Live data from Hacker News

Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

news.ycombinator.com

1–10 of 48 posts

Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#1
Hey guys,

First, excuse the messy title - I was limited to 80 characters.

I recently found a way to create money out of thin air through a loophole in my bank's current banking portal. I tried reporting it a few times, but every time I am stonewalled by a low-level employee, telling me they will call me back later in the day, which never ends up happening. The furthest I've come is to call their abuse department, found on their ARIN records, who seemed to take it seriously, but I ended up going full circle - back to the low level-guys.

I discovered it inadvertently and, technically, defrauded them of ~0.32 US$ using legitimate transactions that the bank's software should have handled differently. Pennies, but still.

I also confirmed the issue with other accounts and other transactions - my account is not a glitch in the system.

What is the best course of action? How would you get in touch with security officials at a big bank?

I mostly don't want to get caught or charged with (attempted?) fraud over $0.32.

I have also spent quite a few hours trying to disclose it, unsuccessfully. What would be the best way to get some of this time spent trying to do things right compensated?

Thanks!

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#5
post #4

apply for a job with the bank

Well, I don't really want to work there. And I wouldn't be able to disclose the info simply by applying, I'm sure.

The real question is - how can I get the higher ups attention? Or would I be better off going public with it, given the private disclosure didn't work out?

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#8
I use LinkedIn when I have to penetrate a bureaucracy such as this.

Nothing gets action faster when a VP or higher get a personal email / phone call regarding something like this.

Step 1: Troll linkedin to find these people in positions of real power.

Step 2: If they are easy to reach via email or on the platform, try that. Failing that, call their HQ and work the phones until you get to them.

Step 3: Win.

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#9
post #8

I use LinkedIn when I have to penetrate a bureaucracy such as this. Nothing gets action faster when a VP or higher get a personal email / phone call regarding something like this. Step 1: Troll linkedin to find these people in positions of real power. Step 2: If they are easy to reach via email or on the platform, try that. Failing that, call their HQ and work the phones until you get to them. Step 3: Win.

Actually a pretty good idea! Thanks!

Re: Ask HN: Found a way to fraud my bank thru a loophole, how to disclose properly?

#10
post #4

apply for a job with the bank

Well, I don't really want to work there. And I wouldn't be able to disclose the info simply by applying, I'm sure. The real question is - how can I get the higher ups attention? Or would I be better off going public with it, given the private disclosure didn't work out?

When I worked at a big company, one thing that always got everyone's attention was when the CEO received written letters from his customers. It's a very slow way of going about airing grievances, but it might work the same way. The CEO was notified and every letter was responded to.
Post reply on HN