Emailing sensitive documents: Is it worth sending encrypted?

mattb5906

I have been asked to provide copies of bank statements, most recent P60 tax form, last 3 pay slips, mortgage statement, health insurance policy etc. to a mortgage broker that I trust. I have no problem sending the documents, but in my opinion these documents contain sensitive information so should be sent encrypted in archive such as a ZIP file.

What are your thoughts?
Am I being over cautious?
Would you consider this analogous to sending your credit card details by email unencrypted?

debitcardmayhem

Who by is the obvious question , and why via email ?

mattb5906

I have used them in the past so I'm fine with using them again. It's so they can advise me on the best deal.
Email just seems the most convenient method as they are not local. Would you send the documents I mentioned via email?

cookie365

Many business email servers will block zips and other archives.

I would encrypt them, put them in a public dropbox/google drive/one drive/whatever folder, email them the link, phone with the password, and once downloaded delete them.

Owain_Moneysaver

The problems with what you suggest are
(a) ZIP file encryption is so weak it isn't worth the name
(b) the recipient may not have a clue what to do with it when they get it

scanning or photographing, bundling the images together in a PDF and emailing that would probably be sufficient protection against random scanning of email.

CC-Warrior

mattb5906 wrote: »

I have been asked to provide copies of bank statements, most recent P60 tax form, last 3 pay slips, mortgage statement, health insurance policy etc. to a mortgage broker that I trust. I have no problem sending the documents, but in my opinion these documents contain sensitive information so should be sent encrypted in archive such as a ZIP file.

What are your thoughts?
Am I being over cautious?
Would you consider this analogous to sending your credit card details by email unencrypted?

I would at the very least send them in a password protected archive file. Call them with the password. Both parties would need the same encryption system/email service to send & receive encrypted.

forgotmyname

The issue will be when they unencrypt them and leave them open on a computer at the other end.

Unless your computer is compromised or your email is being monitored your unlikely to have any issues.

mattb5906

Thanks all for your replies.

Yes, I've found that their email server blocks encrypted ZIP files and they can't open them by downloading from online storage such as Tresorit.

I shall send via encrypted PDF and see if that works, although I've heard the encryption on that is poor.

It just seems bad practice sending data like that unencrypted, hopefully you agree? I bet when/if they forward the information on to a mortgage lender (if I decide to go with a deal) they don't even bother encrypting it.

If you were asked to send information like that, but their system didn't allow encryption, would you refuse to send it unencrypted or would you just risk it. Or send it by post.

Mountain out of a molehill, but it just seems wrong.

debitcardmayhem

mattb5906 wrote: »

Thanks all for your replies.

Yes, I've found that their email server blocks encrypted ZIP files and they can't open them by downloading from online storage such as Tresorit.

I shall send via encrypted PDF and see if that works, although I've heard the encryption on that is poor.

It just seems bad practice sending data like that unencrypted, hopefully you agree? I bet when/if they forward the information on to a mortgage lender (if I decide to go with a deal) they don't even bother encrypting it.

If you were asked to send information like that, but their system didn't allow encryption, would you refuse to send it unencrypted or would you just risk it. Or send it by post.

Mountain out of a molehill, but it just seems wrong.

Why not send them via Fax (old tech I know) mind you most folks don't have serial ports any more, but there is the carrier pigeon (sorry royal mail next day delivery). With most mortgage approvals taking circa 6 weeks there is no need to rush surely

814man

In my view forgotmyname has identified the main problem here. The risk that a correctly addressed e-mail will be intercepted and the data it contains misused is pretty low. The risk that the recipient will not treat the information you are sending them in a secure way is far higher.

stevemcol

Owain_Moneysaver wrote: »

The problems with what you suggest are
(a) ZIP file encryption is so weak it isn't worth the name

Interesting view. What makes you say that?