There is a group of at least 40 individuals, most of whom are Haitian nationals, in Miami, FL, who have caused an estimated $50 million in loss across at least 11 financial institutions. This group sends phishing emails to collect the online banking credentials of others OR spoofs financial institutions’ phone numbers and calls others to collect this information in addition to answers to layered security questions for verification. The group then accesses accounts and withdraws funds in cash from the accounts via Samsung Pay and Zelle. The group recently started to withdraw funds in cash via card-free ATMs, at which users can use a code which is sent to their mobile phone in place of their debit card, to withdraw funds on the east coast of the US.
US federal law enforcement has arrested at least seven members of this group.