Tesco Bank

Futuristic

I guess I got lucky! Nothing went out on current or credit account.

Katiehound

Ha missed their call back yesterday (which would have been within 48 hours) because a minor road was closed and I got lost on the fens!! and was therefore late home. The number left was unobtainable- but confirmed by switchboard that it was 'theirs.'
They said fraud dept was very busy (Ha ha!) and they would call me back within the next 24 hours....not...still waiting........

norm_

Seems if Tesco relied instead on keypad transaction authorisation like Nationwide then any attempt to move funds would have been thwarted.

Tesco are actually one of the few banks that let you setup new payees without reaffirming identity.

[Deleted User]

Katiehound wrote: »

Ha missed their call back yesterday (which would have been within 48 hours) because a minor road was closed and I got lost on the fens!! and was therefore late home. The number left was unobtainable- but confirmed by switchboard that it was 'theirs.'
They said fraud dept was very busy (Ha ha!) and they would call me back within the next 24 hours....not...still waiting........

I got through to them on Sunday just after noon and was promised a callback from the Fraud Dept but am still waiting for the call (now Wed evening). I was one of those with missing money (£242) on Saturday night, which was refunded by late Monday afternoon. Today I have emailed a full claim for compensation using the customer relations email address given earlier on this thread. I am not wasting more time phoning them.

colsten

norm_ wrote: »

Seems if Tesco relied instead on keypad transaction authorisation like Nationwide then any attempt to move funds would have been thwarted.

Tesco are actually one of the few banks that let you setup new payees without reaffirming identity.

Are you assuming someone hacked online access, set up new payees and then sent money to them? That is not what happened. Online access was not compromised. Before you ask, I don't know what exactly happened but I am 100% it had nothing to do with anyone abusing the online access.

As to needing a card reader: Tesco limit access to the physical device that you have authenticated with a code received on your registered phone and you must know your login information. Not 100% foolproof but neither is the card reader or any other authentication method.

expansion

I received a letter with a new PIN for my new card (yet to arrive). When I have had cards replaced, including for fraud, by other banks the PIN was not reset.

Is resetting the PIN normal Tesco practice or is it because the PIN was also stolen in the hack? For example, do Tesco card PINs change when a new card is sent because previous has passed the validity date?

YorkshireBoy

expansion wrote: »

...do Tesco card PINs change when a new card is sent because previous has passed the validity date?

The account has only been running since summer 2014, so unlikely that any cards would have expired yet I would have thought. They generally run 3 years or so don't they?

Anthorn

expansion wrote: »

I received a letter with a new PIN for my new card (yet to arrive). When I have had cards replaced, including for fraud, by other banks the PIN was not reset.

Is resetting the PIN normal Tesco practice or is it because the PIN was also stolen in the hack? For example, do Tesco card PINs change when a new card is sent because previous has passed the validity date?

Why not reset your own PIN? The PIN should be changed regularly as a security measure. Usually it's done at an ATM and the bank's blurb will tell you which ATMs to use, for example ATMs belonging to certain banks or ATMs in the LINK network, etc.

hoc

Anthorn wrote: »

Why not reset your own PIN? The PIN should be changed regularly as a security measure. Usually it's done at an ATM and the bank's blurb will tell you which ATMs to use, for example ATMs belonging to certain banks or ATMs in the LINK network, etc.

A PIN can of course be changed, but this wasn't really the question. I am also interested (curious) about this as replacement cards usually do not have the PIN reset so this suggests it was also compromised.

mapk

Is there an email address for customer complaints? The only email address I can find for TB is phishing@