Customers voice concerns with BMO security measures after scammers gain access to their accounts
Several customers with the Bank of Montreal are raising red flags about what they call inadequate security measures within the bank's online banking infrastructure.
CTV News has heard directly from four individuals who say they, or one of their family members, have had money stripped from their accounts and sent overseas through global money transfers.
- Sign up now for daily CTV News Ottawa newsletters
- The information you need to know, sent directly to you: Download the CTV News App
For Ottawa resident Katya Feder, a brief conversation over the phone in April 2023 with a fraudster impersonating a BMO employee cost her $14,500.
"I was completely shocked. Flabbergasted. I mean, I was in disbelief really," she told CTV News.
Feder was told there was a suspicious transaction to purchase cryptocurrency from her account and the bank wanted to confirm whether it was a legitimate.
"I said OK, great! They are keeping on top of things at the bank. Wonderful. Then she said 'we're just going to verify your identity, we're just going to send you a verification code.'"
Feder repeated the code to the woman on the phone and just like that, her account was compromised.
Ottawa resident Katya Feder says she was called by someone claiming to be a BMO employee but after giving the caller a one-time passcode that was sent to her during the call, her bank account was compromised and thousands of dollars were transferred out of the country. (Dave Charbonneau/CTV News Ottawa)
In a statement to CTV News, BMO says it "encourages customers to be diligent in protecting their online and mobile credentials, to sign up for BMO Alerts to monitor their account for suspicious transaction activity, to frequently change their password or PIN and to never disclose passwords and One-Time- Passcodes.
"In the normal course, when a customer receives a one-time passcode, it is accompanied by the following disclosure: 'Warning: this code grants access to your accounts. Calls to request it may be a scam. If called, hang up and call the number on BMO card.'"
Feder says she received some kind of a disclaimer, but says she does not remember seeing the same disclaimer shown above. She added that she was already convinced she was on the phone with a bank representative.
A few days after that phone call, Feder came to learn that her money had been pulled from her account and sent to the United Kingdom in one large lump-sum global money transfer.
She reported the situation to BMO and was told the bank was launching an investigation, but months later, she has not seen any form of compensation, nor has she received any information about how the criminals were able to access her account so easily.
"In all my 40 years banking at BMO, and using the same bank account, I have never once used a global money transfer," she explained.
"I didn't even know you could do global money transfers, so I was just staring at it in shock really."
Scam victims form WhatsApp group
Feder is not alone. She tells CTV News there is a WhatsApp group with roughly 20 others who have recently fallen prey to fraudulent activity resulting in the loss of thousands of dollars. All of them are BMO customers.
"It was just created two months ago and it's growing and people have various stories of fraud that occurred through their bank in different ways as well and they're all with BMO," she said.
Laurie Johnson's 81 year-old mother is one of those victims. She is her mother's power of attorney and has taken on the ever-frustrating task of trying to recoup $15,000 that was stolen on Oct. 13, 2023.
Johnson says her mother's experience is essentially a carbon copy of what happened to Feder.
Laurie Johnson said scammers stole $15,000 from her mother's BMO bank account using a one-time passcode scam. (Dave Charbonneau/CTV News Ottawa)
Her mother received a one-time passcode from someone claiming to be a bank employee.
When she received the code and provided it to the scammer, the fraudster gained access to her account, and sent $15,000 overseas. One difference between Feder's situation and Johnson's, in this case, the money was sent to Bangladesh.
"She has never, and I have never, done a global money transfer," Johnson said.
"Would they not flag that and make a phone call or just stop it and try to find out if that was in fact made by the client? It just seems like it's too easy for that to happen," she said.
"It's extremely frustrating. She has been a customer with the Bank of Montreal for 60 years and I have been as well. You would think with all of the profits they report, that they would be able to help out their customers."
Then there's the story of Christine and Kevin Avey of Norwich, Ont., who were also taken for $15,000.
