OT: Internet Banking fraud reminder

Submitted: Friday, Aug 04, 2006 at 11:44
ThreadID: 36443 Views:3612 Replies:12 FollowUps:14
This Thread has been Archived
Just a timely reminder to all who use internet banking.

I've just had my 2nd client report that they have been debited funds via internet banking which they didn't authorise. They will get their money back (eventually) from the bank (bank will treat it as a write-off).

How did it happen? Yesterday, the lady responded to an email she rec'd (purpordedly from NAB) which said the bank is concerned about internet banking fraud and as a means of confirming that she has the right fraud protection, could she please click on the hyper-link and confirm her internet banking user-id and password. She did this and had her account debited $5K over night.

It makes my blood boil......make sure you don't respond to any such email/s. Please

Cheers

Roachie
Back Expand Un-Read 0 Moderator

Reply By: Moggs - Friday, Aug 04, 2006 at 11:53

Friday, Aug 04, 2006 at 11:53
Unfortunate for the lady involved, however I struggle to understand why the bank should be held liable to refund her money when she has been stupid (meant in th nicest possible way) in clicking on the link. Her error / stupidity - she should suffer the consequences.

Why should bank shareholders be made to foot the bill????
AnswerID: 187073

Follow Up By: Truckster (Vic) - Friday, Aug 04, 2006 at 11:58

Friday, Aug 04, 2006 at 11:58
you home this weeekend?
0
FollowupID: 444216

Follow Up By: Member - Roachie (SA) - Friday, Aug 04, 2006 at 12:01

Friday, Aug 04, 2006 at 12:01
G'day Moggs,

With my shareholder's hat firmly on my head, I gotta say I agree 100% mate.

The NAB (and other banks) has come up with a plan to avoid these occurences in future. In my bank's case it is via the use of SMS messaging. As soon as the system sees that a request has been made to transfer money to an OUTSIDE account, an authorisation screen appears into which a one-off password has to be typed-in. That password will be immediately sent via SMS to the clients mobile phone (within about 10 seconds). The SMS message includes the details of the transaction you are trying to authorise (amount, bsb and account number).

I mentioned this was the 2nd client of mine who has been stung. The 1st instance occured about 2 months ago. The bloke involved was immediately signed-up for this SMS system and over the course of the next 2 weeks he received 2 SMS's asking him to authorise transaction about which he knew nothing!

I think some of the other banks are doing a similar thing with a special gizmo they issue to their clients (rather than using the SMS system).

Cheers

Roachie
0
FollowupID: 444218

Follow Up By: Member - Blue (VIC) - Friday, Aug 04, 2006 at 12:15

Friday, Aug 04, 2006 at 12:15
Kind of agree with you there Moggs... In the initial days when this fraud started, you couldn't really blame anyone but this has made the news, ACA, TT and many other current affairs shows on many occasions... I can't understand how people can still fall for it... Also our family have accounts with CBA, Westpac and Adelaide Bank, all oif these organisations have regular bulletins on their net banking pages warning you about it.
0
FollowupID: 444221

Follow Up By: ro-dah-o (WA) - Friday, Aug 04, 2006 at 14:00

Friday, Aug 04, 2006 at 14:00
..But banks are such trustworthy institutions...

0
FollowupID: 444257

Follow Up By: Steve63 - Friday, Aug 04, 2006 at 14:58

Friday, Aug 04, 2006 at 14:58
Why is the bank footing the bill? Easy, in reality the banks can no longer afford for there to be any doubt about the security of Internet Banking. If everyone ditched their internet banking and fronted in person at a branch they would be unable to process all the transactions. There are not enough staff or branches. What happens then, increased consumer frustration. End result is a larger number of floating consumers ie no allegiance to any bank. This means there is a larger slice of the pie to compete for. This will require more advertising money and better services to compete and retain their customer base. The bank would need to open branches and employ more staff to meet the demand. That would increase costs and lower investor returns. Why would a bank do that? While it is cheaper to pay they will. As soon as it is damaging the bottom line they will act. I remember reading that the banks would tolerate about one billion dollars in fraudulent activity (this is all banks together and includes credit cards) before they would feel compelled to act. They are commercial ventures and you can be assured they are looking after the interests of the bank and it's shareholder.

