HSBC to issue security tokens to its customers

notafan

I don't have a problem with it being more secure at all.

It just narks me the way they choose to do it.

I know what'll happen, it'll get lost, I'll forget it and it'll become a hassle to use. No thats not HSBC's fault but card readers have been around for ages and HSBC havent been using them, so why all of a sudden has HSBC become less secure in that we need these.

I don't really mind using them for setting up new payments etc but why we have to log in with them i have no idea.

They could have really looked at it and thought, how can we make it more secure but not any more inconvenient. -They haven't they've just thought ah that'll do.

It especially narks me that they are happy for someone to be able to swipe £15 a time from my account without any security through wave and pay but these new things are forced on us under the premise of security - when clearly they have double standards.

How difficult is it to get the ib code, full dob and full password compared to borrowing a card to wave it infront of a machine.

And there's still nothing stopping anyone from calling telephone banking to send money wherever.

Sorry but were not gunna be anymore secure with them. If people are that determined to get in they will do - do all the banks with card readers have zero or significantly less online fraud? Will it stop anyone cloning the card and having their own secure key to use to get in anyway? Doubtful.

meer53

Lokolo wrote: »

I am a software engineer, I am not "newbie" enough to get caught out through internet means

And I've had online banking with HSBC for goodness knows how many years and I've never had problems.

Had fraud once... and that was because I didn't cover my hand with pin! Oppsy!

A lot of fraud is carried out without card details being compromised via the internet, be careful at your local petrol station ! Lets face it, can you ever see the day when there is no fraud ? I can't, the fraudsters will always find a way !

NFH

notafan wrote: »

And there's still nothing stopping anyone from calling telephone banking to send money wherever.

Yes, there is. The fraudsters are mainly based in eastern Europe and China and do not have a sufficient fluency in spoken English to match the account holder's name. The fraudsters hide behind all kinds of privacy layers to make it hard to trace or identify them through their online activities. The last thing they want to do is make phone calls and have their voices recorded.

notafan

NFH wrote: »

Yes, there is. The fraudsters are mainly based in eastern Europe and China and do not have a sufficient fluency in spoken English to match the account holder's name. The fraudsters hide behind all kinds of privacy layers to make it hard to trace or identify them through their online activities. The last thing they want to do is make phone calls and have their voices recorded.

They don't need to have their voices recorded, most banks allow you to do payments through automated means via telephone banking.

Bang in a cheap pay and go sim and bobs ya uncle. Besides if they pay someone enough they'll easily get someone fluent in english if they had to speak to someone - not that they would necessarily have to.

firstinflight

I assume that the token will be required for telephone banking as well, sooner or later.

notafan

Aside from the automated ITV woman HSBC would be better offering a translator over a token for telephone banking.

noodle

I'm considering opening a HSBC current account, and came here to do some research.. this thing could be a deal-breaker.

Most of my online banking activity poses no real fraud risk - I check my balance and transactions, transfer money between my own accounts, and pay my own bills. I'm happy to take the risk of a fraudster doing any of these things - and happy to use a vaguely-inconvenient device to do anything else.

I don't understand why they could not add some flexibility and allow customers to choose slightly varying security levels? By all means, have a minimum standard which protects the bank (say, setting up new payees, maybe transactions above a certain amount) but let ME decide if I'm happy to take the risk of someone 'breaking in' and reading my statement.

freakfire

Lokolo wrote: »

fs, this is just annoying!

Agreed. My friends who bank with Barclays have these and it means you can't access your online banking (say at work or at a friend's house) unless you happen to have the gadget with you. Such a pain as I often access it away from home and don't necessarily plan to. Nor do I want to have to carry it everywhere with me. *sigh*

andysm

I just received my HSBC token today. To use it you turn it on, enter your PIN, and then type the number shown on the token into the website. There is also a separate password that you have to enter into the website but I think the password is just an anti-DOS measure (like the date of birth was on the old login screen). It is a Vasco Digipass 270.

glider3560

andysm wrote: »

I just received my HSBC token today. To use it you turn it on, enter your PIN, and then type the number shown on the token into the website. There is also a separate password that you have to enter into the website but I think the password is just an anti-DOS measure (like the date of birth was on the old login screen). It is a Vasco Digipass 270.

Where do you get the PIN from? Is it possible to choose one yourself?