An employee of the Bank of Italy in Brescia, Domenico Greco, has sued the Cassa di subsidies e savings among the staff of the Bank of Italy (CSR), the internal bank of the institute led by Fabio Panetta, because a hacker managed to move his bank account by subtracting the beauty of 107,020 euros through some bank transfers. In reality, there were four fraudulent operations for a higher amount (136,990 euros), but one was not successful due to an error committed by the IT thief.
The trap phone call from the fake Nexi official
The events took place between 22 and 27 February 2023. Mr. Greco received a phone call from a fake Nexi official announcing that some links would be sent to his phone that he would have to click to unblock his credit cards. registered. He followed the procedure without entering credentials and codes. Everything then worked perfectly and therefore he had no doubts whatsoever. A few days later, however, he realized that 136,990 euros had been taken from his internal account at the Bank of Italy through four bank transfers. The first was 29,970 euros in favor of Evangelio Maria with the reason for “renovation works down payment”. The second was 35 thousand euros in favor of Forte Monica, reason for “balance for building renovation”. The third was 35,020 euros in favor of Lamberti Cesare always with the reason “balance for building renovation”. Finally, the fourth of 37 thousand euros in favor of Corrado Antonello with the reason “purchase of garage”.
The email from the cloned account that also stole Bankitalia
All four fraudulent transfers were addressed to the same number of accounts at the Italian Post Office in Salerno with reasons that seemed suitable for the time of the superbonus. But the hacker made a mistake in typing the account numbers of the first transfer, which was thus rejected by the Italian Post Office and credited back to the account of the unfortunate Greco, who in the end was literally robbed of 107,020 euros. But how could the entry into the current account take place? In the attempt to mediate the case, the lawyer Mirko Ventura who assists the Greco tells it like this: «Mr.’s work colleagues. Greco reported that at the Brescia branch, where he worked, an email had been received from the applicant’s inbox, even before the fraudulent phone call received by him, as described above, which Mr. Greco flatly disavowed, having as its object a request for reset token, which the bank naively initiated and completed”. According to this report, therefore, the internal bank of Bankitalia collaborated unknowingly with the hacker mistaken for Mr. Greco facilitated the theft.
However, the internal bank of Bankitalia refuses to compensate for the fraud
According to the complaint by Greco’s lawyer, «the employees of the CSR bank where the applicant works also reported that they had received, still at the office, a phone call from a person who introduced himself as Greco Domenico to ask for information on the relationships of account, using a tone of voice that did not correspond to that of the moment”. Once the matter was over, the CSR “attempted to recall the bank transfers arranged without success, reporting for this purpose that the beneficiary bank, in our case the Poste Italiane SpA, did not respond within the 10 day deadline”. It’s everyone’s fault, but in the mediation the internal bank of Bankitalia (it can only serve the employees and pensioners of the Italian central bank) refused to recognize its responsibility to reimburse the amount to poor Greco. A court will decide.
