The fraudster who called Judge asked for his birth date and mother’s maiden name, which Judge shared. But then the fraudster asked him to share a “one-time passcode” — a type of two-step verification — that was texted to his phone.
Judge says he refused to do that, because the message also told him not to share the code with anyone, and said that no one from Scotiabank would ever ask for it.
The fraudster claimed that he stopped the charges from going through and hung up.
But two days later, Judge discovered a charge for $17,900 to Anglia Ruskin University in the U.K. on his statement, and a second for $1,800, supposedly paid to someone by the name of Paula S. Taylor.
“All that the bank has done is accuse [Judge] of either negligence or malice,” said Claudiu Popa, who has 35 years’ experience in cybersecurity and wrote The Canadian Cyberfraud Handbook.
I can believe this. Scotiabank is fucking horrible. I deposited a business cheque that was made out to a numbered company and the name was off by one digit (5 instead of 6). Holee goddamn fuck, it took 6 months and a convo with the RCMP, who were fucking mad that they were brought in on this bullshit, to get it squared away. The company that made out the cheque wasn’t about to reissue the cheque until it was figured out, so I got to finance that job for an extra half year out of my pocket.
Fuck Scotiabank, they’re goddamn malicious fuckwits.