Natwest online banking security "upgrade" (NOT)

Helix

I don't really see what the big deal about giving them your email is. They will probably only use it instead of a letter if you have paperless statements set up, like halifax do. They might also like Halifax send you an email each time a transaction is made so if one is made that shouldn't have been you will be aware of it sooner rather than later. Some people might find that annoying but its easy enough to set up a filter to move all Natwest emails into a special folder so you can deal with them easily.

Sol00

RBS are doing the exact same.

The way I always know if it's spam mail is either because of the poor spelling, or by scrolling the mouse over the link to see the original address at the bottom. This has always worked for me.

leviathan

They've already made it unsecure enough with the card readers so why not go further?

This is purely a fishing expedition for more of your details so they can bombard you with more rubbish and sell your details to third parties.

It's a really dumb idea to use plain text emails for anything which is either:

1) secure
2) required to get there

The mechanism of email is fire and forget. Too many people assume it's 100% reliable.

I find it humerous when banks call you and then ask you to confirm security details before they will speak to you.
Erm, no.
How about you prove you're calling from the bank?
Again: A pretty dumb security move, but I'd imagine those calls are about selling products too.

If it's important they'll write to me. More than once to be safe if they don't get a reply.

Sol00

leviathan wrote: »

I find it humerous when banks call you and then ask you to confirm security details before they will speak to you.
Erm, no.
How about you prove you're calling from the bank?
Again: A pretty dumb security move, but I'd imagine those calls are about selling products too.

If it's important they'll write to me. More than once to be safe if they don't get a reply.

I understand what you're saying, but if the bank has to phone you then they need to confirm it's you they're speaking to before discussing the account.

leviathan

Sol00 wrote: »

I understand what you're saying, but if the bank has to phone you then they need to confirm it's you they're speaking to before discussing the account.

Yes and I understand that.
However calling me from a service which displayed "number withheld" and offering no proof that they are calling from the bank isn't going to make me feel secure.

They should give a little information before asking for some from me.
Perhaps a pre-determined security question / passphrase is a good idea?
It's a good bet that their records are up to date for my phone number.
If not then they really should sort that out before trying to call me too.


Personally I think it's madness to give out any information to a random phone caller.
When I was growing up and being a naughty lad with a passion for computers it was called "social engineering".


I notice that Barclaycard have moved from their call centres taking your payment details to an automated only service. Whatever their suggested reasons, I'd think it was to cut down on fraudulent activity from people taking customers details and selling them on to 3rd parties.
Actually a good security measure for a change!!

ChasingButterflies

Hi op,

I have had the same message for the past few days :rolleyes: last night when I logged in to RBS it took me straight to the page to correct the contact e-mail address.

When I did this there is a tick box to opt out of receiving *information on products that may be of interest* so f you tick the box you shouldn't get e-mails "selling" your products.

hth

LongTermLurker

Can I just say that whenever you give your email address to banks you have to option to opt out of marketing?

They will still contact you by post for anything important such as change to terms and conditions - they have to provide you with written details and an email is not a legally-binding communications method, therefore it would never stand up in court and so they couldn't enforce the Ts & Cs.

They will never send you an email with a link to a login screen, or ask you to email them your details. They will generally send an email saying "you have a new secure message - please log in via www.bank-url.com" or "your new statement is ready to view online".

It isn't hard to tell a real email from a phishing one.

I'm sorry, but I think you're panicking over nothing. I also don't like spam (in any shape or form) and I never get any from my banks. Just make sure you request to be taken off the marketing lists.

ldn-100

NWOLB asked me for my email address today. To avoid entering this click "please update your email address" and then "Accounts Summary" from the menu on the left.

I notice there is function creep of the card reader, despite written assurances it would only ever be used to set up new payess for BACS/FPS. Yet it is required for the new Account Admin/Change mobile phone number function. More lies from NatWest, what will be the next function to be rendered useless to anyone who doesn't carry their plastic calcuator round with them?