Natwest Security issues?

jalexa

philhoward wrote: »

Firstly - a few weeks after the almighty failure, I had a phone call from them that they suspected my NW CC had been "compromised" due to a request for a balance transfer. They changed my card/account number, all well and good.
.

This might seem like paranoia but you clearly have an analytical approach to account security. When the phone rang, apparently from Natwest, but *probably* "number withheld", how did you satisfy yourself that it was a genuine call and how did you authenticate yourself, something that Natwest would have required before proceeding with the call?

philhoward

I don't remember the exact conversation, but it was a 2 way exchange of information - and backed up with a letter I received 2 or 3 days later. If it wasn't genuine, then they've been acting as go-between me and NW! There was no mention of Debit Card details or Bank Account number that I recall from that conversation.

jalexa

philhoward wrote: »

If it wasn't genuine, then they've been acting as go-between me and NW!

Indeed, though I am not pushing the theory (much).

I do however have an interest in peoples experiences of authenticating unsolicited "number withheld" callers. Without somebody "blinking" on Data Protection I can't see how (genuine) calls can ever proceed.

philhoward

dalesrider wrote: »

Rapport will not stop a virus/malware form obtaining your details. It will only detect when you enter your login details into a unrecognied website.

The issue here, is someone has had a good attempt to do a balance transfer from your CC. I guess they must have login to your account to do that.
Then had enough details to get through phone security to get the emergency cash.
I would be asking what details they gave to get this. As well as changing ALL security details to this account.
Did you run malwarebytes ?

Ran malwarebytes - came up with a couple of things on the works laptop but relating to Internet Explorer (and I don't use it). Other machines are clean.

Just seems so very odd the same page appeared on two different machines...

philhoward

jalexa - I'm getting so sick of unsolicited "Withheld Number" calls I don't answer them at all now and have change my voicemail to reflect that (the reason I haven't answered your call may be because your number is withheld). Doesn't help working abroad a lot at the moment where receiving PPI and phone upgrade calls costs me!

If its important, they'll leave a message...

rcorke

I know of quite a few people, including myself, who have had security compromises since the NW computer debacle - never known one before. Mine was just a DD being set up and one payment made, very small amount NW picked up within 48 hrs that dodgy activity was going on. Someone else I know lost quite a bit of money but doesn't exactly sound the same as yours.

jalexa

philhoward wrote: »

Did you follow this thread (assuming RBS and Natwest platforms are similar or identical)?

https://forums.moneysavingexpert.com/discussion/comment/55266437#Comment_55266437

The worrying thing for me is not the unsubstantiated allegations of infection but the 'far from secret' account information required for an online reset. And *apparently*a suspect 'out of hours' offline reset protocol.

philhoward

I'm not alone then in thinking something "fishy" might be still going on?

Daft thing is I have no idea how much is in the account at the moment as I have a cancelled debit card and no online access...oh what fun!

On the plus side, someone I know was (still is, I think) about 150k out of pocket...thanks to an international transaction that disappeared out of one account yet hasn't reappeared...

philhoward

jalexa wrote: »

Did you follow this thread (assuming RBS and Natwest platforms are similar or identical)?

https://forums.moneysavingexpert.com/discussion/comment/55266437#Comment_55266437

The worrying thing for me is not the unsubstantiated allegations of infection but the 'far from secret' account information requested for an online reset. And *apparently*a suspect 'out of hours' offline reset protocol.

Sounds rather familiar to what has happened to me...Apparently I reported my card lost on Saturday and I note that in other cases of fraudulent use for cash its more often than not, £240. Is that because the max is £250 and that would trigger something? I've no idea as i've never even looked into this emergency cash trick..

coldhandoff

You can only get emergency cash in multiples of £20, at least over the phone anyway.