Author Topic: Banking security over the phone  (Read 2351 times)

  • Offline zpyder

  • Posts: 6,946
  • Hero Member
Banking security over the phone
on: May 01, 2010, 20:13:31 PM
Im just curious what everyone elses views are on security in terms of banking and online banking etc.

To what extent are you cautious in protecting your details?

The rest of my family wont do online banking, and shred any and all documents.

Maybe Im a little lazy, but I love internet banking, but am wondering if Im starting to get a bit more cautious. For starters I was a bit surprised by eggs limited security in terms of logging in, compared to barclays which requires a hardware cardreader to identify yourself to log in as well as perform certain actions. Santander has got a system of sending a text confirmation number for the same actions.

What Im getting to though is phone confirmations. The stupidest thing I have encountered so far, but I dont get how they can get around it much, is again with egg, where you either get an automated phone message, or a person, asking you to confirm recent purchases. It always throws me off as copying it would be such an easy way to obtain passwords. The automated system asked for DOB, which isnt too bad, but I can envision a system where it rings up a few times over a week or two, asking for different things, and then hey presto, someone has your security details. Today I had a person asking to confirm the purchases, but after the DOB she also asked a few other questions which are included in the log in process. At least they point out that if youre unhappy with providing the info, you can call the number on the back of the card, which I did, and it was legit. Its not like phishing emails though, where you can see if a link is dodgy, Im surprised fake phone calls arent more common.

Thoughts?  

Re:Banking security over the phone
Reply #1 on: May 01, 2010, 21:10:53 PM
with lloyds you have 2 passwords
one logs you on & the 2nd asks for a certain letter in your other password x3

  • Offline BigSoy

  • Posts: 1,353
  • Hero Member
  • They sicken of the calm, who knew the storm.
Re:Banking security over the phone
Reply #2 on: May 01, 2010, 21:24:24 PM
Most recent lesson learned - using online banking from an untrusted machine is dodge - had to use a dodgy hotel laptop in Valencia which was compromised and only avoided losing money from my account through luck rather than judgement.

Frustrating thing is that the exploit made the online banking behave in a way it never should in normal operation - if Natwest explained this on the login page thered be a lot less people getting ripped off.
"Within your 'purview'? Where do you think you are, some f**king regency costume drama? This is a government department, not some f**king Jane f**king Austen novel!"

Banking security over the phone
Reply #3 on: May 01, 2010, 22:51:38 PM
I;ve got a card reader thing for my current account for online banking.... got it about 6 months.... and I F%&KING HATE it !

wtf is the point of online banking if I have to have this card reader with me to use it ?

added to that fact that its a pain to use, and slow... might be ok for one transaction, but sucks if you do 7 or 8 a time like I sometimes do

you can opt out of using it.... but if you do, youre personally liable for any money that gets nicked out of your accounts etc...

personally, I think its more a gimmick than a serious fraud prevention method..... theyre not personally encoded, so how hard would it be to sit entering codes, and noting the response code and figuring out the relationship ?

  • Offline BigSoy

  • Posts: 1,353
  • Hero Member
  • They sicken of the calm, who knew the storm.
Re:Banking security over the phone
Reply #4 on: May 01, 2010, 23:03:14 PM
Which transactions do you need to use your card reader for? Agreed theyre annoying but for most things you dont use them on Natwest - only things like e.g. adding new payees.
"Within your 'purview'? Where do you think you are, some f**king regency costume drama? This is a government department, not some f**king Jane f**king Austen novel!"

  • Offline zpyder

  • Posts: 6,946
  • Hero Member
Re:Banking security over the phone
Reply #5 on: May 01, 2010, 23:42:27 PM
Barclays its for logging in and anything that involves the transfer of money I think?

I quite like the system. Gimmick or not it does mean at the very least someone needs to have your card, so immediately keylogging is out as the code would only be valid for the current session. I guess though it depends on whether you use it on the go. I only use online banking pretty much from home. Admittedly I logged in a few times whilst in the lake district on the free wifi at the place I stayed, but I trust the owners enough to hope that they dont have an ID theft business on the side!

