Consumer complaint received 2025-08-30 00:00:00
Product: Checking or savings account — Checking account
Issue: Managing an account — Problem using a debit or ATM card
Company: FinCo Services Inc DBA Current
State: MI

Complaint narrative:
I am reporting a serious case of account compromise and unauthorized activity involving my Current Bank checking account. I noticed multiple transactions I did not authorize, and after further review, I uncovered signs that my account and device were accessed without my permission. 

At the time of the unauthorized activity, I had several employees who used my phone for business purposes. These individuals were given access to my phone to complete job-related tasks, such as communicating with clients. I never gave anyone my pins or authorization to change anything. I later discovered that an unauthorized fingerprint and face scan had been added to my phone. I never gave permission for this biometric data to be registered. I normally use a passcode, not Face ID. This change shows clear evidence that someone intentionally altered my security settings to gain access. 

Additionally, my email password was changed without my knowledge, further supporting the possibility of a compromise. I was also hospitalized during part of the time the fraudulent charges were made, due to a dog bite injury. During this period, I could not have reasonably reviewed or authorized any transactions.

Some of the transactions were linked to third-party names I do not recognize. One charge appears to have been sent from a Current account to another Current account, yet I never sent or authorized a transfer to this person through Current Pay and do not have knowledge of the person or If the person is real. I do not know if these are real individuals, but Current Bank refused to confirm their identity or how they were able to connect to my card. This raises concerns about security failures on their end, especially since Current allows anyone to log in using a different phone number or email without notifying the account holder or implementing stronger two-factor authentication.

To make matters worse, Current Bank allowed these individuals to add my debit card to their external wallet or accounts and withdraw money, which should have raised fraud alerts. I did not receive any login codes or security warnings when this occurred. It is also possible that phishing or deleted links were used to bypass my device, and if so, that further emphasizes the need for a full device and login audit.

Current denied my dispute with a generic Airtable-style printout and did not provide meaningful evidence showing how they concluded I authorized the charges. There were no IP addresses, timestamps, device logs, or verification code trails included in their response. I was also not granted provisional credit and was given no opportunity to review a full investigation summary.

Since then, I have hired an accountant to review my statements and found discrepancies I never noticed before. I have since terminated employee access to my devices and increased personal security. I have been a loyal customer with no prior disputes, and this experience has been deeply distressing.

I did not authorize these charges. It also shows the charges were made in small then large, it looked like test charges to me. I have never connected any of these accounts to my bank cards or accounts. I have never sent money to the specific name that was current to current, and I do not know of the person. I use current to current but not for that name. Also, I do not have a XXXX account or third-party accounts that do not have my name registered. It does not make sense how someone can add my information at all to any of their accounts without any of my information on it. It is illegal and it is a crime to allow someone to do that. I deserve to be refunded for these unauthorized transactions. This is very traumatic. I am supposed to be protected under EFTA, and they are not able to ignore signs of compromise. They refused to give me documentation related to the denial with supporting evidence. It was just statements ; I gave them evidence of the unauthorized charges and showed them security issues on their end. 

I also disputed all XXXX XXXX charges that they claim was never disputed. There is only one charge to XXXX on current to current that they claimed I had a history with. All the XXXX XXXX  charges were disputed as well. All the XXXX charges were disputed as well. They stated there was a history of charges but there is not any history that wasn't disputed. I am pretty sure a computer is communicating with me, and this is a serious matter, I am requesting a real human investigates these charges. I am also willing to press charges. I also sent a signed statement, and they said they need that too move forward in investigation and have not. 

Dates, amounts and actions : XX/XX/year> : The unauthorized charges began. 
XX/XX/year> : The unauthorized charges stopped. 

XX/XX/year> : I noticed the unauthorized transactions and sent the amount I was allowed to send in a single day of my funds to a friend to keep safe and before I could send the rest, they were taken from my account. I also contacted current and checked my bank statements for errors. 

XX/XX/XXXX, XXXX XXXX, XXXX  : I was hospitalized for a dog bite. 

XX/XX/year> : I sent my dispute into current bank along with a sworn statement. I also changed my email back when I noticed that it was changed. I spoke to XXXX and XXXX about my dispute, those are current representatives. Current had to update my dispute because all of the charges were not included. They sent me a transcript of our conversation after I requested it which I included in documents. 

XX/XX/year> : I started contacting XXXX, XXXX, XXXX, XXXX, XXXX XXXX XXXX XXXX XXXXXXXX after I noticed my bank wasn't going to help. I am still waiting on responses, and I started reaching out to an accountant to help me as well. 

XX/XX/year> : They had a brief investigation and sent me an update that they denied my dispute that soon without proper investigation obviously in that little time frame. I sent them a signed statement and a pdf with all information such as a detailed appeal, a clear timeline and evidence checklist and requests for investigation records. ( which they did not send me, they only sent me a generic airtable sheet with no evidence ). 

XX/XX/year> : They sent me another update on my dispute with the same outcome, denied and generic airtable answers that were inaccurate, and I proved otherwise. 

XX/XX/year> : I received an update on my police report that I had to live in the jurisdiction that the incident happened in to make a report and was denied due to not living in the jurisdiction. I have started looking into other options and started a Identity theft report but I need a police report to add to it. I am waiting on my jurisdiction to send me a copy of the report denial from here because it did not happen here. 

XX/XX/year> : I was given the same update on my dispute, and they closed it out. 

XX/XX/year> : I changed my address back when I noticed it had been changed and sent a new card to myself.

Company response to consumer: Closed with explanation