Abbey One Time Passcode - OTP

nzseries1

So, when i log into Abbey this morning, there's a message saying I have to sign up for One Time Passcode (OTP) - I have to give Abbey my mobile number in order to transfer money. So I thought it was time to have a little whinge and see if anyone agrees with me (or, to see if anyone tells me to grow up :rotfl:)

Call me old fashioned, but a mobile phone is for calling someone. And calling ONLY. It's not for photos, it's not for games, it's not for apps, it's certainly not for banking.

I have this sinking feeling that Abbey are now going to bombard me with texts. Even though their FAQ says they won't. It's not a good start. After entering my mobile number, I get a text straight away saying "You have registered for OTP security". Really! I did not know that! I don't need a text confirming every single thing that I do!

This is going to be the start of things to come, I think. I dread the thought of my bank having my mobile number. If Abbey send me any more texts that don't relate specifically to a transaction I've made, I think I'll close my account.

Whinge over

rb10

But not everyone has a mobile phone. How does this work?

Otherwise, I think it's a good idea. Sounds somewhat similar to Halifax's thing where they phone you if they think a transaction is suspicious, and certainly better than Nationwide/Natwest's card readers.

nzseries1

rb10 wrote: »

But not everyone has a mobile phone. How does this work?

Otherwise, I think it's a good idea. Sounds somewhat similar to Halifax's thing where they phone you if they think a transaction is suspicious, and certainly better than Nationwide/Natwest's card readers.

They say if you don't have a mobile, you have to use branch or telephone banking.

I like Halifax's way of doing it... I can specify whichever phone I want, it doesn't have to be my mobile phone, and it's not on every single transaction.

my_gorgeous_ellie-belle

No, i dont have a mobile, well i do for only if i am going away for a few days so i can keep in touch with home. Apart from that its not on as even though i'm just 23 i am a little old fashioned. OH takes all of the important calls as he doesn't mind, ie nursery. It really bugs me when you are having a convo with someone and their phones rings and they just have to answer it even if it not in the slightest important - or STOP TALKING TO TEXT BACK!!! Lol, there is my rant too!

nzseries1

my_gorgeous_ellie-belle wrote: »

No, i dont have a mobile, well i do for only if i am going away for a few days so i can keep in touch with home. Apart from that its not on as even though i'm just 23 i am a little old fashioned. OH takes all of the important calls as he doesn't mind, ie nursery. It really bugs me when you are having a convo with someone and their phones rings and they just have to answer it even if it not in the slightest important - or STOP TALKING TO TEXT BACK!!! Lol, there is my rant too!

Even if they don't plan on answering the phone during the conversation, you still have to stop because it's inevitably set on the highest volume, with some hideously annoying ringtone, and you need to stop and ask "are you gonna get that?"

And yes, if people start texting someone while you're talking to them, that's so rude! :cool:

mary

Likewise, don't have a mobile phone. I guess 99% of the population do.
Just rang Abbey on their number for such a scenario and the girl told me you can't do it unless you have a mobile. Said I would close my accounts if that was the case, but that isn't going to have any impact on them and won't change it. Asked to speak to a manager who is going to ring me back when they have read the rule book. Meantime while hanging on, I discovered as posted earlier that you can go via branch or telephone banking. Slower and more of a nuisance.

dogstupid

It doesn't help to convince me about the use of my mobile phone number when the web page explaining OTP is titled "Abbey - Marketing Page". If I do end up getting marketing texts on my phone I will be changing banks accounts.

I still fail to see how this is going to make my online account much more secure as if somebody has gained access to my account online, they have the ability to change the phone number to a new 'throwaway' one. Yes it sends a text to the previous number saying it has been changed but it only needs the new phone to activate it and authorise a transaction.

I bet Abbey will add a clause to make it the customer's responsibility to report the unauthorsised access and stop the transaction. Some texts do get lost by phone networks and how can prove you didn't get a text? More abdication of responsibility for online fraud by the banks?

For those people who don't carry a phone with them or only use it for this OTP facility it may not be read immediately and that may be too late to stop the loss. Would it not have been more logical to require a code sent to the old phone to activate a new one? If you have lost the old phone then calling Abbey to change it would be much safer.

Oh well, at least they are doing something and if it helps reduce some fraud from phishing attacks then its got to be seen as a step in the right direction. But there are still improvements they could make.

Biggles

nzseries1 wrote: »

They say if you don't have a mobile, you have to use branch or telephone banking.

So Abbey don't do online banking any more, just 'online and mobile banking'? Great.

At least Lloyds let you choose what number you give when you set up a new payment, landline or mobile. This does sound a bit OTT.

pb3

nzseries1 wrote: »

So, when i log into Abbey this morning, there's a message saying I have to sign up for One Time Passcode (OTP) - I have to give Abbey my mobile number in order to transfer money. So I thought it was time to have a little whinge and see if anyone agrees with me (or, to see if anyone tells me to grow up :rotfl:)

Whinge over

Thanks - you beat me to it. I was planning to post in the venting forum but this will do.

Abbey (or rather Santander) are taking the p*ss in their plans to restrict my use of their ebanking facilities unless I purchase a mobile phone and give them the number.

While I have no problem with them implementing two factor security, I expect it to be at their expense in supplying the appropriate hardware device as other banks do. Their brash assumption of "Everyone has a mobile phone these days - if you don't then tough!" rubs me up the wrong way. This is just a weasel way of passing on the cost to their customers:mad:

I was already toying with moving my accounts (held for 20 years) elsewhere over their continual feet dragging over fully implementing Faster Payments. This will probably tip the balance for me if they press ahead with this.

For the record even if I did have a mobile phone - it would be for emergency use only and I wouldn't be prepared to give them the number. They have my landline number - end of.

I see this as a start of a slippery slope - If it goes ahead then every other Tom, !!!!!! & Harry will eventually be insisting on a mobile phone number for use of their services.

Does anyone have a postal address for Abbey Customer Services? They only list telephone numbers on their website.

clairemagnolia

I'm really angry about this. I also do not own a mobile phone, nor do I wish to purchase one just so I can access a service I have been using without problems for several years now. I have just spoken to one of the telephone banking agents who said I was the first person she has spoken to who can't use the service due to not having a mobile, but I refuse to believe that I am in a minority of one!

I am now unable to set up payments, amend payments, or transfer money between my own Abbey accounts unless I call the telephone banking service or go into a branch. Progress huh!

Can anyone recommend a good current account for someone on a lowish income (between £600 and £800 a month is paid into my account, and I don't have a salary)? Obviously with a bank or building society who are not going to implement this ridiculous policy...

Thanks,
Claire

fiendishlyclever

I used the equivalent service on paypal to verify each transaction (and log on).

It ended up driving me mad. Half the times you tried it the service failed. In the end I used to just tick the 'haven't got my key with me' box and answer the security question (bank a/c number) which I could recall from memory.

I suspect this could be much the same. Perhaps there is an opt-out in the way that chip-and-signature cards exist for people who can't use chip and pin.

I guess when A&L move over to Santander systems we'll be getting this too!