Slashdot Mirror


Stealing From Banks One Cent at a Time

JRHelgeson writes "In a story strangely reminiscent of Superman 3, a 'hacker' allegedly stole over $50,000 from PayPal, Google Checkout as well as several unnamed online brokerage firms. When opening an online brokering account it is common practice for companies such as E-trade and Schwab to send a tiny payment — ranging from only a few cents to a couple of dollars — to verify that the user has access to the bank account listed. According to the story, the attacker wrote a script that opened thousands of accounts at dozens of these providers. He was arrested not for taking the money, but for using false names in order to get it."

5 of 313 comments (clear)

  1. Well, yeah... by Oxy+the+moron · · Score: 5, Interesting

    He was arrested not for taking the money, but for using false names in order to get it.

    Of course he wasn't arrested for taking the money. Said institutions willingly deposited that money into his account(s), yes? And these institutions did so under the pretense that this was to identify the customer? So the charge makes sense. The guy didn't steal money, it was given to him... a "him" with a fake identity.

    --

    Proudly supporting the Libertarian Party.

  2. Well Duh by oahazmatt · · Score: 4, Interesting

    Largent used an automated script to open 58,000 such accounts, collecting many thousands of these small payments into a few personal bank accounts. As much as the bank looks oddly at a sudden amount of large withdrawls, they'd certainly take the time to wonder why someone is getting three cents continuously deposited into their account. How did he figure he would not get caught?

    When his bank contacted him about the thousands of small payments, Largent explained that he had read the terms of service of the sites he was targeting, and believed he was doing nothing wrong, claiming that he needed the money to pay off debts. Oh, well that's okay, then.

    Man, they'll throw the "Hacker" label on anyone these days, won't they?
    --
    Those who believe the Internet is private,
    find their privates are on the Internet.
  3. How many bank accounts did he have? by __aailob1448 · · Score: 5, Interesting

    I don't understand how he managed to do this. He can't use 50,000 bank accounts. There aren't 50,000 payment services. So why would any of them send a few cents to the same bank account more than once?

    Can anyone explain this to me? It makes no sense at all.

  4. Re:Comment from said "hacker" by Chapter80 · · Score: 5, Interesting
    With every ATM deposit, one can key in a slight over-amount, when specifying the deposit. If you are depositing checks for $123.45, you could key in maybe $123.54 (transposing the last two digits).

    Most always, the bank sees the foolishness in sending a letter (costing at least 42 cents) to correct a small error. So they apparently just write off the difference, and leave the ATM deposit as reported.

    So I get richer, cents at a time.

    Kids, don't try this at home.

    This may just be the missing statement, right before "4. Profit"

  5. Re:Comment from said "hacker" by blair1q · · Score: 4, Interesting

    Contrary to your apocryphal belief, banks have entire departments that spend more than the collection is worth to make you balance your account if it is out of balance. This discourages bigger crimes, which would cost them more just on a statistical basis.

    You may get away with the "few pennies" mistake once per institution. Three or four times? They'll freeze your funds and demand you clean up your act.

    Because here's a secret you should have known: When you give the bank the money, it's not yours any more. It's theirs. You lent it to them, and they owe it to you, but you can't just take it. You are nothing more than a lender, and they are a borrower. You have all the rights of a creditor. Which, you might guess, means you can spend thousands of dollars on legal hassles trying to free up the $123.45 you deposited to steal that 9 cents.