Found an error?
Report now
With a clever trick, a Twint user lost a large sum of money in a very short time.
MoneyToday
One careless second, one click on the wrong link and 20,000 francs are gone. For a woman from Basel, this nightmare has become reality. And the bank doesn't want to know anything at first.
The incident began on the classified ads platform Tutti.ch. A woman from Basel wanted to sell a child's toy when fraudsters contacted her. They gained access to her Twint account via a manipulated link that led to a fake portal. Within seconds, the perpetrators took control by changing the access code. The woman was powerless from then on.
What followed was a meticulously planned series of debits. Within half an hour, around 20,000 francs were debited from various of her accounts. The perpetrators acted systematically, making a total of 70 debits, almost all for the same amount of CHF 250. A pattern that should have set alarm bells ringing.
But despite the conspicuous transaction pattern, Postfinance's security system remained silent. The customer contacted her bank to find out how such an incident could have gone unnoticed. The answer was sobering: she had passed on her access data and was therefore to blame herself.
This response from the bank is exemplary of a growing problem. Financial institutions often blame customers for phishing cases. They invoke the account holder's duty of care to protect their sensitive data. But the question of why a security system does not react to such a debit pattern remains unanswered.
In view of the fact that phishing cases in the classifieds sector have increased fivefold within a year, the further development of security systems does not seem to be keeping pace with the criminal creativity of the perpetrators.
It was only when the SRF consumer magazine "Espresso" took up the case and followed up with Postfinance that things started to move. The editorial team asked the legitimate question of how such a conspicuous direct debit pattern could go unnoticed. The bank then promised to look into the case again.
The woman from Basel was finally able to reach an agreement with Postfinance and will get some of the stolen money back. She is not allowed to disclose the amount. The bank itself is keeping a low profile in its statement, but points out that it is constantly developing its security systems. The findings from fraud attempts are used to optimize the systems.
