Santander 2FA now allows online banking login via One Time Passcode email (OTP).

Ogre_De_Flamme

Not advertised anywhere but Santander allow customers to login to online web banking via OTP sent to your email address. No payments can be made and don't know how long this has been allowed since - it may extend to Cahoot as well.

where_are_we

Is this a benefit compared to normal login with your customer number and 5 digit secure code?

Notepad_Phil

Ogre_De_Flamme said:

Not advertised anywhere but Santander allow customers to login to online web banking via OTP sent to your email address. No payments can be made and don't know how long this has been allowed since - it may extend to Cahoot as well.

How do you login via this method? I've just gone to the web banking page and it looks the same as usual so can't see how you would get it to send the OTP via email.

Ogre_De_Flamme

This is a alternative for OTP via SMS, not Personal ID, password or security number.
You have to request this method. On the phone to one of the santnader cs numbers is known to work. Secure web chat may work or deleting your mobile number may do it.

where_are_we

You say no payments can be made after getting logged on via OTP sent to your email. How then do you make a payment?

[Deleted User]

where_are_we said:

You say no payments can be made after getting logged on via OTP sent to your email. How then do you make a payment?

Direct Debit, Debit card, ATM and in-branch I'd guess

where_are_we

I suppose I should have made myself clear - "faster" payments!

Online banking without being able to make a faster payment would be a very reduced service.

moneymoner

Is it an option or a requirement under PSD2 for banks to offer this OTP method ? Where in the regulations for SCA is it required to have or use a mobile phone for OTP and where does it state that an email address cannot be used ? Most banks and online payment providers only allow or enforce SMS message for OTP authentication so I'm guessing their is an issue with their systems to allow email OTP.

masonic

moneymoner said:

Is it an option or a requirement under PSD2 for banks to offer this OTP method ? Where in the regulations for SCA is it required to have or use a mobile phone for OTP and where does it state that an email address cannot be used ? Most banks and online payment providers only allow or enforce SMS message for OTP authentication so I'm guessing their is an issue with their systems to allow email OTP.

The FCA regulations around SCA state quite the contrary - that providers should not rely solely on mechanisms that require a mobile phone. Banks should offer methods other than SMS, but it is not prescriptive about what they should be. Email is a commonly used alternative, and a well secured email address is arguably a more secure method for OTP than SMS. Providers have tended to flock to SMS, as it is low friction and suits most people, but it has its drawbacks, and it was clearly recognised that some customers would struggle with it.

Ogre_De_Flamme

OTP by email for FPS payments in Santander online banking now available for EXISTING PAYEES.
Started working once my (mobile) phone numbers had been removed (via telephone banking).
Can't comment about online shopping payments with card.
I found it arbitrary to get Santander to allow OTP by email. Best just to say you didn't receive the SMS OTP when sent.