We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Just realised Abbey Internet Banking is not really safe......

..... just whipped my £2,500 out of the account back into my main Lloyds TSB account.

Other banks internet logins require an ID/Customer number, and then a selection of characters from a password from drop-down boxes (to avoid keylogging etc)

Whereas Abbey asks for the FULL debit card number, FULL password and FULL ID code at the main screen.

Not very secure at all.

So, I don't care that I won't get 6% on the money anymore, at least I still have it!! (And 2.5% with Lloyds Current Plus is better than nothing)
I spent 25 years in the mobile industry, from 1994 to 2019. Worked for indies as well as the big networks, in their stores also in contact centres. I also hold a degree in telecoms engineering so I like to think I know what I’m talking about 😂
«1

Comments

  • Yes but the password is a nine digit number and the id code is a 5 digit number - someone is very unlikely to get that right unless they have been negligent?

    How could someone access that fraudulently unless they knew all the details. Even if someone was monitoring what you were doing it daily with "spying software" wouldn't take them long to suss your password even if you were using drop downs to select selected letters, and it would be irrelevant if using selected letters or the full digits!

    Abbey are generally crap anyway so probably a wise move anyway ultimately!
  • Biggles
    Biggles Posts: 8,209 Forumite
    1,000 Posts Combo Breaker
    No-one could make a transfer without also having stolen your mobile phone, due to the one-time passcode system, so your money's as safe there as anywhere.
  • simax wrote: »
    ..... just whipped my £2,500 out of the account back into my main Lloyds TSB account.

    Other banks internet logins require an ID/Customer number, and then a selection of characters from a password from drop-down boxes (to avoid keylogging etc)

    Whereas Abbey asks for the FULL debit card number, FULL password and FULL ID code at the main screen.

    Not very secure at all.

    So, I don't care that I won't get 6% on the money anymore, at least I still have it!! (And 2.5% with Lloyds Current Plus is better than nothing)

    There's nothing magical about drop down boxes. Sure, they defeat a particular method of attack (key logging software), but can easily be overcome in any number of ways. If an attacker has already managed to get as far as installing keylogging software on your computer, your information is not secure no matter how you input it.
  • simax
    simax Posts: 1,977 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Biggles wrote: »
    No-one could make a transfer without also having stolen your mobile phone, due to the one-time passcode system, so your money's as safe there as anywhere.

    It let me move £2.5k to my Lloyds TSB account without so much as double checking. It just did it? :confused:
    I spent 25 years in the mobile industry, from 1994 to 2019. Worked for indies as well as the big networks, in their stores also in contact centres. I also hold a degree in telecoms engineering so I like to think I know what I’m talking about 😂
  • withnell
    withnell Posts: 1,629 Forumite
    Biggles wrote: »
    No-one could make a transfer without also having stolen your mobile phone, due to the one-time passcode system, so your money's as safe there as anywhere.

    I keep hearing people talking about this - doesn't apply on my account though!
  • Biggles
    Biggles Posts: 8,209 Forumite
    1,000 Posts Combo Breaker
    simax wrote: »
    It let me move £2.5k to my Lloyds TSB account without so much as double checking. It just did it?
    Exactly - you can move money to an existing payee, such as your own account! That would hardly be a problem. But (unless it is not yet fully phased in) you couldn't set up a payment to a new payee without Abbey calling your mobile, could you?
  • simax
    simax Posts: 1,977 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Biggles wrote: »
    Exactly - you can move money to an existing payee, such as your own account! That would hardly be a problem. But (unless it is not yet fully phased in) you couldn't set up a payment to a new payee without Abbey calling your mobile, could you?

    My LTSB account isn't a known payee...... makes it all the more unsecure.
    I spent 25 years in the mobile industry, from 1994 to 2019. Worked for indies as well as the big networks, in their stores also in contact centres. I also hold a degree in telecoms engineering so I like to think I know what I’m talking about 😂
  • td_007
    td_007 Posts: 1,212 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    simax wrote: »
    It let me move £2.5k to my Lloyds TSB account without so much as double checking. It just did it? :confused:

    You can set up a transfer with Halifax and Alliance & Leicester after logging with full passwords/security details. AS others have said, if someone can get into you account, there is practically nothing to stop them transferring out the money - hence the newly introduced step of mobile phone pass code by Abbey.
  • heloid
    heloid Posts: 472 Forumite
    Part of the Furniture Combo Breaker
    The fact that you can save your customer ID and only have to enter a 5 digit pin on A&L's internet banking is a little worrying...
  • Snooze
    Snooze Posts: 2,041 Forumite
    1,000 Posts Combo Breaker
    heloid wrote: »
    The fact that you can save your customer ID and only have to enter a 5 digit pin on A&L's internet banking is a little worrying...

    But if you try to make a transfer to an account not in your list or set up a new payee it will ask you to input a raft of random characters from your password before doing anything so not really 'worrying' at all.

    R
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.2K Banking & Borrowing
  • 253.6K Reduce Debt & Boost Income
  • 454.3K Spending & Discounts
  • 245.2K Work, Benefits & Business
  • 600.9K Mortgages, Homes & Bills
  • 177.5K Life & Family
  • 259K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.