u/spacious-gap-544

Hey everyone, wanted to share a pretty alarming security experience I just had with Robinhood Banking so others can be aware.

I’d been loving Robinhood Banking for about two months—direct deposits set up, seamless transfers between spouse's bank, interest, the whole deal. But things took a scary turn recently.

The Initial Breach (July 21) Out of nowhere, I got multiple texts for declined transactions due to insufficient funds. I checked the app and saw a barrage of unauthorized online charges to AliExpress, totaling thousands of dollars. They tried with $3k transactions and when it got failed tried $1700 transactions etc., every time with half of the previous failed amount. Successful transactions got marked as Pending.

Note: I have never used my virtual card anywhere, it was locked in the app, and I never even requested a physical debit card.

I requested a callback, waited 45 minutes, and the agent was super helpful. They canceled the transactions, restored my balance, changed my virtual card number, and confirmed it was locked. I felt relatively safe, but moved most of my money over to my investment account just in case.

The Major Red Flag (July 25 Saturday) Four days later, I checked the app and froze. On July 23 (after a paycheck deposit on July 22), the scammer retried the exact same transactions using the OLD, canceled card number, and several of them actually settled. The account balance now is negative $4K. This time, I didn't even get declined text notifications because Robinhood only supports app push notifications (which were silenced by my phone's Sleep Mode).

Resolution & Takeaways I called support on Saturday July 25th, they could not do anything , asked me to mark as unauthorized in the app and fraud investigation team will check further.

I called back on Monday morning to follow up, they said it will take 10 days to resolve, but still I persuaded those transactions are already marked as fraud on July 21st and the agent escalated the case directly to the fraud team. In just 4 hours after that call, I received an email stating the case was resolved and my money was fully credited back. I immediately moved all the money out of the account and will be keeping a $0 balance going forward.

Card fraud happens anywhere, but two things about Robinhood’s setup deeply concern me:

1. No SMS/Email alerts for transactions: Relying solely on push notifications means if your phone is on Do Not Disturb or Sleep Mode overnight, you won't know you're being drained.
2. No option to opt-out of a debit card: Most traditional banks let you open a checking account without an active debit card attached. Robinhood forces a virtual card to remain active/linked at all times.

I won't be using Robinhood Banking again until they implement SMS/email transaction alerts and better card controls.

TL;DR: My locked, unused Robinhood virtual debit card was compromised for thousands via AliExpress. After replacing the card, fraudsters successfully charged the old, canceled card number days later. Due to Robinhood's lack of SMS alerts, keep a close eye on your account balance regularly.

https://preview.redd.it/02mi4n3vpegh1.jpg?width=513&format=pjpg&auto=webp&s=f2e1682d06fb7d6f8600327ad646c380de35c931