Lloyds or Halifax bank accounts are easily stolen

Wizardy18

I don't see the point in the OP's post.

Given most banks you have to have a card reader with your card to generate a code to use to access or reset certain details.

That topped, some banks request you confirm the mobile number by in putting it, any change to this will delay and reset or change of details for a set period.
You'd need to know the mobile phone number.

All above, you'd get a notification to your email that a reset was requested.

Above all, very very unlikely.
No more likely than someone breaking into ypiy house or car and taking your handbag or wallet while a sleep.

Pointless thread.

18cc

I don't think this is a pointless thread at all. I can think of several scenarios where someone can have access to your bank card, date of birth and phone and reset your banking details

If anybody had asked me I would have said the only way to reset your banking logon details would be by a letter to your house indeed I know there are some banks where this is the case

Lloyds are no doubt trying to make it easier and avoid the wait of getting a letter but have inadvertently left a big hole in their Banking security

enthusiasticsaver

polymaff wrote: »

Give it a try, enthusiasticsaver. Neither of your responses were relevant to my post at all.

Compare with mije1983's 100% relevant post.

I was not responding to your post as you are not the OP.

Jeddy

It's apparent that none of the above have even tried the process. If you do, you'll find it works.
You don't normally need an unlocked phone to receive a phone call.

I've 'picked' on Lloyds and Halifax as I know they fail.
Barclays requires a card reader and knowledge of PIN so is safer.
Believe it or not, I don't have an account with every bank, so can't comment on the others!

Please can someone with a Lloyds or Halifax account actually try the above rather than just saying it doesn't work without trying it and tell me which point you believe it fails at?

As I say, information from
Driving licence (carried as proof of id etc.)
Bank card (carried so I can get money out of an ATM, buy things etc.!, you don't need the PIN, just the sort code and account number).
Locked mobile phone (PIN not needed, you just need to answer an automated phone call).

So, as I say, rather than dismissing the suggestion, please advise which step you believe it fails at?
Maybe I'm wrong, so correct me telling me where.
Thanks.

Jeddy

Let me demonstrate another way.
Anyone, go Lloyds website.
Logon>Personal
Click on Forgotten your logon details.
What does it say you'll need?
It assumes you know your date of birth and name!!

(Similar for Halifax)

mije1983

Forgetting for a moment whether or not it works like you say (I don't have a Lloyds account so can't test it), how would you recommend they fix this? What would make it more secure in your eyes? You have to balance security and simplicity for the end user.

On similar lines, if I have my keys stolen in addition to my wallet, then my house could get burgled. But that doesn't mean I'm going to stop using locks that are opened with keys. Because that is the balance I, and most people, choose between security and simplicity.

eDicky

When the phone rings, you're requested to input the code numbers given in the internet banking - but no keypad if the phone is locked.

Jeddy

mije1983 wrote: »

Forgetting for a moment whether or not it works like you say (I don't have a Lloyds account so can't test it), how would you recommend they fix this? What would make it more secure in your eyes? You have to balance security and simplicity for the end user.

On similar lines, if I have my keys stolen in addition to my wallet, then my house could get burgled. But that doesn't mean I'm going to stop using locks that are opened with keys. Because that is the balance I, and most people, choose between security and simplicity.

Good question!
Simple answer, Don't phone the mobile and ask you to type the security code from the website into your mobile phone. Instead send a text to the relevant phone and ask you to enter that into the website. You normally need to unlock a phone to access an SMS message.
I agree, you could be burgled, however you've taken reasonable steps to prevent it. Lloyds and Halifax have not taken reasonable steps to ensure the security of my money. Maybe they'd reimburse me, or maybe they'd fight it. I'd rather not find out!

Jeddy

eDicky wrote: »

When the phone rings, you're requested to input the code numbers given in the internet banking - but no keypad if the phone is locked.

Is my (android) phone different? When I receive a call I swipe the Answer 'button' and am then listening to someone. If I then look at the phone I can press the number pad (or similar) button which opens up a number pad enabling me to enter the required security code.
How would it work otherwise, unless you unlock your mobile phone with a PIN when you receive a call?

eDicky

Yeah, you're right, I'm mistaken - the speaker and keypad etc is available when you answer the phone.