Citigroup claims New York attorney general’s online fraud suit is ‘misguided’

CITIGROUP asked a judge to throw out a suit by the State of New York over online protections for consumers, arguing the case was a “misguided attempt” by attorney general Letitia James to rewrite federal law.

James sued the company’s Citibank unit in January, claiming that it has not enacted sufficient safety measures and security protocols to prevent fraudsters from stealing money through online and mobile banking, including wire transfers and payment apps such as Zelle and Venmo.

The state is targeting the bank’s data security measures at a time when consumers are losing billions to financial fraud and scammers are using increasingly sophisticated tools, including artificial intelligence, to dupe victims. Americans lost US$12.5 billion to online fraud in 2023, according to the Federal Bureau of Investigation.

The bank on Tuesday (Apr 2) called James’s suit an attempt to modify the Electronic Fund Transfer Act (EFTA) in order to add new consumer protections. And it argued wire transfers are covered by an entirely separate law, Article 4A of the Uniform Commercial Code (UCC).

“The proper forum for pursuing the goals NYAG seeks to achieve in this litigation is in Congress, not a courtroom,” Citigroup said in a court filing on Tuesday.

The bank claims EFTA governs electronically-initiated fund transfers by consumers, including ATM transactions, but not wire transfers. And under the UCC, banks that follow reasonable security procedures to verify customer identities are not responsible for losses.

GET BT IN YOUR INBOX DAILY

Start and end each day with the latest news stories and analyses delivered straight to your inbox.

Sign UpVIEW ALL

Stopping phishing difficult

The bank said it has adopted “robust countermeasures” to tackle attempts to take money from customers’ accounts. But the bank said it is particularly difficult to catch phishing scams, in which customers are tricked into providing security information such as codes or passwords, to scammers.

“Citibank devotes substantial resources to combating online fraud and to protecting its customers, and will continue to do so,” it said in the court filing. “Citibank’s significant anti-fraud practices have stopped countless fraudulent transactions and protect consumers from scammers every day.”

The state is seeking an order forcing Citigroup to provide an accounting of all customer claims for lost money connected to unauthorised payment orders and debit authorisations that were denied in the last six years. It’s also seeking restitution and damages for the customers, plus penalties. BLOOMBERG