I remember seeing an estimate that to process one days financial transactions for the world manually would require every individual on the planet to work for one year. Some phone companies in the US have monthly databases to do analysis of there phone plans, these databases have about 3 trillion rows. Imagine doing 3 trillion connections a month manually. Basically the world has moved on until it can now no longer operate without significant computerization. This is why there is a middle class at all. No computerisation to bring down costs, less wealth no middle class.

Steve
0
FollowupID: 444274

Follow Up By: conman - Saturday, Aug 05, 2006 at 20:50

Saturday, Aug 05, 2006 at 20:50
Yes, but banks are pushing us into using online banking by discouraging the use of tellers. It's up to them to provide a foolproof system. It's in their interest also, because if more people use online banking, they then can make bank staff redundant which in turn increases profits, which then makes people like roachie happy as he now has the money to buy a new whinch rope, driving lights, etc etc etc.

Also I take it "bad publicity" would be in their thinking also.
0
FollowupID: 444602

Follow Up By: Truckster (Vic) - Sunday, Aug 06, 2006 at 21:55

Sunday, Aug 06, 2006 at 21:55
STEVE.. STEVE. WAKE UP YOUR DREAMING...
There is N O T H I N G on earth that could reverse the trend of greed from banks to force them to open more branches.

remember - its all about share holders, bleep all to do with customers.

I alwasy find it funny when people say "my bank shares went up $0.50cents... but they dont take into account their fees went up $100...
0
FollowupID: 444794

Reply By: Bonz (Vic) - Friday, Aug 04, 2006 at 12:21

Friday, Aug 04, 2006 at 12:21
Roachie, the Bendigo (? I think) Bank uses a SecurId tag as part of its logon process over here, when will alll banks pick up on this, we use it at work and it increases the security about a thousand times. The banks could give them away and still be in front.
.
Time is an illusion produced by the passage of history
.

Lifetime Member
My Profile  My Blog  My Position  Send Message
Moderator

AnswerID: 187079

Follow Up By: Mr Fawlty - Friday, Aug 04, 2006 at 14:43

Friday, Aug 04, 2006 at 14:43
Yep, the Bendigo Bank does this with the electronic pin generator. Every time you log onto the Bendigo a different pin is generated by the key fob which you have to enter to get access to your accounts. Even if you were tricked into providing your account details the next time you log on a new pin is needed...Not sure what happens if you loose your pin generator though.

The other thing the Bendigo does which I find amazing in this day & age is offer me a fee free account & the manager of my local branch, Warwick & his offsiders actually remember my name & always have time for a wave or a chat....

I'm not a shareholder & have no interest other than having an account there. If I didn't waste all my spare money on intangibles I would buy some shares....
0
FollowupID: 444268

Reply By: brian - Friday, Aug 04, 2006 at 12:37

Friday, Aug 04, 2006 at 12:37
As far as shareholders paying for other peoples errors,we had the following from my company.....we sent out a cheque for around $10000 to a client,a woman intercepted the cheque falsified the chequepresented it to the bank they put it into her account then paid out cash.

After providing her details to police and westpac and chasing both for 18 months both the police and westpac refused to locate or prosecute ,,,westpac advised the amountwas too small......
Roachie if you are interested i can send you copies of the falsified cheque etc....let me know.
AnswerID: 187084

Follow Up By: Member - Roachie (SA) - Friday, Aug 04, 2006 at 13:38

Friday, Aug 04, 2006 at 13:38
Brian,

Thanks for offer, but not much I could do with it anyway, so probably a waste of your time to send it.

I've seen that happen first hand with a solicitor's trust account cheque too. Intercepted in the mail, fraudulently altered both amount and payee's name, banked and cash removed from the account before the real recipient got worried about the cheque not turning up. Bank had to pay out.

