TSB internet banking fraud

Terry_Towelling

sheramber wrote: »

The bank were able to tell my husband a fraudulent transaction had been made with his debit card number in a supermarket in a specific town.

They looked the transaction up immediately and notified him.

They were able to tell my son a fraudulent transaction had been made with an iphone, but knew it was not his.

Sheramber, your family has been unlucky with fraud attempts against it, but, yes, if a transaction was made by card, all the necessary retailer info is in the card transaction data and it is all to hand for the bank.

On the specifics of OP's vague thread, I doubt that a ticket agency would invite you to pay for anything via Faster Payment (although it is not impossible) and a FP could display the retailer name if that's how you set the payee up - and why would you be invited to pay £1 ten days before anything else - unless the retailer is complicit? The most obvious payment type is debit card and that would be clearly identified in the transaction on the account - but the same questions about a ticket agency taking a £1 debit would need to be asked.

As for identifying the device used, we've had threads before where this has sparked debate. I have read about Verified-by-Visa and MasterCard SecureCode being able to detect differing devices and thereby make decisions on the transaction as a result and it seems there may be differences whether you access via an App or via other online processes.

Now, being too paranoid to access the account to check how the payments were made, or whether new payees have been set up - really? All that extraneous info about half-term, wages going missing, being in France, talking to the Ombudsman. And, noticing a £1 payment but not being too bothered about it because you knew you hadn't bought any tickets is simply unbelievable - isn't that the main reason why you would be bothered about it?

There was a whiff about this thread from the start and I think someone is merely trying to 'exercise' us.

tram73

I do apologise about my lack of ettiquette on your forum. Do you think I've got nothing better to do then exercise you. I have dog to do that. If I gave every detail of the situation in the original thread it would go on for pages. I don't use forums and i'm far better speaking to an actual human being.
I appreciate the feed back but maybe using this place for some possible reason how someone could get in to my bank account was a bit pointless.
I'll wait until I can explain myself over the phone to FOS.

Zanderman

tram73 wrote: »

I’ve not logged on since this all happened. It’s got me a bit paranoid. My phone app is not giving me the choice of using my thumb print. I’ll try and log in and see.

Logging in is the first thing I'd have done, to check all my payments, settings, contact numbers etc etc were ok and detect any new and report any new emerging discrepancies. I'd actually be doing it at least twice every day after a scam - to make sure nothing more was happening.

If you haven't actually looked at what happened yourself then I'm not surprised the account you're given here in the thread seems a little confusing, as you're writing down your understanding of what you heard was TSB's understanding. What you need to be telling people, if you want some guidance on what might have happened, is to get first hand info direct from your account.

RPWJ

Every time I set up a new payment I have to put in the passcode that is text to my mobile. Does a small amount(£1) get round this safeguard?

Uxb1

If it is like the Lloyds system (on which TSB ran prior to the IT issues) then no as you have to set up the new payee before you state what the amount of money you want to transfer is.
So any new payee has to go though the 2FA system either contacting your home or mobile phone as the second factor to authorised the new payee

Terry_Towelling

tram73 wrote: »

I do apologise about my lack of ettiquette on your forum.

It's not my forum or our forum, it's everyone's forum. It's nothing to do with etiquette but a total lack of answers to questions put to you and the fact that nothing adds up.

You've had it put to you that bank transfers require a payee to be set up. Being a TSB account holder you should know this, but you don't seem to.

Debit card payments would be obvious and wouldn't require any access to your bank account but you've not said anything about that either - except you now appear to be saying it was all done by accessing your account.

You say TSB asked about your wife using your account - how do they even know you have a wife? TSB seemed to know it was connected with ticketing. They would only know this if they were debit card transactions as Faster Payments don't have a retailer name unless the payer chooses to include one in the 'payment reference' and TSB wouldn't know if any such reference was a name or what.

You have now said that someone has accessed your account, so that points to bank transfers rather than debit card transactions and that just exposes the holes in your account again.

Your reaction to my post speaks volumes so good luck with FOS and I hope you have fun exercising your dog.

Ben8282

agrinnall wrote: »

Looks like an airline ticket agency. Not sure what search you did that was unable to find it - I searched for yahya ticket agency.



https://yahya-travels.business.site/

This is a very strange travel agent website.
So assuming that these people don't maintain a UK bank account, these were international payments sent to India.

Another point. Agrinnall helpfully found this link by googling yahya ticket agency. However, when I and others tried simply using the mane yahya we did not find this. Unless the OP knew in advance that this was a ticket agency, their search would have been simply for yahya and would not have returned any information about this ticket agency.

robatwork

tram73 wrote: »

I do apologise about my lack of ettiquette on your forum. Do you think I've got nothing better to do then exercise you. I have dog to do that. If I gave every detail of the situation in the original thread it would go on for pages. I don't use forums and i'm far better speaking to an actual human being.
I appreciate the feed back but maybe using this place for some possible reason how someone could get in to my bank account was a bit pointless.
I'll wait until I can explain myself over the phone to FOS.

The OP has been in forums for 10 years so no newbie niceness.
Let me translate what he just said.

"I haven't told you the full story and I now see the original post doesn't have most of the pertinent facts and has several inconsistencies"

Then goes on to say

"You won't be hearing the full story and I will be flouncing very shortly"

18cc

We will all try and help you if you do a bit of detective work on the payment(s).

Sounds like it wasn't your TSB debit card being used - it would have said against the transaction and anyway the TSB line of questioning seems to imply it was not that.

Could also have been someone set up a DD on your account. They wouldn't need access to your account to do it. However, it would be listed in your list of DDs any anyway TSB would have told you if it went that way.

Could have been a faster payment - someone would have needed to access your account, set up a new payee, passed 'new payee security' and then made the payment. If they did this, they could have called the payee anything so don't assume it necessarily went to the ticket agency - Yahya could have been a dummy name. Find out the account no and sort code of the payments. Have a think why someone would send £1 first - I can think of a reason - they thought a larger amount as a first payment might trigger fraud filters.

My bet is someone accessing your account somehow, setting up a payee with a dummy name but really paying themselves, testing it with £1 payment first then sending larger amounts.

You say you can no longer use fingerprint to log into your TSB account using the iPhone app. This raises a flag with me - something has changed. Does someone know your TSB app PIN number?

If someone knows your TSB pin number they can bypass fingerprint login, and also having the phone can intercept the new payee security. Does the actual phone itself require an unlock pin or anything or is it completely open.

TSB themselves obviously believe your phone was used to make the payments. Find out where the payments went and think who could have used your phone and who might know your TSB app pin.

DCFC79

agrinnall wrote: »

Looks like an airline ticket agency. Not sure what search you did that was unable to find it - I searched for yahya ticket agency.



https://yahya-travels.business.site/

Thanks, in my defence it was early in the morning and I only searched using yahya hence why the results I got weren't relevant.