€4,800 vanishes from BBVA account with no trace in the app

€4,800 stolen from BBVA without a trace in the app history

4,800 euros are missing from the account, and there is no transaction to explain it. No transfer, no card charge, no note. The balance is simply lower. It occurred in a BBVA account, and the alert arrived via phone: a robot, while the victim was in a supermarket, informed them of a high-value transfer. The recipient hung up convinced it was a scam. Only then did they open the application to verify it. The app was in hidden mode: no global position, no income, and no expenses. Upon reverting it, the 4,800 euros were gone.

The app's hidden mode and the inconsistent balance

No movement in the history. Neither transfers nor card expenses. The instinctive reaction, that of anyone, is to assume the bank will treat the client like an idiot precisely because there is nothing to show. The number they called from had no relation to the institution. And there it remains, a mystery without a closed technical explanation.

How does money disappear without leaving a trace in the application?

One circulating hypothesis points to the phone itself: a modified version of the application, an altered APK, that would display false data on screen without affecting the real account. Another theory holds the opposite—that the compromised app is only the tip of the iceberg, and that session hijacking occurred much earlier. There are accounts of up to three hacking waves in one year, including email compromise and recovery via tutorials. The most uncomfortable version is that the trace exists, but not where the client can see it.

Cash, PINs, and virtual cards: the advice from those who no longer trust

The most repeated advice is not to open the app from the same device that received the alert and to go to the branch with the issue explained. They also add a warning about another growing practice: recording someone's voice to clone it and scam family members. Defensive responses include having a separate bank account for online purchases, with a card that can be activated and deactivated at will, PINs even for a cent, and single-use virtual cards like those from Revolut or N26. Regarding one specific institution, it is claimed, without proof provided, that its prepared cards are issued already compromised. It is also requested that the Banco de España (Bank of Spain) close telephone contracting when it cannot be verified who you are speaking with.

Meanwhile, the case remains open. If a charge can be missing from the balance without ever appearing in the history, what exactly is that history good for?