Consumer complaint received 2026-04-22 00:00:00
Product: Checking or savings account — Checking account
Issue: Managing an account — Funds not handled or disbursed as instructed
Company: BANK OF AMERICA, NATIONAL ASSOCIATION
State: GA

Complaint narrative:
Complaint Against Bank of America , N.A . Issue : Unauthorized ACH Transfers/ Failure to Protect Deposited Funds Amount at Issue : Approximately {$8000.00} Summary of Complaint Bank of America , N.A . failed to implement and maintain reasonable information security, customer data protection, and fraud detection controls, which directly resulted in multiple unauthorized ACH transactions being fraudulently withdrawn from my checking account. Despite timely reporting, Bank of America has failed to reimburse me for approximately {$8000.00} in stolen funds, causing significant financial harm. Description of What Happened My Bank of America checking account was compromised due to Bank of Americas failure to adequately protect my account and monitor for fraudulent activity. A single perpetrator was able to initiate multiple unauthorized ACH transfers, in rapid succession, to the same payee. These transactions were executed without my knowledge, authorization, or consent. At no point did Bank of America : - Notify me of suspicious or anomalous transaction activity, - Intervene to suspend or block the transactions, or - Apply basic velocity controls or ACH fraud safeguards that are standard within the banking industry. These transactions occurred openly and repeatedly, demonstrating a total breakdown in Bank of Americas fraud monitoring and customer protection systems. The first and only notification I received of this activity was when my account has withdrawn. Failure of Information Security and Customer Data Protection Bank of America holds itself out as a financial institution capable of safeguarding customer funds and sensitive financial data. In this instance, Bank of Americas information security and customer data protection programs failed. Unauthorized access to my account was possible, and once compromised, the account remained vulnerable long enough for multiple fraudulent transfers to be completed. This failure constitutes a breakdown in Bank of Americas obligations to implement reasonable administrative, technical, and operational safeguards to protect consumer accounts. Failure of Fraud Detection and ACH Controls The unauthorized activity exhibited obvious fraud indicators, including : - Multiple ACH transfers occurring in a short period of time, - Transfers sent to the same payee, - Transaction behavior inconsistent with my historical account usage. Any reasonable ACH monitoring system employing standard velocity limits, anomaly detection, or transaction pattern analysis should have flagged and prevented this activity. Had Bank of America implemented effective fraud detection controls, the theft would have been interrupted early, and my financial losses would have been negligible. Instead, Bank of America allowed the perpetrator to continue withdrawing funds unchecked. Resulting Harm As a direct and proximate result of Bank of Americas failures : - Approximately {$8000.00} was fraudulently removed from my checking account. - I am unable to meet existing financial obligations. - I have suffered financial hardship caused solely by Bank of Americas failure to safeguard funds I entrusted to them. - Bank of America has failed to reimburse the stolen funds timely despite the transactions being unauthorized. Bank of Americas Responsibility Bank of America was the entity that : - Controlled the account infrastructure, - Processed the ACH transactions, - Failed to detect and prevent repeated fraudulent withdrawals, and - Allowed the continued removal of my funds after clear fraud indicators were present. The loss was caused by Bank of Americas deficient fraud prevention framework, not by any wrongdoing or negligence on my part. Requested Resolution I respectfully request that the Consumer Financial Protection Bureau : - Require Bank of America to immediately reimburse me for the full amount of unauthorized withdrawals ( approximately {$8000.00} ). - Investigate Bank of Americas ACH transaction monitoring, velocity controls, and fraud detection systems that allowed repeated unauthorized transfers. - Require Bank of America to assess and strengthen its customer data protection and fraud prevention programs to prevent similar consumer harm. Closing Statement Consumers are entitled to rely on financial institutions to protect deposited funds through reasonable security and fraud control measures. Bank of America failed to meet this obligation and has improperly shifted the financial consequences of its failures onto me. CFPB intervention is necessary to ensure reimbursement and to prevent recurrence.

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with monetary relief