Online banking security - why all so different?

takman

nearlyretired2004 wrote: »

Yes my online security is different from my OH on our San 123 accounts.

On a slightly different point - but still on security - I have just been refused information on an account that I opened years ago because the email address I'd sent from was not the one they had on record.

Using email addresses as security is inherently NOT secure.

anyone who has admin access to a Microsoft Exchange server with an account on it, can change the 'default SMTP address' ...i.e. the address an email appears to come from, to - I think - anything they like (although it may have to be from a valid domain name )

If I (still...) had access to an Exchange server it would have been the work of seconds to set up a dummy account and change the default SMTP address to be the one they wanted to see......

That's actually a more time consuming way of faking an email address. There are many websites that you can go to and simply input the email address you want it to come from write the email and away you go!. The only problem is that you won't get the reply if you have no access to that account or if the email account doesn't exist.