If an IBAN theft alone does not allow you to be charged money, when a certain amount of personal data is added, it makes it easier for fraudsters to create fake direct debit mandates. A scam on the rise in recent years, according to RTL, which could hit the many Free customers, victims of a cyberattack last week. 19.2 million of them would be affected, including 5 million IBANs resold on the dark webaccording to the cybercriminal.
For Free customers who have received an email from the operator informing them of the leak of their personal information, the greatest vigilance is required, in the face of fraudulent SMS, emails or calls which could multiply in the coming weeks, but also suspicious samples.
If you notice an unexpected outflow of money, how can you get reimbursed by your bank? We'll explain it to you.
Anticipate the scam
First, to avoid the scam, several tips can be applied. You can start by changing your access codes, using more secure passwords and enabling two-factor authentication to protect your account.
Read also: In 2023, the fake bank advisor scam cost tens of millions of euros
Then, the Observatory on the security of means of payment recommends “check regularly” its accounts and “update the list of authorized or prohibited creditors in your online banking space”. You can also notify your bank of the hack to ask them to be more vigilant.
Pay attention to reimbursement request deadlines
If a fraudulent direct debit still ends up eating into your savings, a direct debit challenge can be filed. You can first report the scam on the Perceval platform, accessible via France Connect. This government site is intended to manage cybercrime linked to the use of your banking details. “Reporting on the platform facilitates the reimbursement of stolen sums and centralizes complaints in order to facilitate research into the perpetrators of these frauds”indicates the National Consumer Institute.
Read also: With 3 million fraudulent payments, France is the European champion of bank fraud
This complaint can then be added to your direct debit dispute request. Pay attention to response times and working days, which vary depending on the country of the beneficiary of the transfer and the banks. The French Banking Federation indicates that a deadline of « 13 months from the debit date »and this is reduced “70 days when the establishment of the beneficiary of the payment is located outside the European Union or the European Economic Area”. Within these deadlines, the bank is forced to reimburse you.
“It will be up to your bank to establish that the direct debit has been authorized. Failing this, it will have to re-credit you the sums debited as well as any costs incurred by this withdrawal”writes the Directorate General for Competition, Consumer Affairs and Fraud Prevention.
Eight weeks to contest
And even if you have authorized a direct debit in error, according to MoneyVox this can be contested for 8 weeks after the debit on the grounds of “excessive collection”. You can then block the fraudulent beneficiary, by asking your bank or by going to your online banking area.
Please note, the procedure may be different depending on your banks. Some offer opposition 100% online or on the application (Société Générale) while others ask to go to an agency (Crédit Mutuel).
