Unsplash / The Verge

Crazy Loophole Allegedly Allows Bank Programmer To Withdraw $1 Million Cash

A programmer for the Chinese Huaxia Bank made quite the discovery a few years back, allegedly turning it into a way to walk away with $1 million in cash before being caught.

And while the twists in the story don't play as you'd expect, he's still facing close to 10 years in prison.

Something Peculiar

As The Verge reports, taken from the South China Morning Post, 43-year-old programmer Qin Qisheng exploited a flaw he found in his company's system:

According to the reports, the bank’s system didn’t properly record withdrawals made around midnight — effectively spitting out cash without removing the total from a user’s account.

Taking Action

How this went unnoticed before he became involved is a mystery, but there is a good reason why he was able to take advantage himself:

Normally, that might send up a red flag that a transaction had failed, but Qisheng allegedly inserted scripts into the system that suppressed those alerts.

Then Taking Money

Once all of this was in place, he started to make withdrawals and put money into his own personal account.

Years Of Withdrawals

This continued for years. The first withdrawal came in November 2016 and the bank didn't find out until January 2018. In that time, he managed to put out nearly 7 million yuan -- aroiund $1 million USD.

Sound Familiar?

If this sounds familiar at all, you might've watched the movie Office Space -- or you've seen Superman III with Richard Pryor. Either way, the whole thing would've been perfect if he had just stopped.

Bank Finally Discovers Code

But the bank found out and soon they closed the loophole. They then brought the programmer to the authorities to find out the damage.

Returning The Money

In the end, the worker did return the money to the bank and they did not want to continue with the charges. The likely reason here isn't as kind as you might think-- wanting to avoid bad publicity -- but they still tried according to The Verge:

Huaxia Bank reportedly asked police to drop the case — reportedly accepting Qisheng’s explanation that he was merely testing the bank’s security and was holding onto the money for the bank to reclaim.

Courts Aren't Playing

The police and courts weren't buying it, of course:

They didn’t buy the argument, considering that he’d moved the money to his personal bank account, instead of the bank’s dummy account, and had apparently been investing some in the stock market, too.

Facing Prison Time

Now Qisheng is reportedly facing 10 1/2 years in prison and likely doesn't have a job either. Unless the bank is being very reasonable there too and keeping him around to showcase some more. Who knows?

Filed Under: