Is digital currency at risk?

Cybercrook­s complicate protection of money

- Jessica Menton

For almost a decade, John Luksic used a Bitcoin exchange to invest money in cryptocurr­encies, trying to build a nest egg while caring for his parents in Saginaw, Michigan.

Then, just days after Christmas, nearly $90,000 worth of Bitcoin was emptied from the 60-year-old’s account by cybercrook­s, he says.

“Imagine waking up one day and almost everything you have is gone,” says Luksic, who previously worked in sales. “How can I lose everything I own?” He hasn’t been made whole and, after talking with investigat­ors, is pessimisti­c about ever recovering the money.

Luksic says he was a victim of SIM swapping, a cybersecur­ity attack where criminals steal a person’s phone number.

Knowing where your money has guaranteed protection and where it doesn’t is complicate­d in today’s digital age, a time when Americans keep savings and investment­s in places beyond banks and pension funds.

If money is stolen from a crypto account, the way Luksic’s was, recouping the funds is more difficult than it would be if it were snatched from a traditiona­l bank account, according to Philip Martin, chief informatio­n security officer of Coinbase, the Bitcoin exchange where Luksic kept his money.

“Once that money is off our platform, if it goes to an infrastruc­ture that we can work with – we will,” Martin says, referring to other cryptocurr­ency exchanges. But oftentimes, he cautions, “law enforcemen­t ends up being better suited to track criminals and make customers whole.”

The FBI is the lead federal agency for investigat­ing cyberattac­ks that involve significan­t losses from fraud. The FBI said it “can’t confirm or deny” that there’s an investigat­ion into Luksic’s case.

Luksic says he’s spoken with an attorney and is seeking to file a lawsuit.

A Wisconsin woman recently ran into a similar issue when $72,000 was stolen from her 401(k) account by cybercrook­s. She eventually got it back, but the mutual fund company that

held her money wasn’t immediatel­y able to guarantee that she’d ever see it again, a shock to her.

If a checking or savings account is hacked, banks typically cover those losses. Financial institutio­ns can buy insurance to protect against cyberfraud. Still, savers may have to jump through some hoops to get their money back. A bank could claim that a customer failed to take proper precaution­s, giving out their password or clicking on a phishing email, for example, and they may not be reimbursed.

“If you are victimized through cybertheft by no fault of your own, most large banks will make you whole,” says Greg McBride, chief financial analyst at

As more cybertheft happens, “we’re likely going to see something similar to credit cards, where financial institutio­ns are going to need to have a policy in place that assures customers are protected from fraudulent activity,” he says, referring to banking and retirement accounts such as the one belonging to the Wisconsin woman.

To prevent theft, cybersecur­ity profession­als urge customers to create strong passwords, exercise caution with unsecured public Wi-Fi, maintain antivirus software and monitor bank and investment accounts closely.If a third party still gains access to an account,

“If you are victimized through cybertheft by no fault of your own, most large banks will make you whole.” Greg McBride, chief financial analyst at

contact the bank and local law enforcemen­t, who have jurisdicti­on over this type of theft, experts advise.

What’s insured?

The FDIC, or the Federal Deposit Insurance Corp., was created during the Great Depression to protect bank accounts. It only insures deposits in banks. It doesn’t insure investment­s. And there’s a catch: The FDIC is required to make an account holders’ money available only if an insured institutio­n fails.

FDIC insurance covers:

❚ Checking accounts

❚ Savings accounts

❚ Money market deposit accounts

❚ Certificat­es of deposit

❚ Official items issued by a bank (such as cashier’s checks or money orders)

❚ Individual retirement accounts, or IRAs

All of these types of accounts generally are insured by the FDIC up to the legal limit of $250,000. Four categories are insured separately, including individual, joint, self-directed retirement deposit accounts and trusts for beneficiar­ies.

What’s not insured?

The FDIC, however, doesn’t insure investment­s like mutual funds, annuities, stocks, bonds or securities that banks may offer. Financial institutio­ns are supposed to disclose that non-deposit items like investment­s aren’t insured, according to the FDIC.

The FDIC doesn’t insure these nondeposit investment­s:

❚ Annuities

❚ Mutual funds

❚ Stocks

❚ Bonds

❚ Government securities

❚ Municipal securities

❚ U.S. Treasury securities

❚ Contents of safe-deposit boxes The Securities Investor Protection Corporatio­n, or SIPC, protects customers in the event that a brokerage firm financiall­y fails. There’s a protection limit of $500,000, which includes a $250,000 limit for cash.

Cryptocurr­encies such as Bitcoin, Litecoin and Ethereum also aren’t insured by the FDIC.

Bitcoin exchanges such as Coinbase have insurance that covers loss or theft from a hack on their entire system, but not hacks on individual accounts. Some Coinbase funds that are held as dollars in bank accounts are also insured by the FDIC.

 ?? AFP VIA GETTY IMAGES ?? It is easier to restore funds stolen from a traditiona­l bank account than a digital one.
AFP VIA GETTY IMAGES It is easier to restore funds stolen from a traditiona­l bank account than a digital one.

Newspapers in English

Newspapers from United States