Reply to: Bank Fraud

[AlfredJPruffock]

Nah fine, still got £105k in it.

Good to hear that MF, btw is your password still Topsecret9 ?

Here is the template for your response

No...you must be thinking of somebody elses banking password, because my password is insert your banking password here

[lORD lUCAN]

Nah fine, still got £105k in it.

Is that all , nevermind.....

[lORD lUCAN]

What worries me is that it has not been phished. I'll check out the text message thing.

Have you dumped any old hard disk drives anywhere, could have been a data reclamation from an old hdd?

[ratewhore]

That being said it would be fairly easy to get them to save a list of NIC MAC adresses that you are allowed to access the system with.
You could have a auth process to add a new MAC code with varying degrees of security, people not fussed can go through the Know Your Customer stuff online, those more paranoid can get a call from the bank to confirm the new MAC code.

My - how straightforward...

[MarillionFan]

Nah fine, still got £105k in it.

[MarillionFan]

Ooo. Hang on. Might quickly check by Barclays account now!

[Asterix]

Barclays on-line

I've been using it for ages and it's not the best but not the worst either. If you login from the same PC, this means that your long customer no is stored and you don't have to type it in every time. Then it goes to a 5-digit numerical password and 2 letters from a chosen word. If anyone tries to save any login details on a work/internet cafe/other PC, then you've only got yourself to blame.

[Ardesco]

Barclays will now send you a text message if a bill is paid to a new payee, so at least you'd have known sooner. Which reminds me, I must send off the form.

I think they're also planning on those code devices.

What annoys me is that they don't have a system that ties online banking to a particular PC, or PCs. Some people might want to roam, but for me if I could set access to only be allowed on a machine matching my home PC's hardware configuration, that would be fine. It's not impossible to defeat, but a bit harder than phishing for passwords.

Would be an arse if you wanted to check your account on different machines in the house, or if you upgraded your/bought a new machine.

That being said it would be fairly easy to get them to save a list of NIC MAC adresses that you are allowed to access the system with.
You could have a auth process to add a new MAC code with varying degrees of security, people not fussed can go through the Know Your Customer stuff online, those more paranoid can get a call from the bank to confirm the new MAC code.

Unfortunatly the general unwashed would have no idea what a MAC address is and it would probably cause the bank countless hours of headaches as they tried to explain it all, along with neverending help desk calls. That being said if any bank does decide to do this i want my cut

[ASB]

but a bit harder than phishing for passwords.

What worries me is that it has not been phished. I'll check out the text message thing.

[VectraMan]

Barclays will now send you a text message if a bill is paid to a new payee, so at least you'd have known sooner. Which reminds me, I must send off the form.

I think they're also planning on those code devices.

What annoys me is that they don't have a system that ties online banking to a particular PC, or PCs. Some people might want to roam, but for me if I could set access to only be allowed on a machine matching my home PC's hardware configuration, that would be fine. It's not impossible to defeat, but a bit harder than phishing for passwords.

[lilelvis2000]

Britain, leading 20th century banking technology.

You mean 18th century banking.

[Joe Black]

What is incredible is for a few pounds each customer can be given secure authentication device.

I have an online bank account overseas and it is std practice to issue each customer with one.



Britain, leading 20th century banking technology.

I've got one or two of those too. Bloody pain in the a*se if you have a number of bank accounts, and if they all start requiring such things your key chain will end up looking like you're an ex-member of the Village People.

Overseas banks, have you ever really tried them?

[oraclesmith]

The Internet just exposes your funds to another group of criminals - clever ones at that. Personally I keep away from Internet Banking.

[_V_]

What is incredible is for a few pounds each customer can be given secure authentication device.

I have an online bank account overseas and it is std practice to issue each customer with one.



Britain, leading 20th century banking technology.

[AtW]

Well, security at bank should know if it was done via online banking or not, if someone indeed logged into there then somehow they compromised it.