Strong Customer Authentication - **Now delayed** changes to online verification

jonnygee2

Monzo - OTP in use for some purchases?

Monzo send a push message through the app which asks you to type in your card pin.

This is their implementation of 3DS. Some Monzo staff comments on this thread confirming this will be continued for SCA https://community.monzo.com/t/strong-customer-authentication/68224/3

However

I've got a Co-op credit card (used to be Town & Country Building Society so I've had it a long time - since the 1980s I guess) and nothing else with them. Yet I've received messages on a flyer and on my latest statement saying I must update my contact details to 'pay for my online shopping' - using a card reader (which they are replacing) and a debit card. I have neither because I don't have a current account or a banking account or a personal account or whatever they call them - I have a credit card account and that's all. They also say I won't be able to use my Verified by Visa passcode - but I don't have one of those either and everything has worked perfectly well online for years without one.

I can only contact Co-Op by phone (because any other way needs me to Login to Internet Banking and I can't) and they're too busy to answer.

Does this mean I shall no longer be able to use the card online? Or has the Co-op forgotten they have customers who don't have a current personal banking account?

Confused at whether I'm affected or not, and confused at what I supposed to have to do or not. Any insights?



Next step will be to consider whether it's worth the effort.

Browntoa

I'm assuming via the app

https://www.co-operativebank.co.uk/help-and-support/mobile-banking

eskbanker

However wrote: »

Does this mean I shall no longer be able to use the card online? Or has the Co-op forgotten they have customers who don't have a current personal banking account?

Confused at whether I'm affected or not, and confused at what I supposed to have to do or not. Any insights?

As per the link in post #1, you'll have to authenticate (some) online card transactions either via their app or by text or email. Updating contact details can be done by phone or in branch if online isn't an option for you....

18cc

You could add NS&I to the list although I can't find out anything about what their plans are for e.g. logon or indeed making payments from Direct Saver etc

eskbanker

18cc wrote: »

You could add NS&I to the list although I can't find out anything about what their plans are for e.g. logon or indeed making payments from Direct Saver etc

As I understand it, the SCA requirements within PSD2 apply specifically to Payment Service Providers, i.e. institutions via which payments can be made to third parties - I don't believe that NS&I, and other savings providers without credit/debit cards or unfettered Faster Payments capabilities (such as most building societies), are within scope, but could be wrong!

db2016

+1 for barclays, the pinsentry reader i had got binned once they had it on the app,



i mainly log in the app with my fingerprint (galaxy s10+) or every so often it doesnt let me do that for security and use a 5 digit code.



havent logged into the desktop site for a good few months but the pinsentry app / reader lets you generate the codes for doing so.

Maverock

jonnygee2 wrote: »

Monzo send a push message through the app which asks you to type in your card pin.

This is their implementation of 3DS. Some Monzo staff comments on this thread confirming this will be continued for SCA https://community.monzo.com/t/strong-customer-authentication/68224/3

And how can you tell it is the bank asking for your pin number!?

Zanderman

Maverock wrote: »

And how can you tell it is the bank asking for your pin number!?

Because it is sent through the app?

Keith18002

Just had an email from Santander telling me in the future I will have to use OTP or their mobile app. I do all my online banking from home where I have poor internet and no mobile phone signal. Have tried to get an OTP by driving 2 miles up the road but it has timed out by the time I return. Registration for the app requires OTP, the same thing applies.