Monzo account was hacked, need help.

cannugec5

I log in to my Monzo app, without entering any passwords or PIN on my recognised device. 

I do, however need to enter the PIN to do a transaction. 

Marvel1

Zinger549 said:

born_again said:

I don't know what's need to get in to Monzo app. But a banking app with just email & a password would be unusual.
Normally there is some form of biometrics involved.

You can turn off biometrics in the app so it just opens without the need for fingerprint ect.

Halifax app will ask me for for example 1st, 4 and 5th character of my memoriable word.

born_again

cannugec5 said:

I log in to my Monzo app, without entering any passwords or PIN on my recognised device. 

I do, however need to enter the PIN to do a transaction. 

So what details do you need to enter? Or are you using face id?

I can't believe that simply taping & opening app lets you straight into your account.

Zinger549

born_again said:

Zinger549 said:

born_again said:

I don't know what's need to get in to Monzo app. But a banking app with just email & a password would be unusual.
Normally there is some form of biometrics involved.

You can turn off biometrics in the app so it just opens without the need for fingerprint ect.

So what info is needed to login in then?

You can set it to just open, or you can ask it for fingerprint/password each time you log in. It will ask you to confirm yourself every so often.

GingerTim

Zinger549 said:

born_again said:

Zinger549 said:

born_again said:

I don't know what's need to get in to Monzo app. But a banking app with just email & a password would be unusual.
Normally there is some form of biometrics involved.

You can turn off biometrics in the app so it just opens without the need for fingerprint ect.

So what info is needed to login in then?

You can set it to just open, or you can ask it for fingerprint/password each time you log in. It will ask you to confirm yourself every so often.

That doesn't sound particularly secure (or sensible).

km1500

i am guessing you need fingerprint etc to add a new payee though ...

born_again

Zinger549 said:

born_again said:

Zinger549 said:

born_again said:

I don't know what's need to get in to Monzo app. But a banking app with just email & a password would be unusual.
Normally there is some form of biometrics involved.

You can turn off biometrics in the app so it just opens without the need for fingerprint ect.

So what info is needed to login in then?

You can set it to just open, or you can ask it for fingerprint/password each time you log in. It will ask you to confirm yourself every so often.

Wow, that a major flaw..
Unless it is using face ID to open?

VXman

born_again said:

cannugec5 said:

I log in to my Monzo app, without entering any passwords or PIN on my recognised device. 

I do, however need to enter the PIN to do a transaction. 

So what details do you need to enter? Or are you using face id?

I can't believe that simply taping & opening app lets you straight into your account.

Yes it is as easy as that on mine. I hadn't really thought about it until I lost my phone in Thailand 2 weeks ago. Fortunately I had fingerprint ID to open the phone. I feel for the OP - contacting all my banks that were on my phone or in Google Pay was a nightmare from abroad and some of them were not very helpful!

Zinger549

born_again said:

Zinger549 said:

born_again said:

Zinger549 said:

born_again said:

I don't know what's need to get in to Monzo app. But a banking app with just email & a password would be unusual.
Normally there is some form of biometrics involved.

You can turn off biometrics in the app so it just opens without the need for fingerprint ect.

So what info is needed to login in then?

You can set it to just open, or you can ask it for fingerprint/password each time you log in. It will ask you to confirm yourself every so often.

Wow, that a major flaw..
Unless it is using face ID to open?

You need you fingerprint/pin to transfer any money. It will also ask you to verify yourself every so often.

Nasqueron

mikb said:

Not sure how they got into Vinted, what i do know is she used the same email address with Vinted & Monzo (silly thing to do i know).

Same email address, or same email address and same password?

Same password counts as silly.

Same email address -- depends if you're the sort of person that creates a new email address for every organization ... but as most people don't, and only have a limited number of email addresses, it's perfectly fine to use the same email address.

FWIW, gmail allows you to add identifiers to email addresses which are treated as unique separate ones even though they all filter in e.g. I could have:

Nasqueron@gmail.com (I don't unfortunately as it was long gone before I started with the username!)
Nasqueron+halifax@gmail.com - for all emails relating to Halifax
Nasqueron+signup@gmail.com - for web newsletters

You can do this infinitely and actually helps you work out if someone is signing you up for spam as you can see which source organisation pushed it!