News for hackers. Stuff that matters.
Re:Tell HN: Instagram demands I send a picture of myself to ... by acaloiar on Monday June 20, 2022 @04:30PM (#31815491)
In a somewhat related response to your question: "Is this the type of "progress" happening at FAANG?"

I recently had a similar experience with Robinhood. I found that if you use their "Logout all devices" feature, you have to re-verify your account with them. They allow you to deposit and place trades, but as soon as you attempt a withdrawal, they notify you that you have to re-verify your identity with them. After two weeks and three denied attempts to verify my identity, I got the SEC involved. Within minutes of the SEC notifying me that they contacted Robinhood on my behalf, my account was verified without further action from me.

I withdrew all funds, closed all positions, and deactivated the account out of principle. It shouldn't take SEC action to get access to your funds. And Robinhood shouldn't notify their users that identity verification is required only when a withdrawal is attempted.

Robinhood obviously isn't FAANG, but apparently this is the progress in tech more generally.

Re:Tell HN: Instagram demands I send a picture of myself to ... by raunak on Monday June 20, 2022 @06:18PM (#31816883)
Any guidance on the SEC link? Robinhood is currently royally boning me in the exact same way, and I want to get my money out as soon as possible. I already threatened to get the SEC involved a week ago, and still no response, so now time to actually do it. Would love a pointer in the right direction.
Re:Tell HN: Instagram demands I send a picture of myself to ... by acaloiar on Monday June 20, 2022 @10:12PM (#31818989)
I'm thrilled to share tips about the process because despite reaching resolution, I think Robinhood has more to learn about how to appropriately handle this situation. There was a point in my process when there were 5 business-days of radio silence from support. IMO a support request from a client requesting access to their brokerage cash should be handled most expeditiously.

---

Note: It was difficult to tell as a consumer which government entity was the most appropriate place with which to file a complaint. I will say that I filed both a CFTC "TCR" report and a SEC Investor Complaint form. From the former, I received no additional feedback (roughly three weeks later). From the latter, I received confirmation of the report immediately, and then confirmation of the complaint having been forwarded to Robinhood four days later. Shortly after that second confirmation is when I received a response from Robinhood support that the withdrawal ban on my account had been lifted.

File your report here: https://www.sec.gov/oiea/Complaint.html

Be specific about the action you've taken so far. Include your Robinhood Support request ID(s). Don't be heated or incendiary; simply provide the facts. Knowing Robinhood Support, the facts are sufficient for the SEC to take your complaint seriously.

Good luck.

Re:Tell HN: Instagram demands I send a picture of myself to ... by tristanb on Monday June 20, 2022 @07:39PM (#31817717)
Robinhood is a horrible company. I closed my account a year ago, asked for all my user data to be deleted and I STILL get emails every couple of weeks. I’ve opened tens of tickets to just get them to leave me alone and one year later I’m still nowhere. I’ve never been more pissed off with a company. Build a dam e-mail black list or actually delete my data like I requested.
Re:Tell HN: Instagram demands I send a picture of myself to ... by mauvehaus on Monday June 20, 2022 @08:19PM (#31818073)
I tried to order some fabric from a major, national purveyor of fabric early in the pandemic to make some baby quilts. The experience was not seamless. After they canceled 60% of the order and bungling the shipping on the remainder, I found I could not get unsubscribed from their coupon list.

Turns out, company press releases have live email contacts on them, and if you write a sufficiently fulminant email explaining that you'd like to never again hear from their employer, they'll direct it to somebody who will get you off the email list.

Worth a try?

Re:Tell HN: Instagram demands I send a picture of myself to ... by cfieber on Monday June 20, 2022 @09:44PM (#31818810)
> I tried to order some fabric from a major, national purveyor of fabric early in the pandemic to make some baby quilts. The experience was not seamless.

Pun intended?

Re:Tell HN: Instagram demands I send a picture of myself to ... by mauvehaus on Monday June 20, 2022 @10:19PM (#31819038)
I'm afrayed it was :-)
Re:Tell HN: Instagram demands I send a picture of myself to ... by Aeolun on Tuesday June 21, 2022 @01:39AM (#31820285)
For those wondering like me:

> Fulminant is a medical descriptor for any event or process that occurs suddenly and escalates quickly, and is intense and severe to the point of lethality, i.e., it has an explosive character.

