Banks are failing to properly implement a code designed to protect customers who fall victim to bank transfer scams, a banking watchdog has found.
The Lending Standards Board (LSB), which oversees the code, has written to banks after its latest review found they failed to act on recommendations it made more than a year ago.
Here, we explain how bank transfer fraud works and what more banks can do to protect their customers.
How do bank transfer scams work?
Bank transfer fraud is when people are convinced to transfer money from their bank account to one belonging to a scammer.
One of the most common methods scammers use is to call you and pose as a member of your bank’s fraud team, warning you that you need to move your money to a safe account.
Once you’ve transferred the cash, the scammer disappears. This type of fraud – also known as authorised push payment (APP) fraud – costs victims hundreds of millions of pounds every year.
In May 2019, some of the UK’s biggest banks signed up to a voluntary code, based on the principle that blameless victims should be reimbursed their losses.
But more than two years on, banks are still reluctant to say how many customers they’ve refunded.
Last month, Which? urged the regulator to force banks to be more transparent, and the LSB has now identified further failings in how the code is being implemented.
- Find out more: what to do if you fall victim to an APP scam
‘Systemic failings’ in scam refund processes
In a damning new report, the LSB has raised a host of concerns about how banks are implementing the code.
It says it found ‘systemic failings’ in how banks are applying the guidance, and has written to firms demanding that they take action.
The LSB’s review also concluded that banks have failed to fully address a series of recommendations it raised in its previous report in April 2020.
Emma Lovell, chief executive of the LSB, says: ‘Firms must act immediately to implement the recommendations that were issued to them in the original review and those now raised in the follow up.
‘Timebound action plans are in place and firms are clear on our expectations as governor of the code.’
What more banks could do to help scam victims
1. Banks should be made to publish reimbursement rates
Which? is concerned that banks are only reimbursing scam victims in a small number of cases, and as reimbursement data is anonymous, there is no way of knowing which banks offer the best support to victims, and which need to do better.
In May, we wrote to all major banks signed up to the code urging them to commit to regularly publishing data, but Barclays was the only respondent to agree to do so ‘periodically’.
Which? has asked the Payment Services Regulator (PSR) to order firms to publish this information. In response, it said it would consult on next steps in the coming months.
2. The code should be mandatory
The voluntary code designed to protect blameless fraud victims was launched in 2019, but not all banks have signed up.
Which? has long campaigned for the code to be made mandatory, to offer consumers a greater level of protection and ensure a level paying field.
We believe that a voluntary approach to protecting scam victims isn’t enough, and that banks who fail to sign up to offer protections are exposing their customers to a greater risk of losing life-changing sums of money.
3. Banks should deal with complaints on time
The LSB has expressed concerns about how quickly banks are dealing with complaints from customers who fall victim to APP fraud.
The code states that banks should let you know within 15 business days (or 35 days in ‘exceptional circumstances)’ whether you’re entitled to get your money back under the code.
Some banks are failing to meet this requirement. The LSB also says it has seen ‘little evidence’ of banks providing updates to customers who face delays to their claims, prolonging uncertainty and stress.
4. Banks shouldn’t place unreasonable responsibility on customers
The LSB says banks are placing disproportionate responsibility on their customers.
When looking at decisions published by the Financial Ombudsman (FOS), we can see that some banks are interpreting the code in a way that allows them to avoid reimbursing victims.
For example, we’ve seen instances of banks refusing to refund victims of sophisticated investment scams or fraudulent companies.
In one instance, HSBC refused to refund a customer on the basis they should have checked whether a company was registered at Companies House before sending money.
The FOS described this as ‘a step many reasonable customers would not take’, and ruled that the bank should reimburse the customer in full.
5. Banks must provide more consistent information
The LSB found that many banks are providing incorrect information about timescales and giving poor explanations of how reimbursements work.
In addition, it says there is a ‘clear indication’ that some employees require further training about the code.
It says documentation of the rationale for refusing to reimburse customers was ‘non-existent’ in some cases, and customers were not given an opportunity to address the reasons why they were held liable.
6. Banks should work harder to understand vulnerability
The review found that the identification of customers’ vulnerability and susceptibility to scams was ‘not very well developed’
It says customers faced close questioning when they reported scams, making it difficult to identify any vulnerability.
In a small number of cases, banks did not use evidence of vulnerability when considering reimbursement.
7. Criminal cash could be used to reimburse victims
Finally, the government is considering a proposal from banks to use money from criminals’ frozen bank accounts to refund scam victims.
A YouGov survey of 1,700 people found that such a method could be popular, with three-quarters of respondents in favour.
There are, however, significant concerns about whether the amount frozen in such accounts would be sufficient to reimburse victims.
How to get your money back if you’re a victim of bank transfer fraud
If you think you’ve been scammed, it’s important to contact your bank immediately.
Time is of the essence, as your bank may be able to stop the transaction from going through or recover the money.
You should also contact the bank the money was sent to and provide it with the account number the fraudster gave you.
If your bank is signed up to the code, it should reimburse you the money, as long as you can show you’ve paid attention to warnings it provided before making the transfer, had a reasonable basis for believing that the the person you were paying was genuine, or are considered vulnerable.
If your bank isn’t signed up to the code, you should make a formal complaint after reporting the scam.
You can use our template letter as a guide. If your bank refuses to offer you a refund, you can escalate your complaint to the financial ombudsman.
- Find out more: sign up for Which? scam alerts
source https://www.which.co.uk/news/2021/06/seven-ways-banks-could-do-more-to-help-victims-of-fraud/