Woman Fights Bank for 18 Months, Wins Back $48,000

When Claudia Lee checked her bank account from El Salvador in 2024, her heart sank. The 26-year-old Darwin woman's entire savings account had been emptied, leaving just 39 cents of her $48,000.

A phishing scammer had tricked her into entering her login details on a fake ING website after she struggled with tech issues accessing her banking app. Within 48 hours, the thief had changed all her contact information, opened a joint account in her name, raised her transaction limit from $5,000 to over $20,000, and withdrawn everything.

The worst part? ING never called to check if something was wrong, despite the suspicious activity happening while Lee had already notified them she was traveling overseas.

Stranded abroad with almost no money, Lee had to scrape together enough cash to travel from El Salvador through Guatemala and the United States to get home. She arrived in Australia broke and facing the daunting task of rebuilding her life from zero.

But Lee refused to accept that her money was simply gone. For 18 months, she battled ING to take responsibility for missing obvious red flags that could have stopped the theft.

Her solicitor Tom Hutton described ING as "unresponsive and adversarial" throughout the process. The bank insisted it wasn't at fault, even though multiple warning signs should have triggered security alerts.

Lee escalated her case to the Australian Financial Complaints Authority, the industry regulator. In November, they ruled decisively in her favor, finding that Lee had not acted with extreme carelessness and that ING's communication had been poor.

The bank was forced to reimburse her the full $48,000 plus additional compensation for the stress she endured.

Why This Inspires

Lee's victory matters far beyond her own bank account. Her persistence in holding a major financial institution accountable sets a powerful precedent for scam victims everywhere.

She's particularly concerned about Australians more vulnerable than herself: older people, those with limited tech skills, and non-native English speakers. "As these scams are becoming more sophisticated, it doesn't feel like the protections are becoming better for everyday people," she said.

ING has since apologized, admitting their communications "did not meet our standards." While the bank claims identifying phishing scams is "increasingly difficult," Lee's case proves that institutions can and should do better.

Lee has switched banks and now advocates for stronger scam protections, transforming her nightmare into a fight for systemic change that could shield millions from similar devastation.