Yorkshire Bank Savings Account theft

Mcchan

Hi Just thought I would make it aware for everyone here that I have had over £11K taken from my Yorkshire Bank savings accounts over the last 48 hours. Currently being investigated by their fraud dept. They suspect these multiple transactions in sums of £400 to £500 were taken via internet banking, not my mobile banking app. Maybe this is a one off scam, but thought I would share this in case anyone else has been affected. I’m very careful with my online security so no idea how the security could have been breached. Very worrying!

[Deleted User]

Have you logged in to any fraudulent websites off the back of an email or text message?

Mcchan

No, I’ve not logged into any fraudulent websites off the back of an email or text I was asked the same question by my bank too.

Terry_Towelling

Mcchan wrote: »

Hi Just thought I would make it aware for everyone here that I have had over £11K taken from my Yorkshire Bank savings accounts over the last 48 hours. Currently being investigated by their fraud dept. They suspect these multiple transactions in sums of £400 to £500 were taken via internet banking, not my mobile banking app. Maybe this is a one off scam, but thought I would share this in case anyone else has been affected. I’m very careful with my online security so no idea how the security could have been breached. Very worrying!

If what you are saying is true, it isn't a scam, per se, it is a serious issue for you and the safeguarding of your banking security details - someone else must have them. I don't have a YB account so I don't know how the log-in process works, nor the setting up of payees, nor whether text messages are sent out when payees are set up, nor whether codes are sent to the account holder's phone before certain actions can be performed.

There must be a record of the payments in your account and that must show where the payments went.

Can anyone with a YB account enlighten us as to the security measures in place concerning payees and payments?

Good luck getting the money back. Make sure you change your passwords for everything and check your PC for anything undesirable.

soulsaver

FTAOD, you DO mean Yorkshire Bank.. Not Yorkshire Building Society?

PRAISETHESUN

It won't be a scam since that usually involves someone manipulating you to give them your money. This sounds more serious in that someone has gained access to your banking credentials. If you haven't already, scan your PC/device for malware and then change your passwords, not just for your banking but for any other online service you use. Keep different passwords so if one account is compromised in future, then nothing else is affected. Consider activating two factor authentication (2FA) for every service that supports it.

Let the bank do its work and investigate - getting angry or complaining excessively isn't really going to help. I'm not privy to the YB login process so I don't know if it requires 2FA or not (ie. a SMS code or a code generator, etc), but it definitely sounds suspicious. Would definately be interested to hear from someone with experience of the login process

Mcchan

Yes, there is the same code reference listed on each transaction, could be an encrypted code I don’t know. I did not receive any alerts from Yorkshire Bank notifying me of this activity on my accounts, again very worrying and I have informed them of my concern about this. Thanks for advice on changing passwords etc online. Spent all day going through everything. No one knows my security info for my banking-only me.

Mcchan

Yorkshire Bank not Yorkshire Building Society

Mcchan

Thank you for your advice, it’s really helpful. I’m just keeping calm and hoping it will get resolved without too much hassle. As i last went online for internet banking last year, I don’t recall any sms text confirmations of logins or transaction confirmations. I have been using the mobile banking app.

colsten

Setting up a payee at YB requires a security code, generated either through their calculator-type security code generator, or through their mobile app. YB's calculator-thingy is not interchangeable with those used by Nationwide, Barclays etc.

So either payments were made to one or more already existing payees, or the fraudster had all the personal information required to use the calculator-thingy, or the app, to set up one or more new payees.

Or the fraudster used the debit card issued for the account, or a clone of it. In that case, the fraudster would also have known the CVV and/or the PIN of the debit card.

It would be interesting to know what method(s) the fraudsters used (I am sure the bank know it)

polymaff

What were the savings accounts involved? I see that CYB do quite a range of saving accounts.