I was linked into an online bank account!

getoblast

Hi, I would like to warn others of this problem...

I sold an item on eBay and the lady wanted to pay quickly via banks transfer, she then emailed me a 'copy 'n' paste' of the webpage on a word document.

When I got the word document some of the text at the top said “hold Ctrl and click to visit this page“... and when I did I was shown her complete online bank account!

I couldn’t believe what I was seeing, my son said it can't be true. So I tried to set up a standing order to pay me £50 per month on a set date each month, entered my account details and confirmed the details… I thought it would just throw me out... but it actually saved!

I was then able to cancel the order, view her mortgage details and all her direct debits of all her accounts.. how wrong is that!

I have telephoned the lady and told her about all this and I was wondering if Martin would like to follow the flaw up?

Online Banking... how bad is that!

Best regards
Mark Burton

save-a-lot

Hi

Surely not. This has to be a wind up, as online bank accounts require some form of username and password to get access. What bank was it?

getoblast

It’s gods honest truth... I can’t beleave it myself, the bank is; Nationwide!

save-a-lot

The alternative is that you have been scammed, a fraudster using your intrigue to look at the account may have set you a trap - you may have passed your details onto a fraudster by messing around in the account. The webpage you saw could very easily have been a fake mock up of a page.

Did the page URL have https:// - denoting it as a secure page?

Was the page URL a subdomain? could you post part of the URL you visited? obviously not the whole URL, but upto the .co.uk, .com bit whatever extension it has. Then genuine Nationwide BS users may post here to verify that it is the correct URL for online banking.

getoblast

It's genuine... I had complete access to her accounts... Not all the links allowed access via the word document it was only the transfers link, but once there I could link to every page, even view her statements and her morgage details... it's mad!

zzzLazyDaisy

Did you really enter your real bank details?

If this is for real, you should notify your bank and put a stop on your account and get fresh details issued. This is how scammers get hold of people's details and before you know someone is spending on YOUR account

save-a-lot

Yeah - ok post part of the URL and let genuine Nationwide BS customers verify that part of the URL

Besides, it would be easy to set up a series of pages, maybe a database, the same functionality etc etc as a building societies online banking service.

Sorry to be scepticle, but it does not seem believeable.

getoblast

I'll do that... but I don't believe there's any need to... I have the ladies full contact details, including her eBay details... there's no chance of this being a scam that may backfire via my details.

She has transferred a payment into my account and already had my sort code and account number to do this, I have checked my account and the money is there.

getoblast

I'm on my laptop at the mo... I'll pop up to my main computer where the details are and post it in 5 mins...

save-a-lot

Quoting the BBC news

Phishing menace

And over the past few years, UK banking customers have been targeted by a surge in "phishing" scams.

The scams are perpetrated by fraudsters who send random e-mails to internet users asking them to update their banking details for security reasons.

But the e-mails direct users to spoof websites - at times very convincing replicas of real banking websites - to harvest the details of the banking customer's password and pin.

If customers fall for the scam, the fraudsters can gain access to their bank accounts or use them to launder money.

save-a-lot

getoblast wrote: »

I'm on my laptop at the mo... I'll pop up to my main computer where the details are and post it in 5 mins...

Couple of replies happened whilst posting the last message, maybe genuine person at the other end then