @11:44AM (#29864866)
>I don't think any responsible bank would let you withdraw using just an account number

What do you think a check is? It's a piece of paper with your account number, who to pay, and how much. There's a signature field, but it's not checked too closely (I don't think my bank even asked for a signature sample when opening my account) and signatures are trivial to forge.

Re:Upwork asking me for a $12.5k refund as the client was us... by chrisseaton on Sunday January 09, 2022 @11:47AM (#29864914)
> What do you think a check is?

My bank doesn't give me a cheque book any more - haven't see a person use a cheque in about a decade. I can't believe they'd let someone cash a random cheque with no authorisation.

Re:Upwork asking me for a $12.5k refund as the client was us... by kylebyproxy on Sunday January 09, 2022 @12:03PM (#29865097)
Just guessing by "cheque", are you outside the US? The checking system & ACH might be more of a US-centric phenomenon. It's been busted forever, but it's just how we do things around here.
Re:Upwork asking me for a $12.5k refund as the client was us... by CRConrad on Sunday January 09, 2022 @08:24PM (#29869440)
> It's been busted forever, but it's just how we do things around here.

Which is why the rest of the developed world wonders: So why don't you stop that and catch up to, say, the 1990s?

Re:Upwork asking me for a $12.5k refund as the client was us... by easton on Sunday January 09, 2022 @12:03PM (#29865100)
I do that when people send me money for birthdays once a year. Stick the check in the atm, i get money and the person wasn’t asked.
Re:Upwork asking me for a $12.5k refund as the client was us... by greenyoda on Sunday January 09, 2022 @04:21PM (#29867436)
My bank allows me to deposit a check just by photographing it with their smartphone app. No more visits to ATMs needed.
Re:Upwork asking me for a $12.5k refund as the client was us... by kylecordes on Sunday January 09, 2022 @11:49AM (#29864937)
This is every bank in the United States.

Our payment infrastructure ... has some legacy features.

Re:Upwork asking me for a $12.5k refund as the client was us... by sumedh on Sunday January 09, 2022 @05:06PM (#29867803)
> I don't think any responsible bank would let you withdraw using just an account number.

It happens in Australia as, just fill up a direct debit form which has the client's name, account number and sign.

Re:Upwork asking me for a $12.5k refund as the client was us... by worthless-trash on Sunday January 09, 2022 @08:04PM (#29869305)
Are you talking about the paper forms you find at banks, because they dont work that way.
Re:Upwork asking me for a $12.5k refund as the client was us... by sumedh on Sunday January 09, 2022 @08:34PM (#29869519)
I got the form from the rental agency which directly debits from my bank account for the rent.
Re:Upwork asking me for a $12.5k refund as the client was us... by jjk166 on Monday January 10, 2022 @11:16AM (#29877041)
Honestly it's absurd that that we have two distinct numbers (account and routing) but you always use both, they don't change, and they are good for both deposits and withdrawals. It would be so easy to only require an account number for deposits and to have a unique routing number for each withdrawal. Maybe for convenience you have some fraction of your assigned routing numbers be good for repeat withdrawals but only for the amount and frequency specified for the first instance. Thus you can hand out your bank account number to anyone without concern, and they can give you money easily, but only those who you legitimately desire to pay can take money from you and their opportunity for abuse is limited, and all the infrastructure remains relatively unchanged.
Re:Upwork asking me for a $12.5k refund as the client was us... by worthless-trash on Sunday January 09, 2022 @08:02PM (#29869292)
This is not the case in the rest of the world.
[dead]
Re:Upwork asking me for a $12.5k refund as the client was us... by jdkenney on Sunday January 09, 2022 @12:25PM (#29865326)
It’s the same in Canada. I had to setup direct withdrawal for a strata (condo) fee by visiting my strata’s bank with a “blank cheque” (print out of a .png from my own bank’s website, trivially forged). The teller had already set up the monthly withdrawal before I reminded her she forgot to even check my ID!

It gets worse too - once I moved and wanted the withdrawals to stop, my own bank claimed there was no way they could stop them, only the withdrawing bank could cancel it. Of course I wasn’t a signer on the strata account as I was no longer a resident, so was completely reliant on them to stop.

Legacy features doesn’t even begin cover it. Those people that keep all their money under their mattress aren’t quite as insane as you might think.

Re:Upwork asking me for a $12.5k refund as the client was us... by lostlogin on Sunday January 09, 2022 @11:37AM (#29864795)
No, you can do it in New Zealand too. I’m so weirded out by it that I just pay these things manually, so have never actually filled in the form that allows it.
Re:Upwork asking me for a $12.5k refund as the client was us... by KennyBlanken on Sunday January 09, 2022 @01:15PM (#29865846)
It is; the US banking system is a mess. Everything clears through the fed, believe it or not.

