Vodafone disclosed my bank details & breached DPA

FutureGirl

If the 'fraudster' answered all the security questions correctly, then Vodafone wouldn't have breached DPA.

I'm also sure there is no rule under the DPA that says you cannot disclose bank details to the account holder.

d123

NFH wrote: »

Your complaint is against Halifax for acting upon the fraudster's payment instructions without carrying out proper checks or without implementing sufficient security, e.g. two-factor authentication. Your case against Halifax is much stronger than any potential case against Vodafone. You should focus on Halifax.

Unless the OP fell for a phishing email or website and gave away their online banking details to an online fraudster.

This would be something completely divorced from his complaint about someone phoning Vodafone who knew enough about his personal details to pretend to be him.

Amie_3825

Does anyone know who the governing body is for Vodafone?
Like the Financial Ombudsman is the governing body for banks if you escalate your complaint to them.......

grumbler

http://www.vodafone.co.uk/vodafone-uk/forms/complaints/#

After Ombudsman Services Communications it's a court.

mobilejunkie

And all you can recover in court is your loss - and there isn't any.

NFH

mobilejunkie wrote: »

And all you can recover in court is your loss - and there isn't any.

Exactly. The OP has conflated two issues:

• Vodafone giving a sort code and account number to a fraudster
• Halifax acting upon payment instructions given by a fraudster

Nothing above suggests that there is any consequence of one upon the other; they are unconnected.

mobilejunkie

Apart from that - there is no loss to the OP.

Marktheshark

this sounds like a cold call scam going round where someone calls claiming to be from Vodaphone and asks for your security details, then they set up diverts.
The real hit will be the next bill .

victor2

It does sound like all Vodafone did was agree to transfer calls to a different number, when there were some inconsistencies in the security process.
Maybe that in turn allowed the fraudster to circumvent the Halifax security through some sort of "forgotten password" process, which sent unlock details to the registered mobile number.
Halifax has recovered the money for the OP, and maybe Vodafone made it easier for the fraudster, but difficult to see where blame could be placed from the information given. Successful fraudsters will always find the weakest point in the chain to exploit.

Would it be possible to impersonate a bank account holder from mobile phone account details? The sort code would identify the bank and branch. Full name and address would come from the account. Diverting all calls to another mobile number may then allow further access...

forgotmyname

I wonder if this happened the other way around? Fraudster gained access to your bank first then used your DD info to gain access to your phone account?

With the Halifax you need your username and password then 3 digits from your security question, the phone company wont have those details unless you use the same info for everything?

Question is, who has access to your bank login info?