Additional security for online banking

slinga

This having to give contact numbers so banks can check an online purchase, how does it work if you buy something when overseas.
I spend 6 months or more overseas and sometime buy expensive air tickets or AirBnB stuff.


Do the banks check every online purchase or just random ones.
Can you give more than one contact number and if so how do they choose which to use.


I visited Halifax this morning and the Customer Service person had no idea except to say the scheme will be starting at the end of September. She was surprised when I told her it was already October.

[Deleted User]

Take your UK phone with you and enable roaming?

PRAISETHESUN

If you provide more than one contact number they usually give you an option of which one to choose for verification (eg. landline vs mobile) when you are prompted for security. I wouldn't advise however that you nominate a second number unless you fully trust it and only you have access to it. Either take your phone with you and enable roaming (it's free to receive SMS messages, only costs to send) or buy a SIM card in the country you are travelling to and then call up your bank to add this number to your security options.

My understanding is that they will ask for a certain percentage of transactions, particularly high value ones or if multiple low-value transactions go through is a row without verification.

eskbanker

slinga wrote: »

Do the banks check every online purchase or just random ones.

The new standards allow low-value transactions to be exempted under certain circumstances, but institutions are otherwise obliged to undertake proper two-factor authentication:

Payment service providers shall be allowed not to apply strong customer authentication, where the payer initiates a remote electronic payment transaction provided that the following conditions are met:

(a) the amount of the remote electronic payment transaction does not exceed EUR 30; and

(b) the cumulative amount of previous remote electronic payment transactions initiated by the payer since the last application of strong customer authentication does not exceed EUR 100; or

(c) the number of previous remote electronic payment transactions initiated by the payer since the last application of strong customer authentication does not exceed five consecutive individual remote electronic payment transactions.

slinga wrote: »

I visited Halifax this morning and the Customer Service person had no idea except to say the scheme will be starting at the end of September. She was surprised when I told her it was already October.

The original plan was for the new regime to take effect from 14 September, but, when it became clear that this wasn't achievable, the deadline for compliance was pushed back to March 2021 (for purchasing; online banking is March 2020), although banks can go ahead if they're ready.

More details at https://forums.moneysavingexpert.com/discussion/6021774/strong-customer-authentication-now-delayed-changes-to-online-verification