TD Bank Fraud Exposes Gaps in Canadian Consumer Protections

TD Bank Fraud Case Exposes Gaps in Canadian Consumer Protections

Rene and Cecilia Diguangco, a retired couple from British Columbia and loyal TD customers for three decades, discovered in late October 2024 that $17,000 had been siphoned from their home equity line of credit through seven unauthorised transactions spanning September and October. The withdrawals occurred without any prior alerts from the bank, leaving the couple stunned and financially strained. Cecilia Diguangco, who now works part-time catering to offset the losses, described the shock: "We never received a single notification. One day our account was fine, the next we were short thousands of dollars with no explanation."

The Diguangco Family's Ordeal

The couple insists they never shared passwords or authorised the transfers, maintaining strict security habits throughout their long banking relationship. The fraud exploited their HELOC, a product tied directly to their home, amplifying the personal risk. In the weeks following the discovery, the Diguangcos contacted TD repeatedly, providing detailed statements and denying any involvement. Their experience highlights how sophisticated fraud schemes can bypass traditional safeguards, particularly when no real-time monitoring triggers customer contact. Cecilia has spoken about the emotional toll, noting that the sudden loss forced her back into the workforce at an age when retirement should have brought stability. The absence of alerts remains a central grievance, as modern banking apps typically notify users of large or unusual activity. This case has drawn attention to the vulnerabilities faced by older Canadians who rely on established institutions yet find themselves unprotected when systems fail to communicate.

TD Bank's Investigation and Refusal

TD Bank conducted an internal review and concluded that the transactions originated from a "known device" using familiar credentials, leading the bank to refuse reimbursement. Officials cited the bank's security protocols, arguing that the use of recognised access points indicated possible customer negligence or shared information, despite the Diguangcos' firm denials. A TD spokesperson stated that "our systems confirmed the activity aligned with previously used devices and login patterns, consistent with our zero-liability policy only when unauthorised access cannot be verified."

The couple rejected this assessment outright, maintaining that no family members or third parties had access to their accounts. Rene Diguangco emphasised their consistent use of the same secure home network and devices over many years. TD's position reflects broader industry practices where banks place the onus on customers to prove fraud occurred without their knowledge. The refusal left the Diguangcos without recourse through the bank itself, prompting them to escalate the matter externally. This outcome underscores tensions between institutional security claims and individual assertions of innocence, particularly when digital footprints can be manipulated by sophisticated criminals. The bank's decision has been criticised for lacking transparency in how "known device" determinations are made, leaving customers feeling dismissed after decades of loyalty.

OBSI Review and Structural Limitations

The couple pursued their complaint through the Ombudsman for Banking Services and Investments, which reviewed the evidence but upheld TD's refusal. OBSI's findings were non-binding, meaning the bank faced no obligation to comply with any recommended compensation. This structural limitation left the Diguangcos without enforceable recourse, highlighting the advisory nature of Canada's banking ombudsman system. The review process examined transaction logs and security records yet reached the same conclusion as the bank regarding device familiarity.

Critics note that OBSI lacks the authority to compel restitution or impose penalties, reducing its effectiveness in high-stakes fraud cases. The Diguangcos described the experience as frustrating, with limited avenues for appeal once OBSI concluded its assessment. This case illustrates how the current framework prioritises institutional positions over consumer protection, particularly when evidence is contested. Without binding powers, OBSI serves more as a mediator than an adjudicator, often resulting in outcomes that favour banks equipped with extensive internal data. The couple's situation has prompted calls for strengthening the ombudsman's role to better address emerging digital fraud threats affecting Canadian households.

Bill C-15 and the Consumer Protection Gap

Bill C-15, aimed at modernising aspects of Canada's financial regulatory framework, introduced measures to enhance transparency and oversight in banking practices but stopped short of shifting the burden of proof in fraud disputes. The legislation focuses on improved disclosure requirements and expanded oversight by the Financial Consumer Agency of Canada, yet it preserves the existing model where customers must demonstrate that fraud occurred without their involvement. Proponents argue the bill strengthens reporting mechanisms, but consumer advocates contend it fails to address core vulnerabilities exposed by cases like the Diguangcos'.

The absence of automatic reimbursement provisions or mandatory bank liability thresholds leaves retirees and fixed-income households exposed. Federal policy discussions around Bill C-15 emphasised balancing innovation with security, yet critics highlight that the resulting framework does not align with evolving fraud patterns involving compromised credentials. The Diguangco incident demonstrates how gaps in the legislation allow banks to deny claims based on technical interpretations of device data. This shortfall has implications for broader consumer confidence in Canada's banking system, particularly as digital transactions increase. Lawmakers have acknowledged the need for further refinements during upcoming statutory reviews, but immediate protections remain limited under the current provisions.

Democracy Watch's Call for Reform

Duff Conacher of Democracy Watch has criticised Bill C-15 as insufficiently robust, calling for a fundamental shift in how fraud liability is assigned. He argues that banks should bear the burden of proving customer negligence rather than requiring victims to disprove involvement. "Canadian law still treats customers as guilty until proven innocent in fraud cases," Conacher stated, pointing to the Diguangco matter as emblematic of systemic imbalance. Democracy Watch advocates for legislative amendments that mirror successful international approaches, emphasising that current rules discourage banks from investing in stronger preventive technologies.

Conacher has connected the issue to wider federal policy debates on financial accountability, urging Parliament to revisit liability standards during the next review cycle. The organisation contends that without such changes, vulnerable populations including seniors will continue absorbing losses from sophisticated scams. Their campaign highlights how TD's refusal and the subsequent OBSI outcome reflect a regulatory environment tilted toward institutions. By pushing for burden-of-proof reforms, Democracy Watch seeks to align Canadian practices with consumer expectations and deter fraudulent activity through heightened institutional responsibility.

International Comparisons

Australia and the United Kingdom have implemented models requiring banks to reimburse fraud victims automatically unless institutions can demonstrate gross negligence on the customer's part. In Australia, the ePayments Code places the onus on financial institutions to prove customer fault, resulting in higher reimbursement rates and stronger incentives for security improvements. Similarly, UK regulations under the Payment Services Regulations mandate refunds for unauthorised transactions, with banks absorbing most losses to maintain public trust.

These frameworks contrast sharply with Canada's approach, where customers like the Diguangcos must navigate lengthy investigations without guaranteed outcomes. Duff Conacher has cited both countries as examples of effective consumer safeguards that reduce financial harm from digital fraud. Canadian policymakers have studied these systems during consultations on Bill C-15, yet stopped short of adopting comparable liability shifts. The international models demonstrate that automatic reimbursement can coexist with robust security measures, often leading banks to enhance monitoring and alert systems proactively. Adopting elements of these approaches could address the protection gaps evident in recent Canadian cases, fostering greater equity between banks and their clients.

What Comes Next

The statutory review of Bill C-15 scheduled for 2025 presents an opportunity for amendments that could strengthen consumer protections against fraud. Advocates including Democracy Watch are pressing for provisions that shift the evidentiary burden and grant OBSI binding authority in dispute resolutions. Such changes would directly impact cases similar to the Diguangcos', potentially ensuring reimbursement where banks cannot conclusively prove negligence. Federal officials have indicated openness to stakeholder input during the review process, acknowledging rising fraud complaints across institutions.

For Canadians, the outcome will determine whether banking relationships prioritise customer security or institutional defences. The Diguangco experience underscores the urgency of reform, as retirees and others face ongoing risks without adequate safeguards. Continued advocacy and public awareness may influence legislative direction, encouraging adoption of international best practices. Ultimately, meaningful updates could restore confidence in Canada's financial system by aligning liability rules with the realities of modern digital banking threats.

Tags: TD Bank, Bill C-15, consumer protection, Ombudsman for Banking Services and Investments, Democracy Watch, Duff Conacher, financial fraud, British Columbia, federal legislation

By Alex Thompson, Staff Writer