Banking security over the phone
Reply #6 on: May 01, 2010, 23:56:11 PM
i can log in without it, but need it to transfer money :(

  • Offline BigSoy

  • Posts: 1,353
  • Hero Member
  • They sicken of the calm, who knew the storm.
Banking security over the phone
Reply #7 on: May 02, 2010, 00:47:50 AM
Quote from: knighty
i can log in without it, but need it to transfer money :(


Hmm that would be annoying - natwest will let you transfer money between existing accounts/recipients without the card reader... but you need it if you have to set up new ones.
"Within your 'purview'? Where do you think you are, some f**king regency costume drama? This is a government department, not some f**king Jane f**king Austen novel!"

Banking security over the phone
Reply #8 on: May 02, 2010, 00:49:04 AM
^^^  

that would be much better !!!


it won;t even let my pay my credit card which is with the same bank !

  • Offline BigSoy

  • Posts: 1,353
  • Hero Member
  • They sicken of the calm, who knew the storm.
Re:Banking security over the phone
Reply #9 on: May 02, 2010, 01:08:44 AM
Sounds like its time for a new bank to me! Even though people never actually seem to do that...
"Within your 'purview'? Where do you think you are, some f**king regency costume drama? This is a government department, not some f**king Jane f**king Austen novel!"

Re:Banking security over the phone
Reply #10 on: May 02, 2010, 01:20:27 AM
Quote from: BigSoy
Sounds like its time for a new bank to me! Even though people never actually seem to do that...


I would.... but they always have short queues.... and actually serve you as fast as they can.... if theyre busy the manager goes behind the desk and helps etc...


drives me crazy waiting in the queue at the bank for 10min while the halfwits behind the counter take there time and drive every transaction out... its just bad manners, at work as soon as a customer comes in, someone goes to serve them, if you come in and someone is already being served someone else will stop working and come out to serve you, if youre the 3rd person there someone else will stop what theyre doing to come serve you.... and if I need to get something from the other freezer I run !

Banking security over the phone
Reply #11 on: May 02, 2010, 02:24:02 AM
Quote from: knighty
so how hard would it be to sit entering codes, and noting the response code and figuring out the relationship ?


Let me answer this with some perl:

Code: [Select]
print pack"C*",split/\D+/,`echo"16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0


Short answer: Very.

Re:Banking security over the phone
Reply #12 on: May 02, 2010, 12:44:27 PM
You mean very hard or very easy? ( I cant tell if your perl script is easy or hard!)

The mother of a friend of mine was conned this week by a person (with a subcontinent accent) ringing her up and purporting to be a Sky agent and saying there was something wrong with her broadband. They then proceeded to extract her card and bank details! Maybe the elderly are more vulnerable but needless to say my friend went through her like a dose of salts, rang the police, cut up the cards etc.
Personally I dont bank online as it would just be another thing to worry about, though I do do telephone banking.

Re:Banking security over the phone
Reply #13 on: May 02, 2010, 12:59:59 PM
Quote from: Ceathreamhnan
You mean very hard or very easy? ( I cant tell if your perl script is easy or hard!).


The Perl is (just about) the RSA algorithm...so very, very hard.


  • Offline zpyder

  • Posts: 6,946
  • Hero Member
Re:Banking security over the phone
Reply #14 on: May 02, 2010, 14:46:52 PM
Quote from: Ceathreamhnan
You mean very hard or very easy? ( I cant tell if your perl script is easy or hard!)

The mother of a friend of mine was conned this week by a person (with a subcontinent accent) ringing her up and purporting to be a Sky agent and saying there was something wrong with her broadband. They then proceeded to extract her card and bank details! Maybe the elderly are more vulnerable but needless to say my friend went through her like a dose of salts, rang the police, cut up the cards etc.
Personally I dont bank online as it would just be another thing to worry about, though I do do telephone banking.


Out of interest would you answer security questions if you were called by the bank, or would you always take the option to ring them back to be safe?

0 Members and 1 Guest are viewing this topic.