Re:Tell HN: Instagram demands I send a picture of myself to ... by ycuser202263 on Tuesday June 21, 2022 @04:43AM (#31821741)
You can add Facebook to the list. No single point of contact, anywhere, and good luck if something happens and you need to reach them.
Re:Tell HN: Instagram demands I send a picture of myself to ... by tiffanyh on Monday June 20, 2022 @05:07PM (#31815942)
Robinhood is required by regulation to KYC their new account holders. Which typically is accomplished via doc auth.

This is applicable to all financial service companies, in the US at least.

Re:Tell HN: Instagram demands I send a picture of myself to ... by acaloiar on Monday June 20, 2022 @05:19PM (#31816100)
I'm familiar with KYC. KYC is actually the very reason why Robinhood customers should not be required to re-verify their identity because it stipulates that institutions both acquire and retain the identity information of their customers.

With that said, my qualms are not with the fact that I had to re-verify; simply the manner in which it happened.

The fact that they re-requested my identity tells you that this verification process was not in support of their KYC obligation, but likely a fraud-prevention mechanism. Which puts the manner in which it happened entirely within their control from a product perspective.

Re:Tell HN: Instagram demands I send a picture of myself to ... by malux85 on Monday June 20, 2022 @05:19PM (#31816112)
So KYC them when you onboard them, NOT when they try to withdraw.

“Oh no, that might hurt our signup and trading figures?! “

Well, DUH, but anything to fudge the numbers right?!

Maybe if they make withdrawals even more difficult a percentage of users will abandon and then our assets under management numbers look better.

This is exactly what’s happening, stop forgiving the dark pattern behaviour under the guise of compliance.

Re:Tell HN: Instagram demands I send a picture of myself to ... by EVa5I7bHFq9mnYK on Monday June 20, 2022 @06:19PM (#31816889)
That's why you should always start with small amounts, deposit $10, withdraw $10. If it works, repeat with $100 etc. Never keep large amounts there, withdraw as soon as trade is complete.
Re:Tell HN: Instagram demands I send a picture of myself to ... by DakotaR on Monday June 20, 2022 @08:23PM (#31818114)
Alternatively, use a brokerage that's been around for decades and doesn't employ these dark patterns.
Re:Tell HN: Instagram demands I send a picture of myself to ... by abawany on Tuesday June 21, 2022 @01:13AM (#31820153)
I agree, though these can deteriorate too. I've been with Vanguard for a while but was astounded as to how much the site and the customer support had degraded. Kind of worried about them but not enough to take a capital gains hit likely necessary to transfer the funds.
Re:Tell HN: Instagram demands I send a picture of myself to ... by smaccona on Tuesday June 21, 2022 @08:19AM (#31822974)
You can probably do an in-kind transfer (see [0] and the 4th FAQ at [1]) to another brokerage with no capital gains hit because you’re not actually selling the asset.

[0] https://finance.yahoo.com/news/kind-transfer-134617847.html [1] https://investor.vanguard.com/account-transfer/other-transfe...

Re:Tell HN: Instagram demands I send a picture of myself to ... by aarbor989 on Tuesday June 21, 2022 @08:06AM (#31822920)
You can do an in-kind transfer to move the assets over to a new firm without having to sell first. Definitely works for cash, stocks, mutual funds, and bonds. Not sure what else you can do it for
Re:Tell HN: Instagram demands I send a picture of myself to ... by heavyset_go on Wednesday June 22, 2022 @06:51PM (#31842907)
You don't need to liquidate and realize capital gains.
Re:Tell HN: Instagram demands I send a picture of myself to ... by heavyset_go on Monday June 20, 2022 @07:11PM (#31817440)
Weird how they let you fund your account and make trades, then, but only have an issue upon withdrawal.
Re:Tell HN: Instagram demands I send a picture of myself to ... by bigiain on Monday June 20, 2022 @10:17PM (#31819022)
If you want to read that in the most favourable light, perhaps that's more AML/CTF regs. You can't be laundering money or funding terrorism until you try and get cash _out_ of your account.

But like others are saying, there's ample evidence that Robinhood are despicable, so they sure as hell don't deserve and favourable interpretations of their trashier policies...

