Chase account hacked, fraud department is closed on Sunday

18 points by cs_student_32 ↗ HN
My Chase bank account just got hacked and I'm very confused about the series of events.

I'd like to preface this that as someone working in tech, I'm not an average internet user and don't think I clicked anything shady recently.

All times are EST.

1:30PM Got email on my phone about a new Zelle recipient added to my Chase account.

1.33PM Deleted the unauthorized recipient, changed passwords on Chase and emails. At this point the hacker already submitted a transfer of $2000 - the maximum allowed.

1.34PM Called Chase to report the fraud. Rep told me they need to transfer me to the "fraud department" and told me to hold.

1.40PM Still on hold. Hung up and called again, another rep picked up. They told me the "fraud department" is closed Sunday so only thing I can do is to call again tomorrow Monday. Also they told me the transaction was automatically flagged so it didn't go through.

I have so many questions:

1) Why is Chase fraud department closed on Sunday? I guess there's a reason the hacker strikes on this specific day.

2) I always get a bunch of notifications (push, email, sms) whenever I sign in from a new device. Assuming the hacker logs in from their device, I didn't get any notification at all. How is this possible?

3) Looking at "Device access history" on Chase security page, I don't see any unrecognized device. But it shows a login at 1.29PM from my home computer. But at that time my computer is off. This is the biggest mystery and kind of relates to question 2) above: was the attack carried out on my own home computer (so it's not a new log in so I didn't get notifications), but it was off - how is this possible?

To be sure, I checked the computer event log, and Chrome history, none shows any activity at 1.29PM. So I'm not even sure the activity at 1.29PM that Chase report is accurate, but it does match up with the unauthorized access at 1.30PM.

I'll call them again tomorrow but at this time, I'm very very confused.

10 comments

[ 2.9 ms ] story [ 32.8 ms ] thread
This doesn't really help you now (sorry), but maybe it will help others in Germany in your situation.

In Germany, there's a 24/7 bank-independent hotline (116 116) you can call if one of your cards gets stolen/lost or if you suspect problems with online banking. Something similar would certainly be useful for other countries as well.

Could it be a family member/spouse/bf/gf ? If I see any activity in my account, I always call my wife first in case.
Nope, I don't share my account with anyone, nor my computer for that matter.
Sounds like cookie theft. Unfortunately there's no practical way for sites to bind a device identifier cookie to a specific device, so your actual machine and a different machine to which your cookie jar has been exfiltrated to can't be reliably distinguished.

As for how your cookies were stolen, the best bets are either malware or a dodgy browser extension. That's also how they had your password. If you changed the password from the infected machine rather than a different one, there's a good chance the attacker has the new one as well.

Are you sure you interacted with a legit Chase website and phone number?

Your post didn't specify how you did those things, so just making sure. A lot of phishing/spear phishing attacks work best because their victim is in a state of panic and not thinking clearly.

They serve up something believable—perhaps interactive—based on whatever data they have on you, and then get more information in the process.

I was given a fraud hotline # when I had problems. The people at this number were very helpful: 800-955-9060. If that doesn't work, tweet about it. Companies hate that and in fact, that's how I solved my problem.
Yes the Chase fraud hotline is definitely open on Sunday.
My account was hacked and I lost almost everything $120,000 I have saved over the years don't know what to do until I found a legit hacker who helped me recover a lot of money in 3 days it was a surprise to me because I do not believe that one can hack money from account here is the contact of the best hacker in the world I call him GODS of hackers contact him here= hack.truth77@gmail.com