Hacker News Reader

It may come as a surprise you to that the recovery rate for BEC incidents that are not immediately detected is very low and that victims often spend years suing their banks for faulty fraud protection in court for either only a partial settlement or nothing in return.

View on HN

Not only BEC, the recovery rate for ridiculously named authorized push payment fraud fraud (i.e. craigslist car scams) is also very low.

Reg E at least protects consumers from some banking malware, but still does not provide protections for phishing victims (despite new non-binding CFPB guidance)

Having worked in banking for 20 years and knowing how many fraud transactions are reversed, I do indeed find that false information to be surprising.

It's very well documented that less than 20% of BEC losses in the US are recovered.

> The challenge is that most BEC attacks will use bank accounts outside the US. In truth, the IC3 RAT recovered less than 14% of the total US$2.4 billion in BEC losses last year.

https://www.welivesecurity.com/2022/04/26/trouble-bec-how-st...

https://www.ic3.gov/Media/Y2022/PSA220504

Reply on news.ycombinator.com