Consumer complaint received 2024-11-21
Product: Checking or savings account — Checking account
Issue: Managing an account — Banking errors
Company: ALLY FINANCIAL INC. (NV)

On XX/XX/XXXX, I discovered that an Ally Financial employee, XXXX XXXX, accessed my business 's website using Allys corporate network. He submitted a contact form on my website using false information, including a pseudonym for his name and misleading details about his interest in purchasing a product. However, he included his personal email address, which allowed me to identify him as an Ally employee. The use of Allys corporate IP address for this interaction directly links his actions to the company. 

Upon further investigation, I discovered that XXXX XXXX has been employed by Ally for over six years and is currently a Compliance Manager in the AML ( Anti-Money Laundering ) Investigations department. This raises significant concerns about whether his actions were authorized by Ally or conducted independently. If his behavior was authorized, it demonstrates a misuse of investigative powers ; if it was independent, it raises questions about Allys employee oversight. 

I contacted Ally through multiple channels, including their secure email and phone support, to report the incident. I provided detailed logs to Ally 's C-Level Office and their General Counsel showing XXXX XXXX access to my site, including multiple visits after I had blocked his IP address and displayed a 404 error page explicitly notifying him that he was being investigated. 

Key Dates and Actions : XX/XX/XXXX : XXXX XXXX submitted false information through my business contact form using Allys corporate IP address and his personal email. 
XX/XX/XXXX : I emailed Allys secure email service to report the issue and later received acknowledgment of my complaint from an Ally representative, who escalated the matter to their legal team. 
XX/XX/XXXX : I emailed XXXX XXXX, XXXX XXXX, XXXX XXXX and XXXX XXXX at Ally, all in Ally 's corporate office, all C-Level execs. 
XX/XX/XXXX : I called Ally to follow up and spoke with a manager who confirmed that their legal department was actively investigating the situation. During the call, the manager reviewed the case notes and displayed significant concern, stating this case had been escalated to the highest priority. 
XX/XX/XXXX : XXXX XXXX revisited my website multiple times after being blocked, using the same corporate IP address. 

Despite Allys assurances during these communications, I have not received ANY formal acknowledgment or updates regarding the investigation as of XX/XX/XXXX at XXXX PST. The lack of transparency has heightened my concerns about whether Ally is addressing this matter appropriately or taking my privacy and security seriously. 

My Concerns : Breach of Privacy and Trust : XXXX XXXX used Allys corporate resources inappropriately, raising serious questions about the security of my personal and business information. 

Lack of Transparency : Ally has failed to provide formal acknowledgment of their investigation or communicate any safeguards to protect my data. 

Potential Misuse of Position : As an AML Compliance Manager, XXXX XXXX actions suggest either a misuse of investigative authority or a failure by Ally to monitor employee behavior effectively.