bank closed sons account and accused him of fraud

masonic

BooJewels wrote: »

Do you mean that it can be safer to have it remember some info, rather that entering it each time - in case of keyboard loggers, people just watching etc?

Yes, some banks ask an additional security question when they detect you're logging in from a new device/browser. If you don't routinely provide this information then it makes it much harder for someone trying to get into your account from somewhere else, even if they've been able to capture your other details.

I personally don't ever type sensitive info in, never would dream of doing something as important as banking in public and rarely even get my old phone out in public - but was playing devil's advocate really in case it helps anyone improve their personal security, as I'm learning myself all the time.

Threads like this serve as a lesson to all of us as to how vulnerable we can all be.

In the case of a phone, the main risk would be screen recording malware. With data being entered by on-screen keyboard, this is not hidden like it can be on a PC with a USB keyboard. One of the benefits of using an app rather than the browser is that the app can contain security features designed to detect suspicious activity from other processes, which cannot be done in the browser. Some of my banking apps refused to run in the evening unless I disabled another app I used to have running that tints the screen to reduce the blue light output - it could just as easily have been a fake overlay trying to capture my details, so it was somewhat reassuring to see.

18cc

Yes exactly so and of course most of banking apps have their own keyboard and don't rely on the phone keyboard anyway so nothing can be captured

BooJewels

masonic wrote: »

In the case of a phone, the main risk would be screen recording malware. [...] One of the benefits of using an app rather than the browser is that the app can contain security features designed to detect suspicious activity from other processes, which cannot be done in the browser.

18cc wrote: »

Yes exactly so and of course most of banking apps have their own keyboard and don't rely on the phone keyboard anyway so nothing can be capture

Thank you both - that makes total sense, I hadn't thought of the keyboard app recording data (I prefer to copy and paste from a password safe - on all devices). Might have to look at banking apps then - not that I use them much on mobile devices.

pmduk

robatwork wrote: »

Get your local and national newspapers involved. This is a "juicy" story, and as long as it makes sense this may put pressure on the bank to recant.

Agreed, the Daily Wail would love this news story

Ergates

BooJewels wrote: »

I don't have a smart phone, but do use a tablet, but don't have any apps for things like banking. The odd time I need to use it away from home, I just log in to the web page for the on-line bank, just the same as I do on my PC. I don't even have them bookmarked.

I may be being naive, but is this a safer way on a mobile device to access things like banks, rather than a visible app that immediately gives a clue as to where you bank? (If they're not secured as 18cc suggested).

Because surely the thieves in the OP's case must have know where the son banked and that he had an appropriate app on a suitable phone, that drugging him would get access to. Is that suggestive that it was someone who knew him well enough all along?

On Android, there are apps available that let you rename and change the icons of your other apps. This would let you hide your banking app as something boring sounding - so should anyone get hold of (and unlock) your phone/tablet, they wouldn't easily be able to see who you bank with. I'm sure a seasoned hacker could get around that, but it should stop your average thieving scrote.

No idea about Apple devices.

K80_Black

My banking apps all say that the phone itself should be locked with a secure password, not a fingerprint or pattern, if you choose to use the fingerprint unlock for the app.

I suspect the OP's son had fingerprint unlock on both his phone and the app - the equivalent of using the same password for both, which is what the bank is taking issue with.

eDicky

K80_Black wrote: »

My banking apps all say that the phone itself should be locked with a secure password, not a fingerprint or pattern, if you choose to use the fingerprint unlock for the app.

Interesting, I have 17 financial apps on my phone, all with fingerprint access (except 2 HSBC), and none of them have told me that.

It makes sense though, certainly worth considering. My phone is also unlocked by fingerprint, however I consider myself sufficiently immune to encountering any situation where I might be drugged or have my finger chopped off...

masonic

K80_Black wrote: »

I suspect the OP's son had fingerprint unlock on both his phone and the app - the equivalent of using the same password for both, which is what the bank is taking issue with.

They haven't accused him of being negligent, they've accused him of fraud.

optomystic

thank you for all your replies, we really appreciate your time and questions,.. especially the link to the student kidnaps in manchester, its shocking!

yes, my sons phone was unlocked using fingerprint, as was the banking app, and he was not aware that it should not be. but he did not do it.
the bank, took 2 working days to "fully investigate" complete their investigation and close his account, they have not listened to him at all and have not even spoken to the police yet....
they have said to him, "students do this all the time"
we are fuming at the way they have treated him.honestly it is so frustrating talking to these guys, he did not do this!!
we have sent a letter to the bank today and asked for the call logs since they have completed their investigation!
son is talking to his councillor and police today so we will see how the investigation is going, then we will write to the FOS

anything you think i should add to the FOS letter?


thanks in advance

xylophone

they have said to him, "students do this all the time"

Get assaulted, kidnapped and robbed?

I hope not.......