Jeff Harney is one of hundreds of people who recently contacted Go Public after losing a fight with their bank \u2014\u00a0many saying they felt powerless against new electronic banking agreements they didn’t understand, couldn’t navigate and which they felt protected their bank from any liability.<\/p>\n
“They’ve made this clause, which clears themselves of all responsibility,” said the North Vancouver contractor, pointing to a section in his agreement that RBC used to refuse to pay him after losing $1,500 in a case of e-transfer fraud last May.<\/p>\n Most of Canada’s five big banks \u2014 BMO, CIBC, RBC, Scotiabank and TD \u2014 recently updated their electronic banking agreements, so Go Public asked an expert to assess how well they balance the banks’ liabilities against customer protections.<\/p>\n The news is not good for millions of customers.<\/p>\n “They are so one-sided and benefit the banks to such a degree that there is no way that I would call these bargained agreements,” said Anthony Daimsis, a professor of contract law at the University of Ottawa.<\/p>\n “These are take it or leave it \u2014\u00a0where the taker [customer] really has no option.”<\/p>\n Daimsis says there’s such a “huge imbalance of power” that Ottawa should create better protections to give customers a fighting chance when something goes wrong with their online banking.<\/p>\n Daimsis \u2014 who has studied hundreds of contracts \u2014 spent hours analyzing the agreements from the big five banks.<\/p>\n He critiqued all five banking agreements on four things:<\/p>\n All say the banks are entitled to change the agreements at any time, and most say they will determine how customers are notified.<\/p>\n “I’ll give you an absurd example,” said Daimsis. “If the head of the bank, on the last Thursday of the month, says, ‘This is how I’ll notify of changes \u2014 I’m going to lift my window and yell it out of my office’ is that really notification?”<\/p>\n “The purpose of notifying is not merely to send the information out. It’s to ensure that the information is received properly and consistently with what that agreement is.”<\/p>\n TD’s new agreement takes effect March 2. Daimsis says it gets points for clearly identifying how the terms have changed \u2014 but loses points\u00a0because customers get a raw deal.<\/p>\n “The changes benefit TD,” said Daimsis.<\/p>\n For instance, the old agreement said customers were liable for losses as soon as they “become aware” a banking card or device has been lost, stolen or misused. The new one says they are liable as soon as they “suspect” it.<\/p>\n “My concern is, what is that standard of suspicion? Because TD\u00a0doesn’t tell us,” said Daimsis.<\/p>\n “And what makes this especially difficult is that the banks internally investigate. These are not transparent investigations.”<\/p>\n Longtime TD customer Debora Bloom of Collingwood, Ont.,\u00a0says the new terms “felt a bit smelly” when she read them.<\/p>\n “It felt to me like the banks were starting to tilt the balance in favour of themselves.”<\/p>\n She worries the onus is on customers to prove they didn’t share bank cards or PINs, for example.<\/p>\n “It’s a ‘he said\/she said’ at the end of the day,” said Bloom. “They’ve got a team of expensive lawyers against Joe and Josephine Consumer. You’re going to empty your bank account just to position your point of view.”<\/p>\n Bloom\u00a0says she complained\u00a0last October to the Financial Consumer Agency of Canada (FCAC), asking the regulator to make financial institutions more accountable.<\/p>\n “They need to do a better job,” she said of FCAC.<\/p>\n The FCAC would not confirm whether it had received Bloom’s complaint or whether it was investigating.<\/p>\n A spokesperson for TD Bank said in a\u00a0written statement\u00a0that customers have a key role in protecting against fraud.<\/p>\n “Customers have obligations that are outlined in our agreements, including taking reasonable steps to safeguard their debit and credit cards, and keeping personal identification numbers and passwords confidential, among other requirements.”<\/p>\n The statement says that most customers who experience fraud “end up being reimbursed.”<\/p>\n Daimsis says it took him the longest to go through Scotiabank’s online agreement, which was updated last May.<\/p>\n Most of the terms in Scotia’s agreement aren’t numbered, and one part refers to consumer protections being “subject to Section 13” \u2014 but Daimsis couldn’t find Section 13 anywhere.<\/p>\n “Scotia’s agreement is so bad, it’s shocking,” he said.<\/p>\n Daimsis was also concerned that important information outlining a customer’s responsibilities \u2014 such as never to do online banking using public Wi-Fi \u2014 is in smaller font than the rest of the agreement.<\/p>\n “It shouldn’t require me to read something closely and maybe just catch that in a small font,” said Daimsis. “I would want that front and centre, because not everyone knows the security concerns dealing with Wi-Fi.”<\/p>\n Scotiabank did not address any of the criticism about its online agreement to Go Public, but\u00a0in a statement\u00a0said:\u00a0“We regularly review our policies and procedures to ensure they align with best practices.”<\/p>\n When RBC introduced its new terms last May, it required customers to accept the agreement before they could continue accessing their online banking.<\/p>\n One clause says the bank can’t be held responsible for loss of data or damages “even if we are negligent.”<\/p>\n “They call them agreements,” said Daimsis. “I don’t know if I’m really agreeing to something if I have no choice.”<\/p>\n Harney says he certainly didn’t feel he could argue with RBC after his email was hacked and fraudsters made off with the $1,500 e-transferred to him. He hadn’t read a clause that limits his bank’s liability.<\/p>\n “The bank was saying that [according to its agreement] they are allowed to pay an e-transfer to whoever accepts it \u2014 as long as they answer the security question,” said Harney.