There are two things you can do, however: one is request your bank set a default ACH block, and the other is to create a sub/second account from which you do all your ACH transfers for utilities and whatnot. It's a bit of an extra hassle (unless your bank allows for scheduling automatic transfers; many do) but it assures that stuff like can't happen. I've done it for a business that took paypal payments, specifically to stop paypal from being able to yoink back funds a month or two later. Within hours of a payment coming in, I'd transfer it out of the ACH-linked account into the business's main account.

Re:Upwork asking me for a $12.5k refund as the client was us... by commandlinefan on Sunday January 09, 2022 @12:49PM (#29865600)
> fucking crazy

It’s true though. This was essentially the plot of “catch me if you can”.

Re:Upwork asking me for a $12.5k refund as the client was us... by ars on Sunday January 09, 2022 @12:41PM (#29865509)
It's a carryover from before the internet. It still exists because it's still used.

You might enjoy looking at how things were done before the internet existed, because all the stuff that you do with the internet also was done before just in a different way.

Re:Upwork asking me for a $12.5k refund as the client was us... by emteycz on Sunday January 09, 2022 @11:30AM (#29864732)
There is a similar thing in EU but it's very regulated (though all processes are very lengthy and paper-heavy) and used for paying utilities etc, not gym.
Re:Upwork asking me for a $12.5k refund as the client was us... by midasuni on Sunday January 09, 2022 @01:01PM (#29865719)
I assume checks in the USA have the equivalent of sort code and account number printed on them (as well as name of the account holder) like they used to in the U.K.?
Re:Upwork asking me for a $12.5k refund as the client was us... by kube-system on Sunday January 09, 2022 @01:26PM (#29865940)
Checks in the US have two numbers; the number that identifies the bank, and the account number. That’s all you need to transfer money between bank accounts in the US.
Re:Upwork asking me for a $12.5k refund as the client was us... by nojito on Sunday January 09, 2022 @10:23AM (#29864001)
You should be funneling income into a separate account and moving it elsewhere after.
Re:Upwork asking me for a $12.5k refund as the client was us... by 41b696ef1113 on Sunday January 09, 2022 @01:10PM (#29865795)
I do this as well.

This reminds me to look into a long standing request of mine. I want Chase to give me an account that has no external bank access allowed. Money can only be moved into/out of it from the other Chase account under my ownership. My immediate look a few years ago did not reveal any built in way to make this possible.

Re:Upwork asking me for a $12.5k refund as the client was us... by ChrisMarshallNY on Sunday January 09, 2022 @11:29AM (#29864709)
I have a friend that is extremely wealthy. He can pretty much buy whatever he wants.

He does this all the time. He has a "cannon fodder" bank account that gets just enough for the expected payments.

Re:Upwork asking me for a $12.5k refund as the client was us... by Tijdreiziger on Sunday January 09, 2022 @11:18AM (#29864570)
> but there's no chargeback for direct-to-bank withdrawals.

This isn't correct within SEPA (the Single Euro Payments Area). You do need to issue the chargeback within 8 weeks, though. [1]

[1] https://stripe.com/docs/payments/sepa-debit#disputed-payment...

Re:Upwork asking me for a $12.5k refund as the client was us... by literallycancer on Sunday January 09, 2022 @08:01PM (#29869290)
If the transaction was unauthorised (i.e. the collection does not relate to the signed mandate), the payer can ask for a refund up to 13 months after the direct debit.
Re:Upwork asking me for a $12.5k refund as the client was us... by runarberg on Sunday January 09, 2022 @12:44PM (#29865545)
Is this advice really practical. Where I come from my social identity number is public and not a secret, and my bank info is something we hand out all the time if we want someone to transfer to our account (as it is designed for).

Moving to America and finding out that these two are your top secrets certainly seemed odd at first, but then I found out that no matter what you are doing you always have to give out your at least your SSN, but also your date of birth and sometimes your banking info.

The amount of times you need to give out information which is supposed to be private is so often that for any normal person it is unreasonable to assume they know when their not. That is, there are so many situations where you are unable to refuse handing out this information, that when the time comes where the right thing to do would be to not give out the information, you won’t know it.

This system seems optimized for scams.

Re:Upwork asking me for a $12.5k refund as the client was us... by idiot900 on Sunday January 09, 2022 @10:31AM (#29864072)
It's easy enough to use one of the various online banks to establish a separate bank account for Paypal and the like.