Christine Avey says her husband Kevin clicked on the BMO online banking website, which he had bookmarked on his web browser. When he was on the site, he was asked to confirm his identity by submitting a one-time passcode. He followed that step, but Avey says he was still unable to log in.
He retried a few more times before giving up and going to bed to deal with it in the morning.
When he logged in the next day, $15,000 had been taken from an account the couple had never withdrawn any money from. The money was sent out of the country.
"I had never ever done an e-transfer, let alone a global transfer. I had only made deposits into this account and this large amount of a transaction was allowed to go through without even notifying us or just not allowing the transaction to be completed. This transaction is so unusual to my banking habits," said Christine Avey in an email sent to CTV News.
"We had never given anyone our password at all and they still blamed us. BMO explained that if we did not give it to anyone then we did not take reasonable care in protecting our password.
"This seems to be the standard line BMO give to their customers instead of the BMO implementing stronger security measures or perhaps a smaller limit allowed on a global transfers."
After bringing up the issue with their local branch manager, the Aveys were sent $7,500 to help ease some of their loss. However, this is a rarity. The branch manager told them this was done as an act of 'good faith', but it is not the bank's policy.
Customers left with more questions
Debbie Sammit of Orillia, Ont., says she has spent over a year fighting to get her money back after scammers stole $3,000 from her BMO account.
What's unique in Sammit's case is that she claims to never have received any one-time passcodes and never used any public Wi-Fi, which has left her wondering how someone was able to lift money from her account.
She was hoping to get answers from BMO when she reported the incident and was told a fraud investigation was launched, but she is still left with no information on how her account was accessed.
The agreements signed by customers when opening up a common bank account state that the owner of the account must keep all account information and codes confidential.
BMO has told the impacted customers that they will not receive any kind of refund, claiming the account holders failed to safeguard their personal information and the bank is not responsible for the their loss.
CTVNews.ca Top Stories
More than 115 cases of eye damage reported in Ontario after solar eclipse
More than 115 people who viewed the solar eclipse in Ontario earlier this month experienced eye damage after the event, according to eye doctors in the province.
Toxic testing standoff: Family leaves house over air quality
A Sherwood Park family says their new house is uninhabitable. The McNaughton's say they were forced to leave the house after living there for only a week because contaminants inside made it difficult to breathe.
Decoy bear used to catch man who illegally killed a grizzly, B.C. conservation officers say
A man has been handed a lengthy hunting ban and fined thousands of dollars for illegally killing a grizzly bear, B.C. conservation officers say.
B.C. seeks ban on public drug use, dialing back decriminalization
The B.C. NDP has asked the federal government to recriminalize public drug use, marking a major shift in the province's approach to addressing the deadly overdose crisis.
OPP responds to apparent video of officer supporting anti-Trudeau government protestors
The Ontario Provincial Police (OPP) says it's investigating an interaction between a uniformed officer and anti-Trudeau government protestors after a video circulated on social media.
An emergency slide falls off a Delta Air Lines plane, forcing pilots to return to JFK in New York
An emergency slide fell off a Delta Air Lines jetliner shortly after takeoff Friday from New York, and pilots who felt a vibration in the plane circled back to land safely at JFK Airport.
Sophie Gregoire Trudeau on navigating post-political life, co-parenting and freedom
Sophie Gregoire Trudeau says there is 'still so much love' between her and Prime Minister Justin Trudeau, as they navigate their post-separation relationship co-parenting their three children.
Last letters of pioneering climber who died on Everest reveal dark side of mountaineering
George Mallory is renowned for being one of the first British mountaineers to attempt to scale the dizzying heights of Mount Everest during the 1920s. Nearly a century later, newly digitized letters shed light on Mallory’s hopes and fears about ascending Everest.
Loud boom in Hamilton caused by propane tank, police say
A loud explosion was heard across Hamilton on Friday after a propane tank was accidentally destroyed and detonated at a local scrap metal yard, police say.