MBNA Compromises Your PIN Number(s)

keithy1

MBNA WILL SEND YOUR CURRENT (SECRET) PIN NUMBER IN THE POST!!!!

IF YOU HAVE ONE - CHANGE YOUR MBNA PIN NUMBER, YOU DO NOT KNOW WHETHER ANYONE HAS OPENED YOUR MAIL IN THE PAST, IF THEY HAVE THEY MAY NOT HAVE USED THAT KNOWLEDGE YET. DO NOT USE THE SAME PIN NUMBER FOR MBNA AS FOR OTHER SERVICES.

When your card is up for renewal MBNA will happily send your secret PIN through the post, and albeit in a separate letter your card will follow.

This represents a gross security oversight, and MBNA deserves to be hauled over the coals for it.

As far as I am concerned my PIN is secret, that I have never told anyone, nor have I written it down for 20 years. Now I find that MBNA is happy to send my pin through the standard mail without any regard.

I was under the impression that it was standard practice for banks to refuse to send out pin reminders due to this known security compromise. If you want a new pin, you get a new random one. They do not EVER send reminders of your existing pin. Not so with MBNA.

This morning, when I recieved this un-assuming mail which looked much like all the other MBNA junk mail that usually arc's directly towards the bin, I was surprised to see it was "pin number reminder". I thought that this was odd since I didnt need reminding of my pin number, and I had not asked for it. Being curious I followed the instructions and there before me was revealed my secret pin mumber.

Amazed, and somewhat angry I rang MBNA immediately to close my account. Any company that can be so STUPID doesnt deserve any customers.

best regards

Keith

RTNI

So, you are angry about getting a PIN reminder in the post?

I can tell you from experience that companies do send out PIN reminders for one of 2 main reasons. Either the PIN has been locked and cant be used until it is taken to an ATM to unlock it, or if the card has not been used in a long time.

b33r

I've got a card with MBNA and I have never received anything like this.

I also smell a rat, like "keithy1" is just trying to give them a bad name for some reason, I know how bank systems work and no-body know's your pin or could look at it (on their system anyway), thats kinda how encryption works and I don't think it would be legal for them not to use encrytion.

keithy1

I checked with Barclays and they said they would never send my pin to me in the post. Unless I specifically asked them to.

Of course I am angry at MBNA, but I am also incredulous, I mean talk about dumb.

best regards

Keith

jonesMUFCforever

Does not every card company send out PIN's by post?
I have always had mine through the post with no trouble.

youknowwho

keithy1 wrote: »

MBNA WILL SEND YOUR CURRENT (SECRET) PIN NUMBER IN THE POST!!!!

IF YOU HAVE ONE - CHANGE YOUR MBNA PIN NUMBER, YOU DO NOT KNOW WHETHER ANYONE HAS OPENED YOUR MAIL IN THE PAST, IF THEY HAVE THEY MAY NOT HAVE USED THAT KNOWLEDGE YET. DO NOT USE THE SAME PIN NUMBER FOR MBNA AS FOR OTHER SERVICES.

When your card is up for renewal MBNA will happily send your secret PIN through the post, and albeit in a separate letter your card will follow.

This represents a gross security oversight, and MBNA deserves to be hauled over the coals for it.

As far as I am concerned my PIN is secret, that I have never told anyone, nor have I written it down for 20 years. Now I find that MBNA is happy to send my pin through the standard mail without any regard.

I was under the impression that it was standard practice for banks to refuse to send out pin reminders due to this known security compromise. If you want a new pin, you get a new random one. They do not EVER send reminders of your existing pin. Not so with MBNA.

This morning, when I recieved this un-assuming mail which looked much like all the other MBNA junk mail that usually arc's directly towards the bin, I was surprised to see it was "pin number reminder". I thought that this was odd since I didnt need reminding of my pin number, and I had not asked for it. Being curious I followed the instructions and there before me was revealed my secret pin mumber.

Amazed, and somewhat angry I rang MBNA immediately to close my account. Any company that can be so STUPID doesnt deserve any customers.

best regards

Keith

How else would you like the PIN sent? Be told over the phone? sent an email? Sending thru the post has been the way for years and its fine. Talk about an over reaction, they sent you a PIN reminder!I really cant see whats the problem, unless i am seriously misuderstood. please enlighten.

James

Take the easy option if your concerned about PINs and get yourself Chip & Signature Credit Cards.

iceicebaby

How were you expecting to get your PIn then ?

bristol_pilot

iceicebaby wrote: »

How were you expecting to get your PIn then ?

He doesn't mean the initial PIN that came when the card was new, but having changed it to something memorable an unsolicited 'reminder' was then sent through the post some years later.

Halifax did this to me too when they changed from Visa to Mastercard. My card number was changed and they 'helpfully' sent a 'reminder' of my secret PIN through the post that I had kept secret for years. It arrived in a different envelope but the same postal delivery as the new card, despite me having registered with the card provider that I have a postbox that is shared with neighbours in a block of flats. I share the OP's frustration, but never bothered to close my account.

youknowwho

yes, i understand that, it was his "secret PIN" that noone knows. The question is, how would he like to receive it? As it said in thefirst quote, he wasnt happy with it coming thru standard royal mail.

emmalt

The key is that he didn’t ask for it!

I would be concerned as well if I was sent a PIN reminder without asking for it. Why do that? What if it was intercepted? As you never requested it you would not know that you should be getting it.

I have the same kind of thing with my Natwest switch card. They sent me a new one, apparently. As I moved house at the same time I didn't get it (even though I have redirection). I never expected one as my switch still had two years to go so it wasn't until I tried to use my old one and it had been cancelled that I found out. When I called nobody seemed to know why it had been cancelled (turned out that they had changed a logo or something so I got a new card). Thankfully it hadn't been used fraudulently but it could have been.