Re:Tell HN: Instagram demands I send a picture of myself to ... by heavyset_go on Wednesday June 22, 2022 @06:48PM (#31842869)
Obfuscating how the money enters the system and is transferred is a crucial part of laundering, so I'd disagree that laundering only happens upon withdrawal.
Re:Tell HN: Instagram demands I send a picture of myself to ... by fragmede on Monday June 20, 2022 @10:55PM (#31819314)
”Weird”. It’s an intentional UX design/friction thing. Hopefully their lawyers signed off on the interpretation of anti-money laundering laws is that they don’t count until the user tries to withdraw money.
Re:Tell HN: Instagram demands I send a picture of myself to ... by heavyset_go on Wednesday June 22, 2022 @06:49PM (#31842880)
Yes, that was the subtext of my choice of words.
Re:Tell HN: Instagram demands I send a picture of myself to ... by karaterobot on Monday June 20, 2022 @11:02PM (#31819362)
Defining this acronym:

> Know Your Customer (KYC) are a set of standards used within the investment and financial services industry to verify customers, their risk profiles, and financial profile.

https://www.investopedia.com/terms/k/knowyourclient.asp

Re:Tell HN: Instagram demands I send a picture of myself to ... by chrismcb on Tuesday June 21, 2022 @12:23AM (#31819848)
Calling KYC a set of standards is a bit if a misnomer. KYC checks are a legal requirement in the banking industry.
Re:Tell HN: Instagram demands I send a picture of myself to ... by r_singh on Monday June 20, 2022 @07:47PM (#31817796)
Since every company is a tech company now, I feel like they’re all inspired by the best (FAANG) and use tech in creative ways to increase their revenue (dark patterns).
Re:Tell HN: Instagram demands I send a picture of myself to ... by stazz1 on Monday June 20, 2022 @08:03PM (#31817947)
Ubiquitous and Best are not synonymous
Re:Tell HN: Instagram demands I send a picture of myself to ... by r_singh on Tuesday June 21, 2022 @12:09PM (#31825594)
Are highest market cap companies synonymous with what most bean counters might consider "best"?

I personally think PE ratios are like score cards for what's best amongst businesses.

Re:Tell HN: Instagram demands I send a picture of myself to ... by tzs on Monday June 20, 2022 @08:38PM (#31818242)
> They allow you to deposit and place trades, but as soon as you attempt a withdrawal, they notify you that you have to re-verify your identity with them.

Do they allow all trades, or only trades involving the newly deposited funds and descendants of such trades?

That might be an interesting approach to trying to lessen the harm of a false positive from their fraud detection. Essentially put a complete activity block on everything currently in the account (money and stocks), but only block withdrawals on things added to the account after the fraud detection hit.

If it turn out to be a false positive then it is still pretty annoying, but at least you get to continue with some activity so you account isn't totally useless while you get reverified.

If it turns out that the account has actually fallen into the hands of a scammer, they can't harm what is already in there and if they put some of their own funds in to try to trade for some reason then that ends up as a gift to you when you get the account back.

Re:Tell HN: Instagram demands I send a picture of myself to ... by acaloiar on Monday June 20, 2022 @10:27PM (#31819090)
I'm not sure if it's possible to make that distinction. Trades are funded by brokerage cash. From the customer perspective, brokerage cash is a pool of cash available for trading or withdrawal. It may have originated from an ACH, wire, trade liquidation, or a combination of any of those things.

However, I am confident that I funded trades from deposits that were made after the withdrawal ban was put in place. I made multiple deposits over ~8 months in which the withdrawal ban was in effect, and those deposits funded multiple trades. Which means Robinhood is happy to deposit and trade funds from an account in an "unverified" state, but not allow withdrawals. If my account was truly compromised, justifying an unverified state, then I wouldn't want them funding trades from an ACH transfer from a bank account that was added when it was in a verified state.

The policy, whatever it may be, clearly serves Robinhood's purposes and not the customer's.

Re:Tell HN: Instagram demands I send a picture of myself to ... by smsm42 on Monday June 20, 2022 @10:58PM (#31819340)
A lot of banks and other financial institutes now require a lot more identification then before. I remember opening accounts with just my driver's license number or SSN, but now they ask for my photo and so on. Maybe KYC regulations are putting some pressure on them or something. I usually just drop the account if I see too many hurdles - I am fine with having to work to earn my money, but having to work to give my money to somebody is a bit too much for me.
Re:Tell HN: Instagram demands I send a picture of myself to ... by chrismcb on Tuesday June 21, 2022 @12:25AM (#31819857)
KYC is a legal requirement for the banking industry.
Re:Tell HN: Instagram demands I send a picture of myself to ... by smsm42 on Wednesday June 22, 2022 @01:58AM (#31832533)
Yes, there are KYC regulations - but they have been around for a while. And still banks didn't do it in an intrusive manner that some of the newer companies do it.
Re:Tell HN: Instagram demands I send a picture of myself to ... by rtchau on Tuesday June 21, 2022 @08:04AM (#31822905)
In my experience (and the industry I'm in), requiring identity verification upon withdrawal is an anti-money laundering measure, and often one required by legislation rather than company policy.