Santander phone scam unsatisfactory response

robatwork

tempus_fugit said:

The only way I can think that they got the transaction details is if they managed to log into your account, which means they must have got hold of the password and passcode somehow. 

There is another way. The banks will never say about it openly because it's their own staff complicit in or doing this themselves.
I'm not saying that was the case here, but it is "another way" and never admitted.

grumbler

It's worth noting that the log-in process to online Santander account is possibly the simplest around. No 2FA, just a customer number and a short password.

Some virus, even a primitive keylogger, is a far more likely possible explanation.

Daliah

grumbler said:

It's worth noting that the log-in process to online Santander account is possibly the simplest around. No 2FA, just a customer number and a short password.

Some virus, even a primitive keylogger, is a far more likely possible explanation.

I don't use Santander online banking very infrequently, always from the same device. Usually I just need my customer ID and Registration number but this morning, they texted me an OTP to log in. I have just logged in again - no OTP needed this time. So it seems to be random.