<\/p>\n “The only reason I would’ve ever come across this part of the contract is after I’ve experienced a problem,” he said.<\/p>\n In\u00a0a statement,\u00a0RBC said it “takes seriously its responsibility to protect clients from fraud” and provides information about protecting against e-transfer fraud.<\/p>\n Daimsis says much of the important information in RBC’s agreement will likely never be read \u2014\u00a0the contract is 35 pages long.<\/p>\n “It’s too much,” said Daimsis. “You get lost very quickly and you just put it down. At that point you’re just assuming, ‘Well if my online banking works, I guess everything’s OK.'”<\/p>\n RBC said its agreement is long because it “covers multiple topics” but is organized so clients can find relevant information.<\/p>\n BMO was ranked best by Daimsis\u00a0for using clear and simple language. He said the bank’s agreement \u2014 updated in December \u2014 also says customers will not be responsible for “circumstances beyond your control” and appears to take responsibility for “any errors we made, technical problems or system\u00a0malfunctions”.<\/p>\n But\u00a0like all the agreements,\u00a0BMO’s terms are weighted in favour of the bank, said Daimsis.<\/p>\n Most concerning was a clause that says BMO can change the terms at any time and that customers “agree to any changes made when notice is given in our Canadian branches or in any other manner, which we may determine from time to time.”<\/p>\n “No person who has the ability to disagree would agree to such a term,” said Daimsis. “I would not agree to somebody who says, ‘Here’s my agreement with you. I get to change it and I’ll notify you the way I want to notify you.'”<\/p>\n BMO’s\u00a0statement\u00a0to Go Public did not address the criticisms.<\/p>\n Instead, a spokesperson wrote\u00a0that the bank’s focus “is on delivering a great customer experience around our banking services” and that BMO has “an electronic banking guarantee and reimburses customers for any losses resulting from unauthorized transactions.”<\/p>\n CIBC’s\u00a0agreement, which was last updated in 2016,\u00a0raised concerns for clarity of language.<\/p>\n Daimsis cites a clause he says uses very broad terms that are open to interpretation.<\/p>\n It states CIBC will only be liable in cases of its “gross negligence, fraud or willful misconduct.”<\/p>\n “Not just negligence but so grossly negligent \u2014 whatever that means \u2014 that’s the only time they’ll take on some responsibility,” said Daimsis.<\/p>\n The agreement also restricts any\u00a0<\/strong>reimbursements to direct damages.<\/p>\n “Which means they’re not going to address the consequence of their error on your financial well-being,” said Daimsis.<\/p>\n If your account is emptied and you are evicted, for example, the bank won’t pay for costs stemming from the eviction.<\/p>\n “Very often the direct damages are not as large as what the consequences of … what the bank security issue has led to,”\u00a0said Daimsis.<\/p>\n In a\u00a0statement, a CIBC spokesperson said the agreement “reflects industry best practices and regulatory requirements that protect our clients each and every day. It is regularly reviewed to ensure that protections and guarantees for clients keep pace with the evolving banking landscape.”<\/p>\n All the banks say they’ll take responsibility for financial losses in certain situations \u2014\u00a0ranging from employee fraud to transactions on credit cards that are forged or expired.<\/p>\n They also say they invest significant resources in protecting\u00a0customer accounts\u00a0from fraud, but they also emphasize that protections are a shared responsibility; that customers must carefully read their agreements and follow requirements to keep their transactions safe from cybercrime and other losses.<\/p>\n Canada’s banks get away with limiting customer protections\u00a0because they’re in the driver’s seat, says Daimsis.<\/p>\n “These banks know that they’re the only real game in town. So, then, why would they ever lower their standards?” he said.<\/p>\n “And what’s especially disturbing … in the banking industry, we’re dealing with really sensitive subjects. People’s credit-worthiness; their ability to buy a home,\u00a0their ability to pay for the right to just operate in our society. So they’re really at a disadvantage when the bank says these are the terms and that’s it.”<\/p>\n He says the federal government should step in.<\/p>\n “It’s critical to have that oversight body \u2014\u00a0a third party \u2014\u00a0that would balance it in a way that reflects the reality and the sensitive relationship between a bank and a consumer.”<\/p>\n Go Public asked the Ministry of Finance whether Ottawa would consider requiring language that would ensure consumers have guarantees that the bank will protect their life savings, and reimburse them when their online banking systems fail.<\/p>\n A\u00a0ministry spokesperson\u00a0emailed a response, steering us to a\u00a0voluntary code of conduct for debit cards\u00a0created in 1992 and last updated in 2004, that\u00a0a number of financial institutions have agreed to apply to online transactions.<\/p>\n Go Public also asked each of the big five banks whether they would work with a third party on a code of conduct.<\/p>\n None of the banks answered that question.<\/p>\n Their umbrella organization, the Canadian Bankers Association, said in a\u00a0statement\u00a0that banks “already comply with multiple codes of conduct” and are also “subject to strong oversight by the federal government, regulators and related agencies, and work closely with them on consumer protection and education.”<\/p>\n CBC<\/p>\n\n
‘The changes benefit TD’<\/h2>\n
Scotia’s agreement ‘so bad it’s shocking’<\/h2>\n
RBC not responsible ‘even if we are negligent’<\/h2>\n
BMO can change terms at any time<\/h2>\n
CIBC’s broad terms limit liability<\/h2>\n
When are the banks liable?<\/h2>\n