I absolutely love staying in hotels for work. When I worked as a school photographer, they would send us all over Southern Alberta to capture smiles, and work would foot the bill for hotels, mileage, and meals. It's sweet having a per diem. I'd use it to treat myself to things I normally wouldn't order, like a $20 salad. I'd then look forward to luxuriating in the hotel's pool and/or hot tub, if they had one, and simply enjoy the fun of having an uninterrupted evening.
The next hour and a half was a blur of panicked calls to my bank. The three emails consisted of notifications confirming I had changed my bank PIN (I had not), changed my banking password (I did not), and the phone number on my account (not me!). After convincing the security team that I was the rightful owner of my accounts, they told me someone had figured out my personal information and attempted to transfer out most of my chequing funds. My bank stopped the transfer and froze my accounts, which, if you didn't know, is a bummer when you're travelling for work!
As a communications manager, I make it part of my job to alert our community about new scams, fraud, and ways to protect yourself.
A manager on my bank's fraud team let me know that the scammer gained access to my account through my very own device. It's possible that despite my two-factor identification and frequent PIN changes, I may have logged into my bank account in a public space with insecure WIFI. It sometimes happens that before I make a big purchase, say, at Costco. I'll pop into my banking app quickly to see if I have enough to cover the transaction, and transfer funds over if I am going to fall short. I definitely know better than to do this, but sometimes, in the moment, especially when I'm with my entourage (i.e., my family), you can get easily distracted and make bad decisions. It's hard to remember if and when I did this, but the bank manager I spoke with to reconcile this stressful life event was quick to point out that it wasn't THEIR fault that someone gained access to my account. This is classic victim-blaming, and I reject the implication that it's my fault that I was scammed or defrauded.
I have a few takeaways from all of this:
This fraudulent experience was terrifying, and I'm lucky - my accounts are safe, I think, because I acted quickly. I know this sometimes can't be the case, and many friends shared their stories of fraud and theft with me that were far worse than my own.
In the end, I still went to the hotel pool to give myself a change of scenery after nervously pacing in my room for an hour and a half, and, my bank account is, hopefully, even more robust than it was before, with alerts for any transfers in and out of my account of $1 or more.