MBNA No Security

cjdawson

I just found out about a way to get access to my account - without knowing anything more than my date of birth. This strikes me as making complete nonsense of any security measures.

Firstly, I needed to use a phone line of an existing MBNA customer.
Next dial their 0800 number.
Now when prompted for card/account details, enter nothing except for a date of birth.
You'll now have full access to an account registered by someone using your phone line.

In this situation, I don't think that linking phone line and date of birth provides any kind of security what-so-ever. The chances are that as someone with access to my telephone line, you'll know my date of birth. I could be anyone related to the person with the card. For example - Card Holders Son/Daughter, contractor working at the house.

jonesMUFCforever

What are they able to do with this information?
For example to do a balance transfer you speak to a person who asks you security questions other than date of birth.

jamalfatty

As is the case with most IVR's, you cant make any changes to account without speaking to an advisor, date of birth will just get you automated information about the account such as balance - for this purpose DOB + a linked phone number is sufficient to identify you.