Consumer complaint received 2025-09-20 00:00:00
Product: Money transfer, virtual currency, or money service — Domestic (US) money transfer
Issue: Fraud or scam — 
Company: BANK OF AMERICA, NATIONAL ASSOCIATION
State: FL

Complaint narrative:
Incident Summary I'm a victim of prolonged identity theft and financial fraud that began in XXXX, directly linked to major data breaches at XXXX XXXX XXXX ( exposing my phone records XXXX  XXXX ) and XXXX ( XXXX XXXX breach dumping millions of SSNs ). Scammers used this stolen info to impersonate professionals, hijack my business identity, and drain my accounts via unauthorized devices and transfers. I've lost approximate total $ : e.g., {$33000.00} supposedly but now according to my stocks, its more like quarter of a supposedly but now according to my stocks, its more like quarter of {$1.00} XXXX and face ongoing risks. Despite reports to [ list any prior : e.g., local PD, FTC ], the fraud persists. I need CFPB to investigate, compel banks to reimburse, and guide recovery. 
Detailed Timeline - * * Early XXXX ( Around XXXX XXXX XXXX Breaches ) : * * My data was compromised in the XXXX XXXX  XXXX breach ( call/text records for nearly all customers ) and XXXX XXXX XXXXXXXX exposure XXXX XXXX SSNs/driver 's licenses. This gave scammers my phone, address ( XXXX XXXXXXXX XXXX now outdated ), and EIN for XXXX XXXX ( XXXX XXXX XXXX XXXX XXXX [ redacted ] ). Extremely personal information you guys can get when you call me at XXXX. 
- * * XXXX : Initial Scam Entry : * * Contacted by fake " digital agency '' in XXXXXXXX XXXX  ( claimed well-known firm, but was impersonation ). My brother eventually told me about the website when he first started using them, but forgot to tell me how incredibly XXXX they were. Also, lets get this straight. They didnt help me build it. They said heres a XXXX for XXXX XXXX, but stole the domain ( now squatted by unrelated winery ). Paid them [ amount/date ] via [ method ], which vanished. All mail/correspondence routed through XXXX BofA address ( Branch : [ if known, e.g., XXXX XXXX persistent on statements, suggesting address fraud ). 
- * * Ongoing XXXX : Escalation to Device/Financial Theft : all the way down to carbon credits. 
Connected to private XXXX ( likely via breach-sourced XXXX XXXX  XXXX ), allowing remote control of my devices for data scraping ( personal/financial info harvested ). 
Unauthorized XXXX XXXX opened in my name, racked up [ amounts/dates, e.g., $ XXXX charges for unknowns ]. 
Impersonated banks ( internal/external accounts ) to send XXXX transfers from my stocks/investments [ details : e.g., $ Y from brokerage to " verified '' recipient ], then wired to NY [ account/bank ] and CA [ final mule ]. Total drained : [ Z amount ]. 
- Fake " attorney XXXX XXXX '' ( XXXX, spoofed FL Bar # [ number you tested ] ) texted in [ recent date, e.g., XX/XX/XXXX ], using my old address and LLC name to " resolve '' pure phishing for more access. ( Attached : screenshots, logs. ) - * * Impacts : * * Credit score tanked [ if known, e.g., from XXXX to XXXX ] ; unable to launch biz site ; constant alerts for new accounts. Froze credit, but new fraud pops up ( e.g., [ recent incident ] ). 

What I have done so far, I have done everything that I have been asked and more : the problem is XXXX owns XXXX thats Americas fault and because of their ignorant policies, nobody can look at their data and pull out a bug if someone has malware inside their phone thats why I hope XXXX comes along. Has American phone, American satellite American connection and America wont have this problem. Im sorry I have to ask you this. Please go over to XXXX. Ask them if its OK for us to build your phone ask him very politely. Im sure theyre going to allow it.. 
XXXX XXXX was never a finish website but I own the domain. I got in a car wreck at the end of XXXX that set me back now this is what it is a a results-driven, digital product and marketing agency specializing in website design, mobile app development, online marketing and communications. Our mission is to develop products and services our client 's love by merging technology, consumer and brand needs. We're big believers in customer-first, mobile-first, and cloud-based platforms that are easy to use and deliver results. Features are great, results are better. We leverage pragmatic, lean and agile methodologies to quickly assess where you are, where you're going, and how to get you there! Filed police report filed the police report with XXXX XXXX sheriffs department in XXXX - Reported to FTC FBI AND FTC Contacted BofA [ dates/outcomes, e.g., disputed charges denied reimbursement ] ; XXXX [ for XXXX removal partial help ]. 
- Bar complaint on fake lawyer. 

* * Requested Actions : * * 1. Investigate banks ( BofA, XXXX partners ) for failing to flag/ reimburse unauthorized transactions. 
2. Coordinate with FTC/SSN for full identity restoration ( new SSNs if needed ).

3. Force credit bureaus to scrub fraudulent inquiries/accounts.

4. Advise on XXXX removal and device security ( scammers still access logs/location ). 
5. Any compensation/recovery resources for breach-linked fraud.

