Natwest Security issues?

philhoward

I'm a little worried - and whether related to the hiccup a few months ago, i've no idea.

Firstly - a few weeks after the almighty failure, I had a phone call from them that they suspected my NW CC had been "compromised" due to a request for a balance transfer. They changed my card/account number, all well and good.

Went to use my debit card yesterday, and it was declined, then "blocked"! Phoned bank straight away who said that my card had been reported lost, and that "I" had requested £240 via their emergency cash system (and taken it). Fraud case raised, money refunded etc.

I then, via conversations with the Fraud and Online banking teams find that my online banking password was also changed on Saturday (not by me). Now a week or so ago, I was paying a bill online (or going to) whilst overseas on business and it came up with a "you've entered your details wrong 3 times" message (possible as I think it might have been the wrong user ID). Odd, me thinks, so figured I'd leave it till I got home. Tried again at home via a different PC, different browser and ISP and still got the same message - browser showed the correct Verisign "security" icon, so went through the procedure, all well and good, got back onto the online banking and thought nothing more of it...until today.

Now somewhat worried by NatWest security TBH - always have online statements, shred anything they send me and virus/spyware scans show nothing untoward on either machine. Anyone else had issue recently?

No, I never respond to email links or anything or the sort. If NW send me an email, I check online by browser only...

Browntoa

when "paying the bill overseas" did you use an internet cafe or your laptop ??

that may be your problem if an internet cafe , your details were harvested there

philhoward

Nope - was using the company laptop on the Guest Wifi at the company I was working at (part of their network), so no hotspot/cafe mullarkey. On sign in, they only ask for some characters of your PIN/password - when it asked for further info, I didn't proceed "just in case" and left it until I got home so my details wouldn't have been totally exposed to gain access..

Its a large mutinational company, so not a tin-pot organisation..

Browntoa

ok , not that then

philhoward

Sort of wondering if anyone else has had problems, or is it just me?

dalesrider

Have you been advised to do full virus/malaware scan of your PC?

philhoward

Done on a regular basis anyway - just done another to be safe, and clean (as usual).

Only advice from NW was to use their "Rapport" one but that conflicted with the one I'm using.

dalesrider

Rapport will not stop a virus/malware form obtaining your details. It will only detect when you enter your login details into a unrecognied website.

The issue here, is someone has had a good attempt to do a balance transfer from your CC. I guess they must have login to your account to do that.
Then had enough details to get through phone security to get the emergency cash.
I would be asking what details they gave to get this. As well as changing ALL security details to this account.
Did you run malwarebytes ?

innovate

If you think you are 'clean' from a technology point of view, there is one other obvious possibility. As upsetting as it might be - has any of your family/friends access to your details?

To get 'emergency cash', someone needs to know quite a bit about you, and possibly also have your card.

philhoward

Didn't try malwarebytes - but going to run it now..

I suspect they got the online info first which, at a guess, gave them enough info to get the emergency cash (like last transaction, a direct debit etc).

philhoward

innovate wrote: »

If you think you are 'clean' from a technology point of view, there is one other obvious possibility. As upsetting as it might be - has any of your family/friends access to your details?

To get 'emergency cash', someone needs to know quite a bit about you, and possibly also have your card.

There's only my wife (we have no kids) and she wasn't even aware of the cash trick. She already has her own card (not NW), so that out of the question IMHO. I never give my bank account details out which leaves it being a hack from somewhere, or a leak at a company to whom i've provided details to recently or in the past (and with a debit card, that can be a few...).