Lloyds or Halifax bank accounts are easily stolen

vikkiew

I don't know about everything else but the password reset does not work this way.

Dobbibill

They haven't scrapped them, they are used by business customers.

Jeddy

Would it be wrong to say I'm primarily concerned about 'me'?
I do internet banking (as do most people these days).
I carry my bank card - that's how I get money out of an ATM and pay for things in shops.
I carry my driving licence - not often needed, but sometimes useful. I could stop carrying it, at inconcenience to me although at times I'd need to carry it anyway (collecting from post office etc.).

I have both Lloyds and Halifax accounts, although the Halifax is in the process of being closed. Before I do that I propose to phone them up to report my card as lost / stolen as if I was on holiday. No idea what the sort code or account number is, can't even recall my phone banking password - I'll see how I get on blocking my account with other data! My guess is they won't want to talk to me without my phone banking password leaving my account 'insecure'. I'll report back.
My SIM is protected with a PIN, however when I lock the phone that does not lock the SIM, so if someone has the phone they can receive calls.
I'm not keen on android pay, if someone shoulder surfs my phone PIN and takes my phone they can then go on a spending spree! Or is this also limited to e.g. £30, in which case it's not much use anyway.
I do change my banking security from time to time - I've just done it twice with minimal security so anyone else can too!
Transferring money to another account isn't a problem, I can create a new payee by taking a phone call again and the notification gets sent to the stolen phone via SMS.

If someone were to transfer money from my account would the bank take responsibility or blame me - they doubtless won't confirm but would blame me in the event.
If someone were to transfer money from my account and I say I didn't authorise the transaction but the thief says I did how are the bank going to decide who to believe?

Would I be able to block my PAYG phone easily - I've no idea what data they'd ask for, again I've no idea if I have a password with them, all I can give them the phone number and some personal details.

Changing banks is of course a sensible option, and leave the problem for everyone else - that's very sociable of me.
I believe account and sort codes on cards are a hangover from cheques - how else do you know the bank card (cheque guarantee card) belongs to the cheque you are being given? Got to say I don't even know if cards are used as guarantee cards any more, if not then I agree, why is the data on the card.

KJSmith

TheBankThatLikesToSayNo wrote: »

6. Change banks, RBS/Natwest/Child/Drummonds does not have account numbers on the cards, I don't know why other banks don't follow.

Though don't they allow you to login or reset your online banking details using the card number itself? (Looking at their websites this seems to be the case, but I'm not a customer so I can't confirm this)

Uxb

Emily_Joy wrote: »

It doesn't matter whether the phone is locked or not. One can always take the SIM out and put in in a different phone. There are programs (I do use them) developed for changing the Operating System on the phone - which will allow you to copy all the data within 24 hours (depending on phone memory).

I can assure you the banks systems are well aware when a SIM has been removed from the phone and transferred to another phone and is then attempted to be used as a second verification tool. Known as sim-swap-fraud.

Nick_C

Do people really carry their debit cards around with them all the time? I take my Lloyd's DC out roughly once a month to draw cash. The rest of the time it sits in a drawer along with the 6 other DCs that I never use.

I always carry a couple of credit cards, and have just got a curve card, so I'll be using my Lloyd's DC even less.

I only carry my driving licence as ID when abroad. Either as supplementary ID for using a CC in the States (and this is rarely asked for any more) or when I'm renting a car.

Jeddy

FriendlyFoe wrote: »

In order for someone to make a payment to a new payee, they would have to reset all your passwords, do a memorable information request and then arrange to send the compromise funds to a new payee.

Just think about from an automative persecutive. Once the payment is requested it is very likely to be declined based off all those prevailing factors and further verification would required. That verification would be a verbal identity check by having to call the bank- the sort of calls people complain about having to make.

Then should the fraudster pass that tier of security the bank would be clearly liable. In fact the bank would be liable at any point a payment is made that you did not authorise. The onus is on the bank to prove you didn't authorise the payment.

I'm not sure I agree with that so will test it.
With my Halifax account I'll change password and memorable information using the 'I've forgotten everything' approach. I'll then setup a new payee (one of my savings account which I don't have linked to it with another institution). Then I'll transfer a 4 figure sum into my savings account. Do you think that should ring enough bells?
Why do you think the bank would be liable, it's simply my word against someone elses if they can trace that someone else. They are either going to take the money from their account or leave it in their account (assuming it hasn't already been moved on elsewhere).

I'd like to know whether the bank regards it as safe to carry my locked mobile, debit card and driving licence and if they were all taken whether they'd refund me in the event of fraud. Of course they'll refuse to comment as it depends on 'individual circumstances' - well I've given them, so is it or not?

Of course, there is one other point, remember those workers in open plan offices etc., it's not hard to take a photo of a bank card / driving licence and replace them without anyone knowing. Then you just need to steal the phone - would you cancel your bank card if your mobile went missing? It went missing around the time we had that new cleaner who didn't stay long. No doubt the bank wouldn't refund you then, you've not taken care of your details.

Jeddy

vikkiew wrote: »

I don't know about everything else but the password reset does not work this way.

Please can you clarify?

Dobbibill

Jeddy wrote: »

Why do you think the bank would be liable

Maybe because of the online fraud guarantee.

https://www.halifax.co.uk/aboutonline/security/how-we-protect-you/?pagetabs=2

If your device, cards, DL are stolen - report it.
I'm not sure how much more you would want them to do if they are taking the hit on fraud.

EarthBoy

Nick_C wrote: »

Do people really carry their debit cards around with them all the time?

Yes, most people do.