How safe is email?

RumRat

username said:

RumRat said:

Lost count of the number of business' that have sent me emails with bank details for payment contained as part of the signature or header.
What can someone do with the details other than pay something into your account???

Years ago it is said that Jeremy Clarkson published his bank details in a tabloid newspaper and had a number of spurious direct debits attached to it, so depending on the type of account you can have such things happen.

One thing that's forgotten to be mentioned is that if this is part of a commercial transaction (ie. buying a house, or dealing with tradesmen wanting to be paid or something involving significant sums of money) is to always be wary if they specify different bank details to be paid into from what is agreed, and always if you've any doubt do not hesitate to confirm with the other party via a recognised phone number (such as one on an previous invoice/advert, their website etc) that the bank details are correct before paying.

It's been known for the businesses' email to be hacked into, and email trails intercepted so that any bank details are changed to that of the fraudsters and some pretence used to explain the change of bank details using some cover story, the payee loses their money as a result.

Only companies vetted by the Direct Debit Scheme can use your sort code and bank account number to take money from your account. Therefore your money is always protected and you will not lose out if a DD is set up spuriously. If I remember correctly someone set up one DD on Clarksons bank to a charity and he lost nothing. This was back in 2008 and things have tightened up even more since then.
The rest of your post is valid and everyone should be aware of any changes to financial agreements.

zagfles

RumRat said:

username said:

RumRat said:

Lost count of the number of business' that have sent me emails with bank details for payment contained as part of the signature or header.
What can someone do with the details other than pay something into your account???

Years ago it is said that Jeremy Clarkson published his bank details in a tabloid newspaper and had a number of spurious direct debits attached to it, so depending on the type of account you can have such things happen.

One thing that's forgotten to be mentioned is that if this is part of a commercial transaction (ie. buying a house, or dealing with tradesmen wanting to be paid or something involving significant sums of money) is to always be wary if they specify different bank details to be paid into from what is agreed, and always if you've any doubt do not hesitate to confirm with the other party via a recognised phone number (such as one on an previous invoice/advert, their website etc) that the bank details are correct before paying.

It's been known for the businesses' email to be hacked into, and email trails intercepted so that any bank details are changed to that of the fraudsters and some pretence used to explain the change of bank details using some cover story, the payee loses their money as a result.

Only companies vetted by the Direct Debit Scheme can use your sort code and bank account number to take money from your account. Therefore your money is always protected and you will not lose out if a DD is set up spuriously. If I remember correctly someone set up one DD on Clarksons bank to a charity and he lost nothing. This was back in 2008 and things have tightened up even more since then.
The rest of your post is valid and everyone should be aware of any changes to financial agreements.

Indeed, don't worry about the Clarkson episode, it wasn't an attempted fraud or anything, it was some smarta**e trying to prove him wrong. He'd have lost nothing, assuming he invoked the DD guarantee. 

Doshwaster

km1500 said:

so you are saying that if I send an email from my Fred@gmail.com to Joe@gmail.com it can be intercepted and eg read before it arrives at Joe?

In principle yes, but there are billions of emails sent everyday so the chances of yours being intercepted are vanishingly low.

The biggest security hole in any system are the humans. You may send personal information to Joe but they he could then do what he wants with it. Bank details alone aren't that useful but having your name, address and DOB could allow Joe to do somethings you may not want.

So rather than asking if email is safe the question should be "Do you trust Joe?"

flaneurs_lobster

Rather annoyed that a large household name insurance company has asked for a copy of my bank statement to verify the account that I wish them to pay into to settle a claim - they want this as an attachment to an email sent to claims@LargeInsuranceCompany.com, not even an individual's email account.

Not happy, offered to password protect the pdf and give the password by voice, SMS, another cryptic email but was told this was too complicated and would delay/stop payment.

km1500

it will be perfectly safe to send this to them as long as you trust the email address

flaneurs_lobster

km1500 said:

it will be perfectly safe to send this to them as long as you trust the email address

I'm sure you're right, and in any case I have little choice (and it's a sleeper account with a quid in it).

Seems rather inconsistent with their insistence "for identity and security" that I give them my full name, date of birth, postcode and claim number - when they have rung me on my mobile.