Consumer complaint received 2025-11-26 00:00:00
Product: Credit card — General-purpose credit card or charge card
Issue: Problem with a purchase shown on your statement — Card was charged for something you did not purchase with the card
Company: BANK OF AMERICA, NATIONAL ASSOCIATION
State: TX

Complaint narrative:
Summary of Incident as documented in Police Report and FTC Identity Theft Report : Between XXXX and XX/XX/XXXX, unauthorized charges and credit-limit increases occurred on my Bank of America personal and business credit-card accounts totaling approximately {$120.00} XXXX. 

Objective Analysis Highlights : XXXX XXXX ( found as an attachment to the police report ) provides detailed information re : impact following red-flag behaviors ( under the FACTA Red Flags Rule ( 16 C.F.R. 681.1 ) ) on my credi cards starting XX/XX/XXXX. 
Sudden spikes in credit card charges XX/XX/XXXXXXXX  charges 243 % increase over XXXX ; first time in 26 years account exceeded credit limit ; sustained elevated charges XXXX XXXX  well over XXXX  monthly spend average. 
Rapid credit-limit increases Bank of America automatically increased my credit limit 68 % limit ( XX/XX/XXXXXXXX  ) without advance notice or consent ; balance peaked at {$64000.00} ( 193 % over original limit ) Inconsistent payment ratios Payment behavior consistent with prior years while charges XXXX 49248 % ; pattern inconsistent with historical use Hardship and Financial Capacity Since XX/XX/XXXXXXXX  I have had no earned income and filed for Social Security SSI benefits in XX/XX/XXXX. My finances are limited to essential living and medical expenses. Bank of America was informed of this income change and of my XXXX through online Know Your Customer updates in XXXX after I filed my SSI application, and written correspondence required under consumer compliance. 

The facts and evidence attached establish that the financial exploitation of a vulnerable adult occurred solely because Bank of America did not follow the federal protections designed to prevent identity-theft harm. If Bank of America been in compliance with the CFPBs XXXX XXXX XXXX requiring systemic fraud-claim safeguards, timely investigation, and accurate reimbursement processes, this financial exploitation would not have occurred. The failures in my case reoccur almost verbatim to the systemic misconduct previously identified by the CFPB in that enforcement action in XXXX. 

More specifically, had Bank of America acted when the first identity-theft red flags appeared in XX/XX/XXXX, the fraud would have been limited to that one billing cycle. Instead, the evidence shows that 100 % of the fraudulent charges from XXXX through XX/XX/XXXXXXXX  were preventableoccurring only because Bank of America failed to restrict the account, investigate anomalies, and comply with federal identity-theft obligations. These failures were further compounded by Bank of Americas automatic credit-limit increases, which prolonged the fraud window and accelerated the progression of unauthorized charges. 

As a result, I am not only the victim of identity theft and financial exploitation as a vulnerable adult, but also the victim of the same recurring systemic failures and non-compliance the CFPB sought to prevent in CFPB v. Bank of America, N.A., Consent Order No. 2022-CFPB-0007 ( XX/XX/XXXX ) which found widespread breakdowns in Bank of Americas fraud-claim investigation and reimbursement processes, failures that reoccur almost verbatim in my case, which I believe is in violation of the CFPBs court order that was specifically designed to protect consumers from Bank of Americas systemic failures by requiring the bank to implement safeguards ensuring that consumers do not suffer financial harmor liabilityfor fraudulent charges when the consumer is not at fault. 

My XXXX history with Bank of America demonstrates my integrity and long-standing good-faith conductconsistently paying my credit-card balances in full each month and never paying late. This pattern did abruptly changed as of XX/XX/XXXX, reinforcing that I did nothing wrong and did not contribute in any way to the identity theft or fraudulent account activity.

Company response to consumer: Closed with monetary relief