OTP's and 2 Factor Authentication problems

eDicky

hollywoodtower said:

Reliance on a single method of using a mobile number to send OTP's when there are so many secure and safe communication apps that are not dependant on the phone is very outdated.  

An OTP sent by SMS to the bank customers registered mobile number is probably the most reliable form of authentication, and can be received free from any mobile network charges while roaming anywhere globally, so I don't see much cause for complaint about it.

It's unfortunate that your Clarity card was blocked while traveling and was also used for mobile phone account payment, but it wouldn't be so hard to diversify sources of payment for travel and phone account to keep everything functional.

But at least you presumably had alternative means of payment while in US apart from your Clarity card.

400ixl

We travel to the US every year and use the Halifax clarity card as well. Payment verification is done within the application, not via SMS so what sim is in the phone makes no difference at all. Have you installed the Halifax app and set it to be the authentication method?

Find very few can't do contactless or chip and pin now, and if they don't they fall back to swipe and sign. None of this leads to any blocking of the credit card.

Your experience with the same card is very very different to mine in the US, which suggests something in your setup, not the banks capabilities.

Maybe something like a Chase account would also work, free access to their US ATM's, spot rate for currency exchange and in app purchase approvals.

The other thing of course is to have all the cards in Apple / Google pay and that way you just use contactless without the same limits requiring the chip side.

lr1277

According to this Apple site, the Apple pay limit in the US is $50.

https://support.apple.com/en-gb/HT207435

fifeken

hollywoodtower said:

Even looked at my account on line to try and add my US number to my account temporarily to receive OTP’s but…you cant do that without calling the UK.

You can change the phone number in the app.

EnPointe

hollywoodtower said:

A bit of a long post but tying to highlight the difficulties experienced whilst abroad.

We  travel to see USA family every year for at least a month.  Roaming and international charges being what they are now, I don’t use my UK mobile number but use a USA sim card for USA calls and data, and use WhatsApp calls and messaging for UK friends and family

I also use a Halifax Clarity Card (specially marketed for travellers) whilst in USA, but often US merchant or restaurant card machines can’t process the UK chip and so the transaction gets declined. That often leads to the card being referred to Halifax Fraud Section and the card being blocked.   The only way you can get it unblocked is to call the Fraud Dept in UK… but the USA Sim doesn’t allow international calls…..so calling is a very difficult option.  Well, put the UK sim card back in (blow the expense) and call them using that…but the phone wont work because the UK phone plan has not renewed because the credit card is blocked!  Vicious circle that you are trapped inside!

Likewise, whilst in the States, we often use our usual UK credit card and the internet to order items in the UK for delivery to our home ready for our return or to send gifts to UK family.   But….the credit card company insists that I receive an OTP to my UK mobile number ..which is not being used and if it was, couldn’t be used because the plan hasn’t been renewed due to the cc! So we can’t process any purchases.  Even looked at my account on line to try and add my US number to my account temporarily to receive OTP’s but…you cant do that without calling the UK.

Some companies have moved with the times, and allow OTP’s to be sent via email or WhatsApp (works on your phone irrespective of the sim, or  tablet or laptop and is encrypted so safer than text messages) or other secure ways.  The reliance on sending 2 factor authentication OTP’s to a UK mobile number may work ok whilst in the UK but not for international travellers who are not using a uk mobile.  

We are apparently living in the global market but some UK banks and credit card companies seem determined to keep us insular.  I am in total agreement with stopping credit card abuse and fraud but there are alternative ways that they can communicate with people securely without the reliance on a UK phone number. Why not include those alternatives and make life a bit easier?  If anyone works in this tech area be interested to hear their view.

the only  person 'keeping things insular'  is you with your insistence on using OTPs  by SMS  rather that the  Verification by 2FA offered by  the Bank / CC provider app which  mereley needs any valid ( and  safe  enough in your mind  / appetite) connection to your mobile device