26-01-2024 05:48 PM
TLTR:
A fraudulent contract for £2,300, including an iPhone 14 Pro Max and Nintendo Switch, was taken out in my friend's name at EE store (hours away from her place). She only discovered this when her direct debit payments spiked. Despite her never authorising this, EE sent OTPs to a secondary phone number on her account, used by her underage son, and the OTPs weren't even opened. EE's lack of thorough identity checks and their refusal to provide CCTV footage raise concerns of potential internal fraud. After facing threats to her credit score and mental health strain, my friend's appeals to EE and the ombudsman have been dismissed.
I am sure this isn't an isolated case and I am looking for people facing experiencing similar story. We're creating a coalition to bring this issue to the media and possibly to court. If you're affected or concerned, join us in this fight for justice. Together, we're stronger!
Full story:
My friend is a single mom of two boys working part-time in London. On July 1st, 2023, someone posing as her entered an EE store in Solihull Touchwood and fraudulently took out a contract on her existing EE account, amounting to approximately £2,300. This contract included an iPhone 14 Pro Max and a Nintendo Switch as an add-on.
She became aware of this matter when she noticed a significant increase in her regular direct debit. Upon contacting EE, she was informed about the activity on her account. EE informed her that on July 1st, 2023, two separate One-Time Pin Codes (OTPs) were sent to one of the secondary phone numbers on her account. EE alleges that the OTPs were used to secure the fraudulent contract. Further investigation revealed that during the window the OTPs were sent to her son's number, no phone calls were made or received by him that could explain the OTP being passed on to the fraudsters. Moreover, the text message containing the OTP was not even opened by her son.
EE has now cut off all her lines after sending her multiple threatening messages, taking actions that will affect her credit score. She has exhausted all possible avenues before considering legal action (which I’d like to pursue) but has been rejected and let down by both EE’s fraud service and the EE ombudsman.
This situation has severely impacted my friend's mental health, and she has now run out of energy to fight the case. Therefore, I am offering my support in trying to resolve the situation.
YOU ARE NOT ALONE: After a limited investigation on my part, I’ve already found a few people facing the same situation just by browsing the EE forum. I am sure hundred+ people are concerned. I now want to join forces, take this to the media, and potentially to court to fight this injustice. TOGETHER, we can be stronger! Join the fight.
Further findings and information on EE's failure to protect their business and customers against fraud:
27-01-2024 08:43 AM - edited 27-01-2024 09:06 AM
@Mil3n3 Sorry to correct you again
“
The account holder is the owner of all contracts on their account even if they are not the user of that number. The account holder takes full responsibility of these payments as all bills are in their name.
Any OTP codes should be sent to the primary contact number on the account and this is usually the account holder’s number as that’s when been set up. As it’s usually the first contact the account holder has with EE.
I’ve been doing some checking and you say EE refuse to give you CCTV footage. There are 2 possible reasons for this.
1 its only recommending that CCTV footage is kept for 30 days. ( you say this happened just 1st 2023 )
2 you can only request CCTV footage of yourself by law not anyone else in that footage.
Crazy I know but that’s what the GDPR is about as that could prove everything but then the first item I listed is very relevant.
27-01-2024 10:05 AM
Hi @Mil3n3
Thanks for coming back to us.
I am very sorry to hear how this has impacted your friend and understand how stressful this must be for her, EE take fraud and security very seriously and any reports of fraud would be fully investigated by our security team. Our Fighting Fraud | Cyber Security Help | EE has further information.
We are unable to access individual cases on the community and would advise your friend to contact our mobile guides directly. If the case has been referred to the ombudsman, they are independent from EE and would review all evidence from both sides. Please see the EE Complaints Code of Practice January 2022 page for more details.
Thanks.
Leanne.
03-02-2024 08:10 PM
Hi @Leanne_T thank you for your message. Something you can defo help me with would be to understand what is the difference between:
OTP Authentication and Secondary OTP authentication?
Thank you,
04-02-2024 08:40 AM
Hi @Mil3n3,
OTP verification is when we send a single use pass code to the 'lead' phone number on an account.
I'm not aware of a secondary OTP authentication process.
James
04-02-2024 01:28 PM
Thank you @James_B how would you read the attach table then? How many code has been sent to the user how many of them failed and how many of them succeeded according to you. And same question as above on what is the difference between OTP Authentication and Secondary OTP authentication?
04-02-2024 01:30 PM
Sorry @James_B I missed the screenshot. Here you go
04-02-2024 02:14 PM - edited 04-02-2024 02:15 PM
Hi @Mil3n3,
Our mobile guides are best placed to answer any specific questions about the verification steps that were taken on your friends account.
They can contact them on 150 from their EE phone.
James
05-02-2024 02:45 PM
@James_B are you working for EE or are you just a forum participant (I am not being sarcastic that's a real question).
As if you are working for EE I find it a bit worrying that this type of basic questions around EE processes cannot be answered by the support team. The process should be transparent and shared by the entire staff.
ie would you be able to let me know how many OTP attempt are deemed acceptable without a member of staff asking for an ID? Is there clear guidelines a EE to protect their customers? Can you please share these guidelines here?
05-02-2024 03:58 PM
Hi @Mil3n3,
Yes, I work for the EE Community Support Team.
As discussed earlier, the best course of action to find out further information on the security steps that were taken on this specific account would be for the account holder to contact our Customer Care Team.
Thanks
James
05-02-2024 05:04 PM
Hi @James_B my question is not to find out information on the security steps that were taken on this specific account. My question is what are the security guidelines at EE to open a new line on an existing account. And in addition to my question, what are the official guidelines in terms of OTP attempt failure. This is not specific to an account this is how EE keeps their Customer and customer data safe. I'd like the official guidelines to be share with me. Thank you.