3 ms·
How do you drain somebody's bank account with deposit information?
by _AzMoo 6y ago
How do you drain somebody's bank account with deposit information?
- evgen 6y agoIt will not stick and is easily reversible, but I am guessing that if I have the info to direct deposit to your account then in the US I also have enough info to generate fake ACH transactions. It really makes no sense to me though because banks are all over check kiting schemes like this and never let you move the money out of the destination account before someone at the originating bank has reversed the transaction.
- xur17 6y agoDeposit information in the US is account number + routing number, which is all that is required to pull funds from an account. Amusingly, this is also the information printed at the bottom of every check you use.
- bad_good_guy 6y agoWow. I don't intend to be inflammatory, but I am continually shocked by how far behind Europe the US appears to be in terms of personal banking and payments.
- miracle2k 6y agoIt is literally the same in Europe, via Stripe: https://qry5s.sse.codesandbox.io/ https://qry5s.sse.codesandbox.io/ Any name Any email address Test account number: DE89370400440532013000
- randoramax 6y agoYou can only PUT money in a bank account knowing the IBAN in Europe. Automatic payments have to be formally authorized first. Europeans give it their ibans without second thoughts, never heard of any such problems as in US.
- miracle2k 6y agoIt is called SEPA Direct Debit. You give people your IBAN, and they can take money from it. You formally have to give your permission of course (the "mandate"), but that is really a pinky promise by businesses that they have it. That there is not wide-spread abuse of this system seems to be because of accountability on who is granted access to this system. I would imagine the situation in the US to be quite similar.
- wil421 6y agoIf someone does this it is pretty serious. The bank would refund a consumer pretty quickly and the FBI would be calling you. It would be harder to get back if they did it to your business account and you didn’t notice.
- djsumdog 6y agoI wrote a post on this years ago: https://battlepenguin.com/tech/the-american-banking-system-is-still-in-the-1990s/ https://battlepenguin.com/tech/the-american-banking-system-i... To be fair, in Australia all I needed to transfer money was your name and account number and it'd appear within 24 hours. Since I've left, I've heard the system is more real time, with funds showing up in seconds. You can pull money from accounts the same way in Australia, but I suspect it's limited by business and there are audits in place to stop and reverse fraud.
- kilbuz 6y agodeposit information == withdrawal information, and consent to withdraw is often contained in the fine print of direct deposit agreements
- DanBC 6y agoThe information you need to deposit money into an account (Name, bank account number, sort code) is almost all you need to withdraw money from an account by setting up direct debits or similar. See for example, Clarkson: https://www.theguardian.com/money/2008/jan/07/personalfinancenews.scamsandfraud https://www.theguardian.com/money/2008/jan/07/personalfinanc...
- chosenbreed37 6y agoThey probably found a way to impersonate them or through some clause buried in the small print...