If all this continues, the banks will stick their fees up (again)!!!!
0
FollowupID: 444244

Reply By: Howard T - Friday, Aug 04, 2006 at 13:22

Friday, Aug 04, 2006 at 13:22
I was under the impression that no bank or lending institution will ask for such details over the net. Maybe I am wrong.
Any email I get that I am not familiar with the senders name including Banks is deleted without opening up.

Howard
AnswerID: 187090

Follow Up By: Member - Roachie (SA) - Friday, Aug 04, 2006 at 13:35

Friday, Aug 04, 2006 at 13:35
Spot on Howard, no bank will ask for your details via an email (or attached link).
0
FollowupID: 444243

Follow Up By: Member - JohnR (Vic)&Moses - Saturday, Aug 05, 2006 at 22:05

Saturday, Aug 05, 2006 at 22:05
Piece in the paper the other day about a little piece of code that gets into Firefox browser and extracts things like passwords and codes sent. Sounds like nice honest folks are at it again there too.

Roachie, nice evening last night even if the Weagles won. Goodly colleagues...........
0
FollowupID: 444619

Reply By: Disco123 - Friday, Aug 04, 2006 at 13:42

Friday, Aug 04, 2006 at 13:42
I've received quite a few of these emails over the last couple of weeks and just delete them.
What made me suspicious? ..... I've never had an account with the NAB
AnswerID: 187095

Reply By: Kumunara (SA) - Friday, Aug 04, 2006 at 13:55

Friday, Aug 04, 2006 at 13:55
The low lifes are also doing this per phone.

There has been that much publicity about this in the media that anyone who now falls for this must be stupid.

The other scam is to ring up and tell you that you have won a lottery. Of course you have to pay a fee to get your winnings. The fee disappers. The winnings never appear.
Life's great and it just keeps getting better

Member
My Profile  My Position  Send Message

AnswerID: 187099

Reply By: Waynepd (NSW) - Friday, Aug 04, 2006 at 14:43

Friday, Aug 04, 2006 at 14:43
Yep just got a mail from Commonwealth Bank saying to just click on this link and sign in to earn double interest for the rest of the year.

Apparently i was chosen at random from all the Commonwealth Bank customers to enjoy this little bonus. One problem is i haven't had a Commonwealth account for about 15 years.....so i called the commonwealth and asked why they would give me double interest when they were the second after Westpac to raise interest rates...... they said please forward the mail to hoax@cba.com.au while trying to stifle their laughter at the prospect of giving double interest to anyone let alone a non-customer.......
AnswerID: 187106

Follow Up By: Member - Andrew (QLD) - Friday, Aug 04, 2006 at 21:13

Friday, Aug 04, 2006 at 21:13
Most banks and businesses prone to these types of attacks on customers usually have an automated email account setup for exactly this reason.......just send an email to: spoof@ "their respective website address".

Andrew
0
FollowupID: 444391

Reply By: joc45 - Friday, Aug 04, 2006 at 15:40

Friday, Aug 04, 2006 at 15:40
I've had a couple of emails recently from a mob purporting to be PayPal (part of Ebay). It goes on about security and reckons that there has been some unusal activity on my account recently, its access has now been limited, so put in your username and password to sort out the security issues.
a) I don't have a Paypal account
b) the website is unsecured anyway.
The site looks real, apart from the lack of the security symbol. Was going to give them a fictitious user/password, but thought, what's the point.

Also had a couple of emails supposedly from Commonwealth Bank a few months back, much the same. Don't have an account there either.
Gerry
AnswerID: 187121

Reply By: Member No 1- Friday, Aug 04, 2006 at 17:06

Friday, Aug 04, 2006 at 17:06
i follow the links and fill in the space/s with ...
"get ef'd you efin wankers"...and other similar words to that effect....
gee that reminds me to change my address...the email one of course as the spam is becoming more consistent of late
AnswerID: 187136

Reply By: Sand Man (SA) - Friday, Aug 04, 2006 at 20:41

Friday, Aug 04, 2006 at 20:41
Bill,

I also had funds debited to my Account which I didn't authorise. But this was from a Big Company. The bank advised me they could put a stop on it but may take a while to process and I figure I would be charged interest in the meantime for an outstanding amount on my credit card which I'm not going to pay.

