ACATS Brokerage Scam - How to Protect Yourself

How the Scam Works

1. Identity Theft: Fraudsters buy or harvest your personal details online, including your Name, Social Security Number (SSN), and address.
2. Account Hunting: They obtain your brokerage account number, often via leaked statements, compromised email accounts, or financial aggregator apps.
3. The New Account: The criminal opens a legitimate, new brokerage account online under your name at a completely different firm.
4. The Transfer Request: Using the new account, they submit an ACATS request to pull the assets from your original broker. Because the SSN and name match, the system automatedly approves the transfer in as little as three days.
5. The Clean Out: Once your stocks arrive in the new account, the thief quickly liquidates them and wires the cash away or converts it to cryptocurrency.

Why It Is Highly Dangerous

• No Notification: Some brokerages do not alert you to outbound ACATS transfers, or they only notify you after the assets have already moved.
• Slow Pilfering: Scammers often steal your money in small, staggered increments disguised to look like regular market fluctuations.
• Bypasses 2FA: Two-factor authentication (2FA) only protects your account from unauthorized logins. Because the criminal requests the transfer from the outside via a newly created account, your login 2FA never triggers.

How to Protect Your Wealth

• Enable a Security Lock: Many top brokerages offer a "Security Lock," "Money Transfer Lockdown," or "ACATS Block" feature. Firms like Fidelity allow you to toggle this on easily in settings, while Schwab or Vanguard require you to call customer service to place a strict lock on outbound transfers.
• Hide Account Numbers: Keep your brokerage statements hidden. Avoid linking your major investment portfolios to third-party budgeting websites or aggregators that could get hacked.
• Monitor Statements Frequently: Actively review your portfolio balances at least once a week to spot unauthorized adjustments or dividend anomalies.
• Freeze Your Credit: Ensure a freeze is active across major credit bureaus (Equifax, Experian, TransUnion) to make it much harder for criminals to open new financial accounts in your name.

What to Do If You Are a Victim

If you discover an unauthorized transfer, time is critical. Immediately contact your original broker's fraud division to demand they reverse the ACATS transaction. You should also file an identity theft report with the Federal Trade Commission (FTC) and contact the Financial Industry Regulatory Authority (FINRA) to flag the fraudulent account.