Live data from Hacker News

Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

news.ycombinator.com

11–20 of 48 posts

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#11
post #4

apply for a job with the bank

Well, I don't really want to work there. And I wouldn't be able to disclose the info simply by applying, I'm sure. The real question is - how can I get the higher ups attention? Or would I be better off going public with it, given the private disclosure didn't work out?

Also, stop doing anything that involves creating money from thin air. In today's world, that could get you sent to prison.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#12

Earlier quoted context omitted.

Well, I don't really want to work there. And I wouldn't be able to disclose the info simply by applying, I'm sure. The real question is - how can I get the higher ups attention? Or would I be better off going public with it, given the private disclosure didn't work out?

When I worked at a big company, one thing that always got everyone's attention was when the CEO received written letters from his customers. It's a very slow way of going about airing grievances, but it might work the same way. The CEO was notified and every letter was responded to.

Similar to the LinkedIn[1] idea - I like it! Nice, clever and convenient :) Thanks

[1] https://news.ycombinator.com/item?id=11772336

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#13
post #3

Document your attempts to alert the bank. You should have proof that you contacted them about it. Don't use the loophole obviously. Definitely switch banks.

Yep, good idea.

I'm documenting everything I can think of. Tried the loophole three times - once inadvertently, a second time to try a different approach and a third time on a different account. Told the low-level techs all about that, they didn't seem too concerned about le ~0.32$ I created, but still being careful.

I'm documenting everyone I talk to as well - there is never any case file # though. Are there any other things you think I should document?

As for switching banks - definitely will. This is realllllly bad.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#15

Earlier quoted context omitted.

Well, I don't really want to work there. And I wouldn't be able to disclose the info simply by applying, I'm sure. The real question is - how can I get the higher ups attention? Or would I be better off going public with it, given the private disclosure didn't work out?

Also, stop doing anything that involves creating money from thin air. In today's world, that could get you sent to prison.

Hah! Yeah. The last time I did it was on the phone after a low-level tech from the bank asked me to do it. I have her name and employee number, in case anything happens. But yes, definitely.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#16
post #6

You've tried to disclose and they made it impossible. Time to post it on Twitter and cc @troyhunt.

Hah! Yeah, that's definitely something I'll try if my latest inquiries don't go through! :) Thanks!

Good luck! I respect that you're making the effort to do the right thing, even though I don't think the bank deserves it.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#18
post #8

I use LinkedIn when I have to penetrate a bureaucracy such as this. Nothing gets action faster when a VP or higher get a personal email / phone call regarding something like this. Step 1: Troll linkedin to find these people in positions of real power. Step 2: If they are easy to reach via email or on the platform, try that. Failing that, call their HQ and work the phones until you get to them. Step 3: Win.

I think you mean "trawl," not "troll." :-)

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#19
Call the bank's regional HQs. Ask to speak with the manager of security. Report the instance. Ask for his/her name and number. Tell the individual you plan to go public with the information in 48 hours if there's no resolution.

The individual will feel a career risk and act accordingly.

Post reply on HN