Evidence Attached-if it let me, this is what my web site XXXX  XXXX says on XXXX. Thats where all your answers are XXXX  XXXX is a a results-driven, digital product and marketing agency specializing in website design, mobile app development, online marketing and communications. Our mission is to develop products and services our client 's love by merging technology, consumer and brand needs. We're big believers in customer-first, mobile-first, and cloud-based platforms that are easy to use and deliver results. Features are great, results are better. We leverage pragmatic, lean and agile methodologies to quickly assess where you are, where you're going, and how to get you there! 
I would, but I actually got his website that might work and the rest of the people that are working in the fraud. My statements are showing in the XXXX address. showing XXXX address ; XXXXwire confirmations ; breach notifications from XXXX XXXX XXXXXXXX XXXX police report XXXX Incident Summary I'm a victim of prolonged identity theft and financial fraud that began in XXXX, directly linked to major data breaches at XXXX XXXX XXXX ( exposing my phone records XXXX XXXXXXXX ) and XXXX ( XXXX XXXX breach dumping millions of SSNs ). Scammers used this stolen info to impersonate professionals, hijack my business identity, and drain my accounts via unauthorized devices and transfers. I've lost [ approximate total $ : e.g., $ XXXX, XXXX ] and face ongoing risks. Despite reports to [ list any prior : e.g., local PD, FTC ], the fraud persists. I need CFPB to investigate, compel banks to reimburse, and guide recovery. 

* * Detailed Timeline : * * - * * Early XXXX ( Around XXXX XXXX XXXX Breaches ) : * * My data was compromised in the XXXX XXXX  XXXX breach ( call/text records for nearly all customers ) and XXXX XXXX  XXXX exposure of XXXX SSNs/driver 's licenses. This gave scammers my phone, address ( XXXX XXXX, XXXX now outdated ), and XXXX for XXXX XXXX ( XXXX XXXX XXXX XXXX XXXX [ redacted ] ). 
- * * XXXX : Initial Scam Entry : * * Contacted by fake " digital agency '' in XXXX, FL ( claimed well-known firm, but was impersonation ). They " helped '' build reckoningllc.com for my biz, but stole the domain ( now squatted by unrelated winery ). Paid them [ amount/date ] via [ method ], which vanished. All mail/correspondence routed through XXXX BofA address ( Branch : [ if known, e.g., XXXX XXXX persistent on statements, suggesting address fraud ). 
- * * Ongoing XXXX : Escalation to Device/Financial Theft : * * - Connected to private XXXX ( likely via breach-sourced XXXX XXXX creds ), allowing remote control of my devices for data scraping ( personal/financial info harvested ). 
- Unauthorized XXXX XXXX opened in my name, racked up [ amounts/dates, e.g., $ XXXX charges for unknowns ]. 
- Impersonated banks ( internal/external accounts ) to send XXXX transfers from my stocks/investments [ details : e.g., $ Y from brokerage to " verified '' recipient ], then wired to NY [ account/bank ] and CA [ final mule ]. Total drained : [ Z amount ]. 
- Fake " attorney XXXX XXXX '' ( XXXX, spoofed FL Bar # [ number you tested ] ) texted in [ recent date, e.g., XX/XX/XXXX ], using my old address and LLC name to " resolve '' pure phishing for more access. ( Attached : screenshots, logs. ) - * * Impacts : * * Credit score tanked [ if known, e.g., from XXXX to XXXX ] ; unable to launch biz site ; constant alerts for new accounts. Froze credit, but new fraud pops up ( e.g., [ recent incident ] ). 

* * What I've Done So Far : * * - Filed police report [ date/agency, e.g., XXXX XXXX XXXX XXXX ]. 
- Reported to FTC ( ID Theft Affidavit # [ if have ] ), IC3 ( FBI complaint # [ if filed ] ), FL AG Fraud Hotline. 
- Contacted BofA [ dates/outcomes, e.g., disputed charges denied reimbursement ] ; XXXX [ for XXXX XXXXemoval partial help ]. 
- Bar complaint on fake lawyer. 

* * Requested Actions : * * 1. Investigate banks ( BofA, XXXX partners ) for failing to flag/ reimburse unauthorized transactions. 
2. Coordinate with FTC/SSN for full identity restoration ( new SSNs if needed ).

3. Force credit bureaus to scrub fraudulent inquiries/accounts.

4. Advise on XXXX removal and device security ( scammers still access logs/location ). 
5. Any compensation/recovery resources for breach-linked fraud.

Evidence Attached : [ List : Texts w/ fake lawyer ; domain WHOIS ; BofA statements showing XXXX address ; XXXX/wire confirmations ; breach notifications from XXXX XXXX XXXX  XXXX police report XXXX 

Thank you this has wrecked my life and XXXX XXXX  XXXX years. I need your help to shut it down. 
Your Signature Date : XX/XX/XXXX Attachments PDF everything calling, read this aloudthey 'll guide filing. 
- * * After Sending : * * Get your case # ( instant ). Follow up in 30 days. Hit FTC 's identitytheft.gov for a recovery plan ( free, steps like police affidavit ). 
- * * Next Moves Tie-In : * * While CFPB works the finance side, loop FBI tomorrow ( as we chatted ) mention this script as your trail. For XXXX, XXXX XXXX ( XXXX ) can nuke it with proof ; consider a full device wipe/XXXX overhaul. 

Thank you this has wrecked my life and biz for XXXX years. I need your help to shut it down. 
Your Signature Date : XX/XX/XXXX Quick Tips to Nail This Length CFPB form has sectionspaste into " What

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with explanation