- Location
- Glasgow
I've got apps for all my banking, but still get alerts.
Afaik there's an option for receiving alerts on the apps, you need to activate it.
Credit card data hacked
- Thread starter Fastpedaller
- Start date
Page may contain affiliate links. Please see terms for details.
Afaik there's an option for receiving alerts on the apps, you need to activate it.
Why is it that when I phone up my bank (First Direct), I manage to pass the security process simply by stating my name and address/postcode?
No security questions, no need for any letters from passwords, etc. I'm guessing they've got some voice recognition software - if that's the case, they must have a lost of faith in it!
No security questions, no need for any letters from passwords, etc. I'm guessing they've got some voice recognition software - if that's the case, they must have a lost of faith in it!
They do (have voice recognition software) and you'll have had to have opted in at some point. No doubt it's been refined in recent years but I do know that at one stage it recognised my voice on another member of the family's account.
ebikeerwidnes
Guru
- Location
- Widnes
They must have changed
They used to have a very secure - for the time - system and was the first telephone banking place I heard of
I used to use them some time ago
I presume they changed recently (ish)
mistyoptic
Vintage
- Location
- A parallel reality
Not recently. It’s a few years now that we were invited to do the “my voice is my password”. Seems to work well and I’ve not seen/heard of any security concerns about it
Drago
Legendary Member
- Location
- The Urban Fringe
My long lost Nigerian Uncle still prefers me to use passwords.
nogoodnamesleft
Über Member
Some banks use Caller Line ID to verify you. Ie if you are calling from ghe phone registered on your account that satisfies a lot of security.
Also some business phone system providers do not honour the caller line request to withhold caller ID (ie their end not yours).
I don't and some banks I have accounts and call sometimes in their recorded semi-interactive phone system say "give us your phone number so next time we can identify you and verify you faster" ( I don't as they will likely use it for calling/texting stuff I don't want).
nogoodnamesleft
Über Member
Few years ago my very "High Street" Credit card needed me to setup a magic for their "Verified by ..." online system (for when you make an online purchase first you enter your magic word, then the text you an OTP, etc. ie need both). And they required me send in my details by e-mail! I pointed out that e-mail is unencrypted text open to anybody and that that open message is routed through who knows what e-mail routing servers which retain who knows what cashes with who knows what security ... and I refused.
But I also registered a formal complaint about their security. Couple of months later I got a letter where they accepted the vulnerability of their system and credited my card with a "gesture of goodwill" (despite my having lost nothing and asked for nothing).
They've since dropped the entire system
ebikeerwidnes
Guru
- Location
- Widnes
People don;t realise just how insecure normal emails are
When I was a programmer we were told to write a system that accepted transactions from a company that was setting up a "shopping centre online" concept
I basically re-wrote the whole email system on the computers we used
which sounds "wow - amazing - what a guy"
but it was worryingly simple once I read a few pages of a comms book!!
I could then easily send emails that appeared in almost every respect to be from anyone I wanted
My boss - who was a great techy programmer - was sceptical
in the next 5 minutes he got emails from
his boss
the CEO
the Prime Minister
and when he got one from the President of the USA he told me to stop
receiving incoming emails from accounts I should not have had access to was almost as easy
It was quite scary - and it would still work now
When I was a programmer we were told to write a system that accepted transactions from a company that was setting up a "shopping centre online" concept
I basically re-wrote the whole email system on the computers we used
which sounds "wow - amazing - what a guy"
but it was worryingly simple once I read a few pages of a comms book!!
I could then easily send emails that appeared in almost every respect to be from anyone I wanted
My boss - who was a great techy programmer - was sceptical
in the next 5 minutes he got emails from
his boss
the CEO
the Prime Minister
and when he got one from the President of the USA he told me to stop
receiving incoming emails from accounts I should not have had access to was almost as easy
It was quite scary - and it would still work now
- Location
- Glasgow
Mine is the same, across multiple banks.
I suppose they had to chose one number to ask for, both numbers are supposed to be private to the card/phone owner.
Drago
Legendary Member
- Location
- The Urban Fringe
That's as easy to spoof as ebikerwidnes' emails.
nogoodnamesleft
Über Member
I agree (at least for the teams of professional full-time fraud perpetrators). But I feel banks just accept a level of fraud as a cost of business and just add that to what they charge customers.
Eg very easy to allow people to setup a killer PIN on their cards, use it once and card immediately disabled - so just put a bit of paper in your wallet handwritten "PIN: 4761" (the killer PIN) and pickpocket will think "what a fool" as they use the nearest ATM to block the card they just stole.
mistyoptic
Vintage
- Location
- A parallel reality
Never heard of this. How do you set it up?
nogoodnamesleft
Über Member
'Cos banks never provided it. Would have been easy for them to setup for those who wanted it, added security and prevented some fraud. There used to be a widespread "urban myth" about putting in your PIN in reverse would immediately kill the card but apparently just a myth (and reversing PIN a bit of a give away)
