The flaw that allows you to access other peoples credit files

boo_star

spadoosh wrote: »

No but i know where they are a lot of the time and would assume they carry their wallets/purse with them.

Would holding cc and dc details not contravene data protection from the credit reference point of view? (i dont know if they keep details of bank cards?). Then youve got the fact that your putting every single persons card details in the country on a database, that will definitely be able to get hacked or accessed illegally.

And then for people like me who lose/misplace their bank cards on a regularly basis its not offering much in the way of protection or accessibility should i need it. I mean order a new bank card and you cant access your credit file for a few months whilst it all gets updated.

Most of our society is set up on the basis of playing the game. The notes in your pocket mean nothing apart from 'i promise to pay the bearer on demand the sum of £xx'. The laws you adhere to are reactive, ie they can and do get broken every single day, they never stop someone from actually carrying them out.

Even the laws we have have little intrinsic value unless theyre being enforced. Im sure you wouldnt have to walk too far before coming across someone with illicit drugs on them.

Its similar with taxation. Youre expected to be open and honest with them. You dont have to be. However they make the consequences of not being particularly bad so as to encourage honesty. It doesnt always work though.

Essentially all youve done as well is access the information of someone close to you of which you knew most/all of the information to access it. I can imagine theres many parents, wives, husbands, ex's, children who can do that with or without bank card authentication.

They keep account numbers, which in the case of credit cards has always been the card number in my experience.

Brookside88

It took me about 900 attempts to get into my own credit file, let alone anybody elses!

Thrugelmir

What are you going to gain from accessing someone elses credit history?

michaels

cjv wrote: »

I suggested to my girlfriend that it would be a good idea for her to sign up to the free credit report services, to keep an eye on things and see how she could improve her credit history.

During the signup, it occurred to me that I knew all the answers to her security questions. At this point I stopped her and for "science" asked her if I could try and sign up on her behalf to see if I could. She agreed and I started the signup process again, from scratch.

Sure enough, after using a throw away email address, her name, d.o.b., address history and some questions about when accounts were opened etc (I guessed these from the choices available and partial information I already knew)... I was granted full access to her credit history!

This scenario was fine, no harm done as it was all consensual, but how many people out there know small financial details, clues even, to gain access to others credit reports? I was even given "another attempt" at selecting certain financial accounts/dates after failing the first time.

Just something I thought I would share with the forum, to start a discussion.

What are your thoughts and opinions on this, is this a worrying thing that needs to be fixed or something that can be brushed under the carpet?

(note MSE credit club was one of the reports I gained access to)

Whereas I have perfectly valid access to my own mse credit club report but can't actually see any experian data as the system is so buggy....

sleepyjones

I guess you could access their files, but in the same way you could probably access their email accounts (and many other types of account) since the chances are you would know the answer to their security questions ... or apply for loans / credit cards in their name. You don't do it because it would be illegal not because it's impossible