Voice Phishing Collateral Damage: Innocent Business Owner's Bank Accounts Frozen for Weeks

Understanding Voice Phishing Collateral Damage

South Korea is experiencing a troubling trend where victims of voice phishing fraud have stolen money transferred to the bank accounts of completely innocent third parties. As a result, legitimate business owners are having their accounts frozen by financial institutions through no fault of their own, causing severe financial hardship.

A Real-World Case Study

A business owner (referred to as "A") who has operated a lodging facility in Seoul for 5 years recently experienced this nightmare scenario. A long-term resident fell victim to voice phishing fraud, and the scammer sent the stolen money to A's account under the guise of monthly rent payment. A simply received the rent as usual, but immediately afterward received notifications from banks and securities firms imposing "non-face-to-face financial transaction restrictions."

• The account receiving the fraud funds: completely frozen
• All of A's other financial accounts: online transactions prohibited
• Employee salary payments: limited to cash withdrawals at bank windows only
• Internet-only bank accounts: no physical branches available for cash withdrawal

When told the freeze would last at least 17 days, A faced the impossible situation of being unable to pay employee salaries.

How This Scam Works

The Path to Innocent Victims

Under the current "Special Law on Prevention of Telecommunications Financial Fraud Damage and Victim Compensation," financial institutions are required to freeze accounts suspected of being used for fraud. The problem lies in these mechanisms:

1. Not only the initial fraud victim's account, but also any secondary accounts receiving transfers from that account are classified as "fraud-used accounts"

   • When scammers transfer stolen funds to a third party, that recipient's account is also treated as a fraud account

2. When electronic financial transaction restrictions are applied, all online transactions across ALL accounts held by that person at ANY financial institution are restricted

   • Business owners with multiple bank accounts see all of them affected simultaneously

Malicious "Account Freezing Attacks" by Scammers

More troubling still, scammers themselves deliberately exploit this legal loophole:

1. Scammer demands money from a small business owner
2. Business owner refuses to pay
3. Scammer intentionally transfers stolen voice phishing funds to the business owner's account
4. Scammer or accomplice reports to financial institutions that fraud funds have been deposited
5. Business owner's account is frozen

This tactic is particularly effective against service industry workers and small business owners who must publicly display their account numbers for business purposes.

Scale of the Problem

According to the Financial Supervisory Service (2023-first half 2024):

• Total accounts frozen at Korea's 5 major banks (KB Kookmin, Shinhan, Hana, Woori, NH Nonghyup): 142,512
• Accounts where freeze was lifted after filing objections: 23,698 (approximately 16.6%)
• Approximately 83.4% remain frozen for extended periods

Processing times for objection requests vary significantly by bank:

• KB Kookmin Bank: 18.6 days (longest)
• Shinhan Bank: 16.1 days
• NH Nonghyup Bank: 9.5 days
• Woori Bank: 5.1 days
• Hana Bank: 3.5 days

Warning Signs and Detection

Monitor for Suspicious Deposits

• Check accounts regularly for unexpected deposits
• Watch for unusual deposit sources, amounts, or payment methods from transaction partners

Watch for Unusual Financial Notifications

• Sudden "transaction restriction" notices from financial institutions
• Any fraud-related reports that mention your account

Understand Your Rights

• Prepare documents proving you are unrelated to fraud (business registration, tax records, client contracts)
• Do not miss objection filing deadlines

Prevention Strategies

Proactive Measures

1. Avoid concentrating accounts at a single bank

   • If you maintain multiple accounts at one institution, restrictions apply to all simultaneously

2. Verify transaction partners thoroughly

   • For new clients or large transfers, confirm the source before accepting deposits
   • Consider returning suspicious deposits or verifying the source before acceptance

3. Separate business and savings accounts

   • Use both traditional banks and online-only banks
   • Ensure access to branches for necessary in-person transactions

Response if Your Account Is Frozen

1. Contact your bank immediately

   • Report suspicious deposits as potential fraud
   • Clearly state your lack of involvement

2. File an objection

   • Gather documentation proving your innocence (business registration, client contracts, tax returns, transaction records)
   • Submit within the objection period (usually several weeks)

3. Preserve all documentation

   • Keep all transaction records, notices, and communications
   • These are essential for future consultations and potential claims

4. Seek legal counsel if necessary

   • If freeze lasts extended periods or affects multiple accounts
   • If considering claims for business losses

Where to Report and Get Help

• Financial Supervisory Service (FSS) Consumer Protection Division: detailed guidance on objection procedures
• Bank customer service centers: account freeze status and release requests
• National Police Agency Cyber Crime Unit: fraud reporting and evidence submission
• Consumer Protection Organizations: consumer damage consultations

Systemic Issues and Future Improvements

The financial authorities have introduced some improvements:

• Expedited notification of objection review results
• "Partial freeze" system (freezing only the suspected fraud amount while releasing other funds)

However, questions remain about whether these measures effectively protect innocent parties. While fraud prevention is essential, restricting the livelihoods and business operations of innocent account holders for weeks demands further legal reform to balance fraud prevention with fair treatment of legitimate business owners.