> a relative of mine who got a call from "their bank security" and then were directed to install a "security check app" (remote control tool), and change their

> a relative of mine who got a call from "their bank security" and then were directed to install a "security check app" (remote control tool), and change their password in the banking app Presumably you want their money to be returned, but would you want the same if it was physical thieves pretending to be the alarm/security company that went in to "repair" the physical safe and made off with all its valuables? Would you still want the money to be returned (ultimately subsidised by all other customers of the bank or the taxpayer) if someone physically withdraws all their money in cash and hands it over to someone who pretends to be a bank employee and has a convincing name tag? Looking at it from the bank's perspective, the user willingly delegated their identity to the scammer by voluntarily handing over control of their authentication instrument. There is not much the bank can do in this case that wouldn't also hinder legitimate usage - this may have very well been a legitimate transaction for buying a car/house deposit/etc. FYI, there is recourse against authorised push payment fraud, but it's a goodwill scheme that most banks participate in as opposed to a legally mandated feature. Nevertheless, it's worth trying out.