Internet fraud on my bank account

Daliah

If the transactions used your IP address, it must have been someone who shares your Internet connection. So it is someone you lived with, or someone you stayed with on the day the transactions were made.

jimjames

Daliah said:

If the transactions used your IP address, it must have been someone who shares your Internet connection. So it is someone you lived with, or someone you stayed with on the day the transactions were made.

Not necessarily. It could be that the transactions were carried out on that phone

Sensory

Definitely factory reset your phone. Have you been able to reclaim access to your accounts now?

I know it's extremely distressing, but your life is more important than your savings and though it will take time, the FOS is there to help. Please also talk to your family and friends for support.

• You received a text message. You clicked on a link in that message, which lead you to the page in your screenshots. (I presume you were able to obtain screenshots for us by clicking on the link again to open the page.)
• You received an alert from Apple stating that your iCloud was accessed from another device.
• The password for your email account was changed, which presumably facilitated the changing of passwords to your other online accounts.
• Multiple transactions then occurred over a single night to three online gambling companies.
• These gambling sites were linked to your bank account and money was withdrawn from your bank account.
• Nationwide claims the withdrawals were made from the same IP address as yours.
• Virgin Games believes the transactions on their website weren't conducted by you.

Try your best to establish exactly a timeline of events. Officially complain to Nationwide in writing so they must follow their complaints procedure and provide an appropriate final response (not just 'case closed' whilst ignoring your calls).

1. What happened when you clicked on "Protect your connection"? DON'T click on it again, but try your best to remember what happened, including any information you may have provided (by filling in a form etc.).
2. When did you receive an alert that your iCloud had been accessed from another device, and were you able to access it yourself to check?
3. Who is your email provider? Is it Apple iCloud?
4. What type of transactions were the withdrawals? Direct debit? Debit card? Bank transfer?
5. Ask Nationwide how they ascertained that the IP address used for the fraudulent withdrawals was the same as your own (we know the likely method but you should demand confirmation as this is the basis for their decision to dismiss your claims and terminate relations).
6. What information did you provide to Virgin Games? I assume you don't have access to the Virgin Games account (as it wasn't set up by you), so how were they able to determine that the transactions were fraudulent?

k12479

AskAsk said:

as others have said, it is very difficult to withdraw money from the gambling sites as they only pay it back to the account where the money originates so fraudsters would not be stealing your money and gambling with it.

Presumably you could play games like poker badly, intentionally losing to your accomplices who could then cash out.

Daliah

jimjames said:

Daliah said:

If the transactions used your IP address, it must have been someone who shares your Internet connection. So it is someone you lived with, or someone you stayed with on the day the transactions were made.

Not necessarily. It could be that the transactions were carried out on that phone

Yes, they could have used the OP's phone or another device connected via the same router the OP used. The IP address the bank can see depends on the router, not the device connected to the router, either wireless or wired.

[Deleted User]

If I were you I would reset totally every electronic device you own. I would also make sure your router is set up correctly in regards to wifi password, security standard and you should consider mac address filtering and ask someone to set this up for you. It is possible your wifi connection was intercepted, but highly unlikely with modern standards unless a door was left open and warnings on device were ignored.

Also you need to change all passwords on your online accounts. I'd even consider getting a new mobile number and mobile, and email address for banking purposes only. It is a lot of hassle yes, but 10k worth of hassle no. I don't do this myself, but if you are not tech savvy you should keep banking connections purely separate to be safe. The device, email and number must be used for no other purpose other than banking.

Even if you are tech savvy, it can still happen. I had some 1.5k roughly stolen via fraud payments on two of my accounts this year, on one account on a brand new debit card. 

[Deleted User]

Daliah said:

jimjames said:

Daliah said:

If the transactions used your IP address, it must have been someone who shares your Internet connection. So it is someone you lived with, or someone you stayed with on the day the transactions were made.

Not necessarily. It could be that the transactions were carried out on that phone

Yes, they could have used the OP's phone or another device connected via the same router the OP used. The IP address the bank can see depends on the router, not the device connected to the router, either wireless or wired.

If its a mobile it could be either ISP IP or mobile data IP. iOS 15 on the iPhone now includes technology to hide your IP also, recently released.

jimjames

Thinking about it the only downside of a system restore is that you will then lose all the evidence of the phone being hacked. There may be a benefit in getting the phone checked by an expert beforehand if you need a witness to confirm what was installed on it. That will cost money but it could also be the only way you're able to get the bank to reconsider

Thrugelmir

ianconnelly said:

 I have concrete evidence that my phone has been hacked and have supplied the bank with this and they have completely turned their back on me. 

How did the hacker access your bank account though.  How did they obtain the information, fingerprint, facial recognition to access? 

kaMelo

Is there any way to show the full URL on the warnings you posted?

https://blocker.digital/AppleSecur........    <<<< what follows on here?



More importantly, did you do what they asked in clicking a link and installing a new app? Mobile phones are very secure but if you install an app which potentially gives a third party root access to that device then all bets are off.

IP addresses can be spoofed but they're almost irrelevant, mobile networks still use NAT in some cases so the IP is shared but IMEI is one example of the data logged that can't be spoofed. The app will be authenticated prior to use also. In truth we don't know what other data banks collect via the app but Nationwide are certain it was your phone that performed the money transfers, that's why they've closed the case.