Metro Bank Customer Lost £14,000 to Fraudsters Who Used Stolen Money to Buy AI Chatbot Credits
A Sussex businessman spent months fighting to recover £14,244 after criminals raided his Metro Bank account and spent the proceeds on credits for Claude, Anthropic's AI chatbot. The case raises hard questions about whether banks are doing enough to catch unusual spending patterns before the money is gone.
Key points
- Fraudsters took £14,244 from Metro Bank customer Zoli Rutter's account without his permission.
- The stolen money was used to buy credits for Claude, an AI chatbot made by a company called Anthropic.
- Rutter, a businessman based in Sussex, had to fight Metro Bank to recover the funds.
- The case, first reported by The Guardian, highlights a gap in banks' fraud-detection systems when criminals spend stolen money on digital goods.
What actually happened?
Criminals accessed Zoli Rutter's Metro Bank account and spent £14,244 buying credits for Claude, the AI chatbot service built by Anthropic. Rutter told his bank about the unauthorised withdrawals, but getting the money back was not straightforward.
Claude credits are a digital product you buy to use the chatbot's more powerful features. They have no obvious link to the kind of fraud banks usually watch for, like a wire transfer to an overseas account. That novelty may be part of why the spending slipped through Metro Bank's automated checks.
Should customers worry about this kind of fraud?
This specific scam targets your bank account, not Claude itself. If criminals already have your banking login details, they can spend money on almost anything, and AI credits are simply the latest item on that list.
For Rutter, the bigger frustration was the bank's initial response. Under UK rules, banks are generally required to refund victims of unauthorised transactions fairly quickly, and a lengthy dispute process is exactly what those rules are meant to prevent.
If you bank online, the practical steps are the same as they have always been: check your statements regularly, turn on transaction alerts if your bank offers them, and report anything unfamiliar immediately. The sooner a bank knows, the better its chances of recovering funds.
Would stronger login security have helped?
Honestly, probably yes. MFA, short for multi-factor authentication, is a system where logging in requires two separate proofs of identity: your password plus a one-time code sent to your phone, for example. If the criminals here gained access by stealing Rutter's password alone, MFA would have made that much harder.
Banks in the UK are already required to apply what regulators call Strong Customer Authentication for online payments. Whether that protection was active on this account, and whether it was bypassed, is not yet clear from the available reporting.
| Detail | Information |
|---|---|
| Victim | Zoli Rutter, Sussex businessman |
| Amount taken | £14,244 |
| Bank | Metro Bank |
| Funds used for | Claude AI chatbot credits |
| Status | Customer fighting for refund |
Common questions
Could this happen with any bank?
Any bank account can be targeted if a criminal obtains your login details. The question is whether a bank's fraud systems flag unusual purchases fast enough to block them before the money leaves.
Is Claude or Anthropic responsible for this fraud?
No. The AI service was simply where the stolen money was spent, the same way a fraudster might use stolen card details to buy gift cards. Anthropic was not breached.
