Consumer complaint received 2024-02-01
Product: Money transfer, virtual currency, or money service — International money transfer
Issue: Fraud or scam — 
Company: WorldRemit Corp. (TX)

I was a victim of a data breach of my WorldRemit account ( https : //www.worldremit.com ) on XX/XX/2024, in which an unauthorized individual gained access to my account, social engineered their way through WorldRemits customer service department and made direct changes to my account. The unauthorized individual installed a fraudulent payment card on my account and used that to perform a fraudulent transaction in my name and with my personal details ; transferring {$1000.00} to a foreign country using my WorldRemit account. 

The unauthorized individual gained access to both personally identifiable information ( PII ) and financial information; including my full name ( XXXX ), email address, home address, date of birth, bank account details, and other sensitive information. 

I discovered the data breach on Thursday, XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX  ) following the receipt of over 1500+ spam emails to my personal email address, associated with my WorldRemit account In addition, within that time period, I received to email notifications from WorldRemit stating material changes were made to my account and financial transaction ( s ) were conducted. 

On review of the WorldRemit email notifications I noted the changes made to my account and financial transaction conducted were fraudulent. I contacted WorldRemit at XXXX XXXX XXXX XXXX XXXX XXXX XXXX  to report the data breach incident to their customer service and was told the incident would be investigated by their fraud security team. 

WorldRemit refused to acknowledge the incident, and only after several calls to their customer service and emails to their fraud team did they finally respond ( via email ) on XX/XX/ stating it appeared someone had compromised my account ', yet they refuse to share any further details even when I presented the evidence to them. 

Following my additional questioning of WorldRemit 's initial email response ; including requesting to know how their customer service department was compromised in this incident and how their security controls were circumvented, on XXXX XXXX XXXX  they responded back - still without any details of their investigation - all they could tell me was to contact my bank to close my account and contact the local police. In short, they shifted all the burden and responsibility to me the customer, for an issue that they were clearly at fault on and refused to acknowledge. 

Since then and to this day, I have spent countless hours daily, investing significant time, energy and even money on this matter in order to take measures protecting myself from the impact and damages of the identity theft and fraud that occurred on my WorldRemit account. These measures include ; filing of a police report, filing of an FTC Identity Theft report and compliant with IdentityTheft.gov, formally requesting credit freezes and fraud alerts with the Credit Bureaus, paying for online identity theft monitoring services, pursuing legal consultation services, and much more. 

Yet till this day, WorldRemit has still refused to acknowledge their fault in this incident - their gross negligence in the handling of my personal data, their failure to prevent or timely disclose the data breach, their deceptive practices and failure to put in access/data security measures in-place all which led to the compromise of my private data.