The Top Easy Access Savings Discussion Area

AndyTh_2

It'd be worth someone checking if email address and phone number was enough from scratch on a phone (it might be more complex than that as apps can store a device key they use to additionally verify, unlocked via that biometric check).

If it's just email/SIM check with no device key, then its hugely vulnerable to SIM swap fraud

k_man

grumbler said:

k_man said:

grumbler said:

Steve_xx said:

bertsilver said:

Problem I have with Tandem is to log in to the app you have to put your mobile number in to receive a text to log in to my account, or am I doing something wrong?  

That's how it works for me too. It's a bit concerning as the text arrives on the same device as the app. Which makes me wonder about security.

Does this make any sense at all to anybody?

If the text can be sent only to the registered number, why do they ask to enter the number?

If it can be sent to any number what's the point in sending it?

The mobile number is effectively your username.
They ask you to enter it, in the same way as other apps ask for your username.

This makes sense, but why am I asked to unlock it with my fingerprint first, before entering the number (= my username)?

AIUI, the fingerprint locks the app itself, rather than the account. So once enabled, fingerprint access is an extra layer.

ChilliBob said:

I do think Tandem is a bit odd, I put in my mobile number, a text is sent eith the otp but the app then automatically fills in the otp as it reads from messages. So, basically, just knowing my phone number gets you in. 

I too am tempted to have a separate phone for stuff like that - obvs you need some every day stuff on your main phone, like say chase etc but do I really need Atom on there for fixes etc! 

 Not just knowing your number, but also having access to SMS sent to it, e.g. by having access to your unlocked mobile, in which case there are many other risks (lots of apps let you straight in, e.g. email.apps, which are the backup/recovery for many other logins)

 WhatsApp behaves the same as does Chip IIRC

AndyTh_2 said:

It'd be worth someone checking if email address and phone number was enough from scratch on a phone (it might be more complex than that as apps can store a device key they use to additionally verify, unlocked via that biometric check).

If it's just email/SIM check with no device key, then its hugely vulnerable to SIM swap fraud

Even if someone gained access to your Tandem account, the worst they could do is transfer money to your nominated account.
Adding a new connected account needs authenticated access to that bank

However we are digressing, and at risk of being accused of being off topic!

Band7

Another off-topic: For all those who have an issue with the Tandem login and/or their security: they have a confidential User Testing Club which currently seems to accept new members. Put your money where your mouth is and join 

https://www.tandem.co.uk/user-testing-club

bertsilver

k_man said:

grumbler said:

Steve_xx said:

bertsilver said:

Problem I have with Tandem is to log in to the app you have to put your mobile number in to receive a text to log in to my account, or am I doing something wrong?  

That's how it works for me too. It's a bit concerning as the text arrives on the same device as the app. Which makes me wonder about security.

Does this make any sense at all to anybody?

If the text can be sent only to the registered number, why do they ask to enter the number?

If it can be sent to any number what's the point in sending it?

The mobile number is effectively your username.
They ask you to enter it, in the same way as other apps ask for your username.

The app seems to hold little persistent data, so you need to fully login quite frequently.

With Chase and Zopa you only need a 4 digit passcode, why can't Tandem do the same .

sturgeon

Sorry I know it’s in this thread but it’s fast moving. Can someone recap the ‘rules’ for Chip’s saving account and when interest is applied? There was some good advice as to when to withdraw. 

SickGroove

Moved 2K from Chip back to Tandem then Chip increase their rate! Gonna stick with Tandem atm as I like their app and it's only 0.05% difference.

It all benefits the saver which is nice.

ChilliBob

k_man said:

grumbler said:

k_man said:

grumbler said:

Steve_xx said:

bertsilver said:

Problem I have with Tandem is to log in to the app you have to put your mobile number in to receive a text to log in to my account, or am I doing something wrong?  

That's how it works for me too. It's a bit concerning as the text arrives on the same device as the app. Which makes me wonder about security.

Does this make any sense at all to anybody?

If the text can be sent only to the registered number, why do they ask to enter the number?

If it can be sent to any number what's the point in sending it?

The mobile number is effectively your username.
They ask you to enter it, in the same way as other apps ask for your username.

This makes sense, but why am I asked to unlock it with my fingerprint first, before entering the number (= my username)?

AIUI, the fingerprint locks the app itself, rather than the account. So once enabled, fingerprint access is an extra layer.

ChilliBob said:

I do think Tandem is a bit odd, I put in my mobile number, a text is sent eith the otp but the app then automatically fills in the otp as it reads from messages. So, basically, just knowing my phone number gets you in. 

I too am tempted to have a separate phone for stuff like that - obvs you need some every day stuff on your main phone, like say chase etc but do I really need Atom on there for fixes etc! 

 Not just knowing your number, but also having access to SMS sent to it, e.g. by having access to your unlocked mobile, in which case there are many other risks (lots of apps let you straight in, e.g. email.apps, which are the backup/recovery for many other logins)

 WhatsApp behaves the same as does Chip IIRC

AndyTh_2 said:

It'd be worth someone checking if email address and phone number was enough from scratch on a phone (it might be more complex than that as apps can store a device key they use to additionally verify, unlocked via that biometric check).

If it's just email/SIM check with no device key, then its hugely vulnerable to SIM swap fraud

Even if someone gained access to your Tandem account, the worst they could do is transfer money to your nominated account.
Adding a new connected account needs authenticated access to that bank

However we are digressing, and at risk of being accused of being off topic!

Yeah, danger terratory of going off topic.. 

That makes sense, I guess the concept of multi factor authentication feels more comfortable when it requires two physical devices - e.g PC and phone. 

sturgeon

sturgeon said:

Sorry I know it’s in this thread but it’s fast moving. Can someone recap the ‘rules’ for Chip’s saving account and when interest is applied? There was some good advice as to when to withdraw. 

Also, how long does a withdrawal take? When withdrawing it only offers withdrawal to a debit card and not my bank account which is weird. Is this instant/same day or not? 

alibean121

sturgeon said:

sturgeon said:

Sorry I know it’s in this thread but it’s fast moving. Can someone recap the ‘rules’ for Chip’s saving account and when interest is applied? There was some good advice as to when to withdraw. 

Also, how long does a withdrawal take? When withdrawing it only offers withdrawal to a debit card and not my bank account which is weird. Is this instant/same day or not? 

You don't need to do anything special when you withdraw RE interest - just remember DO NOT close the account. They pay on the 4th working day of the month and anything accrued not paid when you close the account is lost. If you want to close the account, leave it empty for a full month to ensure you've had all the interest paid out first.

Withdrawals are instant even out of hours in my experience.

sturgeon

Thank you. When withdrawing is it only to your debit card? And still instant? Every savings account I’ve had is a bank transfer withdrawal so the debit card number appearing when withdrawing has thrown me.