This Company, McAfee, used the original credit card details for a purchase I made 12 months ago and invoiced me again for renewal of the product I gave up in disgust some time ago, trying to communicate my disfatisfaction at that time.

Now this Company has a structure where you cannot respond to an email because "it is not monitored" and there is nowhere else on their bloody Web site you can communicate to, or voice your objection, on any matter.

Well I fluked a Customer Contact number within McAfee Australia yesterday and let my feelings known to the Customer Service representative about what I thought of his bleep Company and requested prompt cancellation and reversal of the unauthorised billing. (I was pleasant to him though as it wasn't his personal fault)

I am now waiting 5 business days for a credit to appear in my account, before recontacting my Bank to take further action.

Bloody mongrels!
Bill


I'm diagonally parked in a parallel Universe!

Member
My Profile  My Blog  My Position  Send Message

AnswerID: 187173

Follow Up By: Waynepd (NSW) - Friday, Aug 04, 2006 at 21:14

Friday, Aug 04, 2006 at 21:14
Nice heads up Sand Man
Never have before but now I will definitely NOT use McAfee for anything in the future....this is the way to get improved service, let your wallet do the talking.....
0
FollowupID: 444392

Follow Up By: Member - John (Vic) - Saturday, Aug 05, 2006 at 11:21

Saturday, Aug 05, 2006 at 11:21
Don't know why you bothered mucking around with McAfee in this instance.

If you have an unauthorised amount debited to your credit card just contact the card issuer and "dispute the transaction" they will separate it from your correct undisputed charges and request the Merchant's bank (in this case McAfee) to provide within 30 days a copy of your authority to debit covering that charge.
You don't pay the disputed amount outstanding or any interest on the disputed amount while this is occurring.

Normally what happens is that the respective company can't provide the authority and the "Disputed" amount will be removed by your bank with out charge.

I have had charges such as airline tickets appear on my credit card over the years and my bank follows this procedure without hesitation.
In every instance of a disputed transaction it has been resolved in my favor quickly.

Thats what you pay your bank for and all of this procedure is part of the "Rules" that apply to the respective banks and the merchants who deal with credit cards.
VKS737 - Mobile 6352 (Selcall 6352)

Lifetime Member
My Profile  Send Message

0
FollowupID: 444466

Reply By: Member - Brian (Gold Coast) - Saturday, Aug 05, 2006 at 07:51

Saturday, Aug 05, 2006 at 07:51
Bill..... good heads up!

Too many people simply follow the directions on these emails and end up victims.

On a similar note, I had a call from my bank some weeks ago, a lovely lady informed me that one of the companies I had dealt with using my Visa card had their computers "hacked" and my Visa details were "taken". She cancelled my card immediately (thankfully, "they" hadn't got around to nicking funds outta my account) and issued a new card.

But still I wasn't sure of who I was dealing with, so I rang the advertised bank "13" number and asked for the fraud section and then for the lady who called me and was put through.

I am impressed at how efficient this bank was in "fixing" my dilemna before it really became a dilemna!

She couldn't, unfortunately, tell me who it was that had been hacked, but I am more concerned about using Visa for phone/internet payments now. I guess that after the 7 years I have had that particular card, and the amount of transactions I use it for, (it's for my business) then the odds are low.

Cheers

Brian
AnswerID: 187221

Reply By: Member - Nobby - Saturday, Aug 05, 2006 at 15:48

Saturday, Aug 05, 2006 at 15:48
We have just gone through this. We had our business Account and Personal Credit facilities hacked into. Someone in Melbourne made off with $4.5K- $4.9K out of each of our Accounts (our limit is $5K). We have contacted the Commonwealth Fraud Squad and it has put a stop on the Melb. Account. We will get the $ back from our bank but will take about a month. Our password has never been revealed and is only known to my wife and I. The fraud squad said that the smarties don't need a password anyhow, they come in the back door. We now have that SMS facility from the bank(that we never knew existed until now). I would reccommend everyone to use it. Not a nice thing to go through, and I advise everyone to check their Balance daily.. Nobby
AnswerID: 187295

Sponsored Links

Popular Products (9)