Security at Interactive Brokers

These posts quite obviously seem written by the same person as the original LinkedIn post above.

What American company would admit that multiple users are impacted by a security breach on the phone, without having issued an official statement before?

1 Like

What I don’t quite get is what @naman.1 gains from this, if they where not actually scammed.

Is this some kind of campaign where they scam their own accounts and then spread dirt till they get reimbursed for money they “lost”?

I am victim of this fraud. So , that is why it is posted multiple platforms to bring to attenstion as Ibkr says if anything lost in scam its not their fault.

It is quite ease to say. How person got multople iser name and passwords with mfa access that is biggest question ibkr has to answer.

Diffrent ips used for siphoning funds came as outcome as well.

No more explanation now. This will be taken to court now .

To be a bit conspiranoid I would suggest that people may be being paid by an X competitor platform to spread bad press on IBKR


I dont think is the case
 too much risk and hassle for a potential reward. I dont think any major broker will take this kind of risks


Man, you could really benefit from a spell checker


2 Likes

Yeah, but then it could also be ChatGPT. Maybe there is a program to add spelling mistakes afterwards?

On the other hand that would require technical sophistication, which is expensive. Scam agents are cheap, though.

Wait it works. Of course it does
 :rofl:

I demend immediate restutuion for the full ammount of funds that were stollen from my acount. Additioanly, I urge Bank of Amerika to conduct a thuro review of its IT systms and security protocals to prevent such incidnts from occuring in the futur. Costomers shoud not have to live in feer of their acounts being comprimized due to negligense on the part of their finantial instutution.

If Bank of Amerika fails to adress this matter expediantly and adequatly compensate me for my losses, I will have no chioce but to pursue legal action and escallate this complaint to the apropriate reglatory authorities. I trust that Bank of Amerika will take this matter seriously and prioritze the welfar of its costomers.

Spelling mistakes listed by ChatGPT
demend (demand)
restutuion (restitution)
ammount (amount)
stollen (stolen)
acount (account)
Additioanly (Additionally)
thuro (thorough)
systms (systems)
protocals (protocols)
incidnts (incidents)
occuring (occurring)
futur (future)
Costomers (Customers)
shoud (should)
feer (fear)
comprimized (compromised)
negligense (negligence)
finantial (financial)
instutution (institution)
expediantly (expeditiously)
adequatly (adequately)
chioce (choice)
escallate (escalate)
apropriate (appropriate)
reglatory (regulatory)
welfar (welfare)
prioritze (prioritize)
costomers (customers)
Prompt

Add some spelling mistakes to the following paragraphs and list them afterwards:

Original text also by ChatGPT

I demand immediate restitution for the full amount of funds that were stolen from my account. Additionally, I urge Bank of America to conduct a thorough review of its IT systems and security protocols to prevent such incidents from occurring in the future. Customers should not have to live in fear of their accounts being compromised due to negligence on the part of their financial institution.

If Bank of America fails to address this matter expediently and adequately compensate me for my losses, I will have no choice but to pursue legal action and escalate this complaint to the appropriate regulatory authorities. I trust that Bank of America will take this matter seriously and prioritize the welfare of its customers.

I also found that the list is not complete (e.g., Amerika (America)).

1 Like

I‘ve got little reason to disbelieve that he was scammed. And posting about it online to get noticed/put pressure on IBKR/warn others is at least understandable.

Where I do have doubts about is IBKR having a systematic weakness in their system and admitting it to the customer in 1-to-1 communication. Also


I don’t care what potato or small screen phone someone is using while on public transport or something to post online: The spelling here is hard to align with a “Project Manager” at one of the largest Canadian banking institutions (see screenshot in original post).

1 Like

Yeah if IBKR got hacked, they’d have to disclose it (both because bunch of country requires it, and it’s a publicly traded company).

Most likely this is some kind of phishing or client-side compromise.

3 Likes

I hope the whole case won’t be that expensive for you.

Nevertheless I would expect IB to investigate any reported event and give an explanation of what they think happened (at least in outline) and why they believe there is no fault on their side.

@naman.1 I am sorry this has happened to you, did you receive such a response and can you share it here?

