Consumer complaint received 2026-04-21 00:00:00
Product: Money transfer, virtual currency, or money service — Domestic (US) money transfer
Issue: Other transaction problem — 
Company: TRUIST FINANCIAL CORPORATION
State: TX

Complaint narrative:
From : XXXX XXXX [ XXXX ] Sent : XX/XX/year>, XXXX AM To : XXXX Subject : Fraudulent activity of wire XXXX Hello, I hope this message finds you well. I am writing with urgency because I have noticed a wire withdrawal of {$50000.00} from my account that I did not authorize. This transaction was not made by me, and I am deeply concerned about its legitimacy. Could you please cancel this wire transfer as soon as possible? I would appreciate your prompt attention to this matter to ensure my account remains secure. If you need any further information from me to assist with the cancellation, please let me know right away. Thank you very much for your help and swift response. Best, XXXX XXXX XXXX, Thank you for reaching out. Full account restrictions have been placed on your account at this time. These restrictions can be removed at any time at your request. It looks like the wire was sent to Truist Bank account number XXXX. Unfortunately, it is too late to reject the wire request on our end. We have requested that our clearing firm, XXXX XXXX XXXX, submits a wire recall request. From what we can tell, this account intrusion was not a result of deficiencies of XXXX XXXX. It appears that the intruder was in possession of your login credentials and was able to login cleanly at first try. Further, it appears that you did not have two-factor authentication enabled for your account at the time of the unauthorized withdrawal. Unfortunately, this would have likely stopped the wire withdrawal from being requested as it is usually a very effective security measure. I see that you have updated your XXXX password and enabled two-factor authentication for sensitive actions within your account. Please be sure when updating passwords to use strong password practices. Ideally, a password should be at least XXXX characters and include a mix of lower-case and capital letters, numbers, and special characters such as @, $ or *. It should be unrelated to any of your prior passwords and should be unique and not used within more than XXXX website or app. If you are struggling to think of something, you can use a password generator ( there are several free options available ) or pick a short sentence or phrase to use as inspiration and replace certain letters with numbers or special characters. You may want to consider changing the password tied to your email address associated with your XXXX account. I am not indicating that your email is compromised, but this is a common place where such leaks occur. We strongly suggest that you enable two-factor authentication for sensitive actions AND at every login within your XXXX account. You can do so by logging into your account at XXXX and follow XXXX XXXX. You will see the toggle to enable these features. If offered, you should do this for all important websites. I would also suggest to never use the " stay logged in '' feature for any website and be sure to clear your cookies/cache files routinely. It is a good practice to power cycle your internet router on a routine basis. Finally, frequent and routine virus scans on your devices are highly recommended. I wanted to let you know that wire withdrawals are extremely difficult to call back as the account intruder will act quickly to try to move the funds further away from the receiving bank account. If we caught this early enough, the return of the funds can take quite a bit of time as the bank needs to complete an investigation on their end. Such investigations can take over 90 days. I will keep you posted as more information becomes available to me. Please know that I am doing all I can to return these funds to you. Best, XXXX

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation