said by BoulderHill1:
If I understand you correctly some unknown third party somehow gained access to your account using their own Chase User ID.
Even though you had a strong password this third party somehow gained access either by guessing the password or proving ownership by answering security questions correctly.
I don't think it is necessarily an issue with multiple user id access, but rather an unauthorized user gained access to your account.
In other words you got hacked.
You stated that you did not get hacked but yet what do you call it when someone illicitly gains access to your account and takes your money?
That's what I originally thought last night from my conversations with the Indian reps. They told me a second User ID had been created and used. But after speaking to the US reps today, apparently it was an old ID from the WAMU days that was never deactivated properly. More details are in the post that's being held by the system. I've asked the mod to release it.
Mospaw said that post disappeared so I'll add the details here. A few months after the merger completed I tried logging in to online bank for the 1st time in several months. I got a message from the system saying that my WAMU ID expired because I hadn't logged in since the merger by a certain cutoff date and I would need to create a new ID. So I did and had been using it ever since. As far as I knew the old one was gone. Apparently it wasn't though as that's what the person used to login to the account
They actually never gained access to the user id I've been using for the past 4 years according to Chase. They got a Chase rep to change the email address associated with my WAMU ID and once they had that, they were able to get the verification code and reset the password to gain control of the old ID. It seems apparent that the person has my SS # but without getting the email changed they wouldn't have been able to enter a valid code # and access the account.
Going forward I've set it up so account changes regarding contact info can no longer be changed over the phone. Only by successfully logging into the account online or at the branch. Hopefully that will keep it from happening again.