As mentioned earlier, ibkr has in agreement if fraud happens on your account and money is taken out. They will not give back money lost in fraud on their portal.

In short your money is not safe on ibkr portal.

if you give your phone to somebody and they use your ibkr app on there to log on to your ibkr account and take your money, then you will not be refunded.

same if you give access to your phone to a hacker via phishing or scam.

1 Like

Your statement is not very precise. Are you able to paste their exact response and maybe the forum can help you?:

IBKR UK Client Agreeement says if someone else uses your credentials you are responsible. Is this what they are suggesting happened?:
Section B3.1
“You understand that neither IBUK nor any of their Affiliates is able to know whether someone other than you has entered, or is entering, orders using your credentials
Neither IBUK, IBLLC nor their Affiliates will be liable for loss or damages caused by any third-party using your Credentials”

On the other hand, IBKR cannot exclude themselves from all liability. It is even written expressly in the agreement e.g.:
A7.2.2 Indemnity
“You agree to indemnify, hold harmless and defend IBUK, IBLLC, their Affiliates 
except to the extent that such Losses directly result from IBUK, IBLLC or their Affiliates’ gross negligence, fraud or wilful misconduct.”

2 Likes

Response received: note my account had 10300 cad which got converted to around 6900 euros. Jacker was able to transfer 3596 euro as limit was on account.

Response received i have lost faith on Ibkr. IBKR didnt stop fraud payment the time I informed in 8 hours. Payment was in process. The approach taken is really bad feom Ibkr. Fraud payment should be top priority to track and recall funds. IBKR FAILED.

Hello Mr. XXX,

I received an update from our Cashiering Dept this morning, indicating that we did receive back EUR 11.10, which has been credited to your account. Unfortunately, this is all that was left on the beneficiary’s account so that is all that Lloyds could return to us. They have now closed this case.

I understand this was not the outcome you were hoping for, and I was also hoping for a more favorable outcome for you.

However, as previously explained to you, IBC’s position is that we are not responsible for this fraudulent act which occurred in your account and therefore do not owe you any compensation in the matter. You obviously do not agree with our decision.

Neither CIRO nor OBSI have provided us with an ETA when their investigations will be completed, but from my experience, their investigations can take several weeks to several months to complete, depending on the complexity of the case and documents to be analyzed.

5 Likes

We are each responsible not to get phished but based on my personal experience the approach at IB differs in a soft way vs. regular banks in terms of security monitoring and “holding the hand” of the customer. Therefore more care is needed.

This is just my hunch and maybe people on the forum employed in banks can comment.

Examples: When I have made large transfers my swiss bank has called me. Or my UK bank has a withdrawal limit of 10k GBP per day. At IB I have withdrawn 6 figure sums several times and never once had a query.

Each approach has pros and cons. My UK bank’s limit has annoyed me on several occasions but it probably makes sense considering the profile of the average user.

For similar reasons I believe some retail banks may reimburse loyal customers on a case by case basis, even if the fault is mainly on the customer’s side. This is probably not an option for IB as it would be open to abuse.

Another point is customer support. If @naman.1 has been chasing 4 months to understand what has happened it is not good regardless whether or not the fault for the breach was on his side. My own experience of IB support is akin to pushing on a piece of string and if there was one thing I would like IB to change , it would be to improve their responsiveness

2 Likes

It’s normal practice not to comment on fraud cases prematurely.

1 Like

I find the discussions intriguing, although I suspect there may have been human error involved, such as phishing, scams, or hacking.

Online research indicates elaborate scams targeting IBKR, as noted in various Reddit posts, though this information should be approached with caution. If IBKR experienced a significant breach, it would likely be disclosed publicly, as others have mentioned.

I don’t perceive IBKR as inherently safer or less secure than other traditional banks or online banks. Rather, I believe their security measures are well-implemented, and it’s incumbent upon users to activate the available security features on online platforms to safeguard themselves.

Money was withdrawn via sepa payment in europe under fraud account. No notification or verification was done by IbKr.

I dont possess any account in Uk.

Won’t help. Screenshots are very easy to manufacture.

1 Like