Abbey One Time Passcode - OTP

rm54

Everone else seems to have the problem that they don't want to own or use a mobile phone. My problem is that we don't have a mobile signal. I have just started looking after all accounts and bill payments online and it is really useful becauese we live nearly an hour away from the nearest bank. I was told that I could set up new payments over the phone and then I would be able to use them as normal online. Today I had to send my student daughter some money as she has run out. So I phoned up to set up a new payment and was told I had to go to the bank (on sunday!!) and that even then I wouldn't be able to send her regular payments except with the text message system. I was told that they couldn't use my landline because you can't send texts to a landline, but you can, it is just translated into an automated voice text. I would dump Abbey but i don't think anyother bank would have us and how would I get paid ( I work freelance from home) and how would I pay my bills as they are all going over to direct debits etc. Any advice?

raywalker

I also found out about OTP when signing onto my online account this morning. Being one of the 'few' - i.e. a non-mobile phone user - I rang them, and after listening to the options, and talking to someone, told them that I would probably change banks. As others have said, I don't think they will worry too much about losing my income, but I wonder over all how much they WILL lose, when I see that even mobile phone users are unhappy?

magyar

dogstupid wrote: »

I still fail to see how this is going to make my online account much more secure as if somebody has gained access to my account online, they have the ability to change the phone number to a new 'throwaway' one. Yes it sends a text to the previous number saying it has been changed but it only needs the new phone to activate it and authorise a transaction.

Forgive me, I'm not an Abbey customer, I'm just interested. Presumably you have a password or PIN that you know as well as the code which is sent via the phone?

If so, this is a very, very secure system. It requires you to have something physical (i.e. the phone) and something only you know (the PIN).

If you only need the password it sends to the phone then this seems much less secure to me...

SailorSam

I have a PaYG mobile, but it's used only in emergencies. I've just done my first top-up it had £10 loaded onto it when i bought it over two years ago.
If i'm ever asked when filling in a form for the number i answer none.
I'm with the Abbey and don't like the sound of these changes, if they want me they can write or email, whenever possible i'll not even give my home number out.

dogstupid

magyar wrote: »

Forgive me, I'm not an Abbey customer, I'm just interested. Presumably you have a password or PIN that you know as well as the code which is sent via the phone?

If so, this is a very, very secure system. It requires you to have something physical (i.e. the phone) and something only you know (the PIN).

If you only need the password it sends to the phone then this seems much less secure to me...

Yes its secure already as you need to provide 3 things to login to online banking accounts. The passcode it sends to a mobile phone is designed to counteract phishing attacks where somebody has obtained this info and can get into your online account. Setting up up and making a payment to another account now requires a passcode to be received on a mobile phone and entered online to confirm the transaction. The flaw in their logic is if somebody has gained access to the online then getting around the passcode is a simple case of changing the phone number to one the criminal has access to. The additional security with OTP doesn't add up to much really.

I suggested they do something about this flaw and force 'number change' passcode via the old number before accepting a new number.

"We appreciate all your comments and are continuously looking to improve the site for the benefit of our customers. Please be assured that we'll take all of your feedback on board and, when and where possible, look to incorporate your comments."

We'll just have to wait and see how long they take.

maxi_isa

It's another step in the general direction of making it ever harder for us to deal with our own money.

Branch queues are a pain.

Telephone banking is frustrating with press-button options, recorderd (cr*p) music etc.

Online banking was good generally though Abbey "move money" service has had some serious downtime.

Now online banking is being spoilt by this complication.

There'll probably be a large bonus paid to the person who's idea it was.

ryan121

I'm sorry but most of you people are living in the dark ages! Abbey have done nothing wrong. Most people have mobile phones and you should have one even if it's just for emergencies. This measure is for your own security and i'm glad it's implemented as online banking is not very secure. Paypal do the exact same thing and I don't see the problem.

mary

Insulting to say the least and arrogant as well. I find it offensive for you to tell us that we are living in the dark ages! Who are you to tell me that I should have a mobile phone just for emergencies? Do you know my personal circumstances and know whether I can afford to have one?

I would point out that other banking systems operate secure systems as well, using landline telephone numbers i.e. Lloyds - no need to have a mobile phone number with them.

As I see you are new member, I would suggest you make any additional comments on the forum in a more considerate manner.

ryan121

I don't mean it in an insulting way but I find it quite ridiculous that people are saying they would leave their bank over this or find it as some sort of massive inconvenience. It's an important step in improving security. It's so easy for someone to get your pin and password these days that this should be seen as a good thing.

You mention the landline option but that is not the better option. What if you're not at home and want to do online banking. The whole point of using a mobile is that you're always likely to have it with you wherever you are.

Abbey have done the right thing and i'm just annoyed it took them so long. Also I have been on this forum a while I just don't post much.

nzseries1

ryan121 wrote: »

I don't mean it in an insulting way but I find it quite ridiculous that people are saying they would leave their bank over this or find it as some sort of massive inconvenience. It's an important step in improving security. It's so easy for someone to get your pin and password these days that this should be seen as a good thing.

It's not just the inconvenience of needing to have a mobile, for me it's the fact that Abbey now have your mobile number and may choose at any time to bombard you with marketing texts.

I have received two phone calls on my mobile from Abbey since the introduction of this service which I do not want. It wouldn't have happened if it weren't for this annoying new feature because they wouldn't have my mobile number otherwise.

Call me picky and pedantic if you want, but I *hate* marketing texts and phone calls on my mobile. My mobile is for chatting to and texting my friends and family ONLY.

Since I started this thread I have stopped using Abbey as my day-to-day account, and am now only using my account there for the high interest rate (I've moved all my direct debits). Once the high rate ends in March I will be closing my account.

As stated earlier there are plenty of other ways they could have made it more secure that don't require a mobile phone.