Complete Savings - account suspended - asking for ID documents - security?

incus432

I know there are lots of threads on here about people getting signed up unawares to this site. This one is different. - I deliberately signed up and have used it extensively.  However my account was recently suspended along with payouts due, They stated this was in view of 'unusual activity suggesting use in breach of the terms and conditions' ( I haven't done anythihg of the kind btw). However they want me to send to them by email in the next 10 days. 

"-A copy of your passport or driving licence,

- Proof of address less than three months old (electricity, gas or telephone bill),

- A document from your bank confirming your bank details (detailing the account number, sort code and name of the account holder)."

This is to be sent to their general enquiries email address. I am concerned about the security of this unsecured email and that sending sensitive documents to it might open myself up to ID fraud

I asked them to suggest another more secure method of proof of ID but they just repeat the demand and state they will close the account if I don't 

Anyone else had problems with them like this?

marcia_

 Personally I wouldn't be bothered about providing this information. They are a well known legitimate organisation and there is nothing untoward they can do with this information. 

flaneurs_lobster

marcia_ said:

 Personally I wouldn't be bothered about providing this information. They are a well known legitimate organisation and there is nothing untoward they can do with this information. 

Don't think that the OP is concerned about the legitimacy of Complete Savings, rather it's needing to put a lot of personal data in an unsecured email.

I agree with OP, if an organisation wishes (or as is more likely, been obliged to) collect and verify this sensitive data then they should provide a secure channel to collect it.

There are ways to attach this data securely to an email but they require an amount of technical ability by OP and the recipient to agree to the method. Sounds to me like CS is just going through the motions and is not really interested in the additional complication/workload or the security of OP's data. 

incus432

Exactly so Flaneurs. 

This is the response I got from CS

"We completely understand your concerns about your personal data, and we want to assure you that protecting our members’ information is extremely important to us. We are fully committed to safeguarding your privacy and always operate in line with UK consumer protection and marketing regulations.

As stated on our Terms of Service, “To enable WL to carry out investigations into the validity of membership activity, you may be required to provide evidence of identification and/or of Items. Such evidence may include proof of delivery address, your address and/or copies of all relevant purchase receipts or such other evidence as we may reasonably request.”

Providing the requested documents to the email provided is a great step to ensure your account remains active and your membership continues without interruption."

Which completely fails to address the key point and just repeats the demand.  In other organisations (banks, share dealing platforms etc) you can login to their website to send secure messages and upload documents.  CS have no such systems at all. 

Hoenir

Entirely your choice whether to comply or move your savings elsewhere.  How other organisations operate is of no consequence. 

You could email the files password protected. Then send the password seperately. 

incus432

a)This is not a savings account.  

b) I am simply pointing out that their systems may put consumers at risk 

Ectophile

marcia_ said:

 Personally I wouldn't be bothered about providing this information. They are a well known legitimate organisation and there is nothing untoward they can do with this information. 

Standard email has no security.  It will pass through multiple servers on the way from the OP to Complete Savings.

Anybody with access to one of those servers could intercept the email, and get details of OP's:

• Full name
• Address
• Date of birth
• Driving licence number
• Bank sort code and account number

Email is not the way to send sensitive information.

marcia_

Ectophile said:

marcia_ said:

 Personally I wouldn't be bothered about providing this information. They are a well known legitimate organisation and there is nothing untoward they can do with this information. 

Standard email has no security.  It will pass through multiple servers on the way from the OP to Complete Savings.

Anybody with access to one of those servers could intercept the email, and get details of OP's:

• Full name
• Address
• Date of birth
• Driving licence number
• Bank sort code and account number

Email is not the way to send sensitive information.

 If you say so. You do know it is simple to add passwords to files which can be passed on separately. 

incus432

Email is not a secure method of sending private information and any organisation worth its salt knows this. 

They have now backed down and reinstated my account.  Apparently you are not allowed to rejoin CS within 6 months of leaving (buried in t&cs). However as they invited me to (re)join after I made an online purchase I would say it's their error not mine.