SPUSU - PAC transfer - BEWARE -EXCEPTIONALLY SERIOUS RISK

dcman

After checking it on this site, Via SPUSU's website, I ordered one of their SIMS and made the SERIOUS mistake of inputting my PAC code for retaining my current phone number to their new SIM.

They posted the SIM to me and Royal Mail delivered it to the wrong address, where the occupant took it and tried to activate the SIM. VERY VERY Luckily they were a little computer illiterate and were unable to input the correct settings to activate the SIM.

2 days after ordering the SIM, I had sent an email to SPUSU customer services. For 5 days I did not get a response from them to my email or the new SIM and I suddenly had to phone them up in alarm after getting SMS messages saying that my mobile number/SIM was no longer registered to my old network and that the PAC transfer had timed out.

They said that they had despatched the SIM to my correct address via Royal Mail.

I immediately realised it had been delivered to the wrong address and the occupant had tried to activate the SIM and RAPIDLY told SPUSU to cancel the SIMs number and its PAC transfer and to send me a new SIM. I also told them to put a secret code on the SIM which was not to be activated unless I phoned them with the secret code.

I initially thought that there was some mechanism in the SPUSU transfer process which had luckily prevented the activation of the SIM by the person to whom the SIM had been incorrectly delivered.

I got the replacement SIM and was horrified to find their was no such mechanism, and what was worse the SIM was accompanied by a letter which listed my customer number and this plus the mobile number of the SIM are 2 of the PRIMARY pieces of info SPUSU uses on its customer account login page.

SPUSU will send an SMS message to the mobile phone number when the user inputs the mobile number or their customer account number.

SPUSU do not recognize THE DANGER I.E that the new SIM and mobile number could be delivered to the WRONG addressee who is activating the new SIM.

I broke out in a cold sweat as I suddenly realised how close I had been to being in SERIOUS STRIFE and TROUBLE. I would have lost access to my mobile number which has access to my ALL my WhatsApp and SMS messages and contacts etc had the occupant input the right settings to activate the SIM. I would have been in SERIOUS STRIFE as there is a LOT of private info on My WhatsApp which I would have lost forever. The mobile number is also linked to many other internet accounts etc, plus the SPUSU account has DOB etc.

Anyone reading this should consider how serious it would be if they get into such a situation.

In addition, by getting into the SPUSU account they could have changed the passwords etc, and I would NEVER have been able to convince SPUSU that I was the correct account holder and recover the situation
.
I phoned SPUSU and tried to alert them to the danger, to no avail. Their login page and SIM card order process still manifest the same SERIOUS DANGERS. THEY HAVE CHANGED NOTHING.

THE BOTTOM LINE

a. DONT input your PAC nor Current number on ANY MOBILE NETWORK order screen for a new SIM. You will be up SH** creek if it is delivered to the wrong address.

b. SPUSU AND the other mobile networks should NOT include on the letter accompanying the new SIM ANY INFO apart from the customer's address to which the SIM is to be delivered.. certainly NOT the customer account number if it is part of the login account process.

c. The customer should be required to put in a passphrase when ordering and activating the new SIM.

d. SPUSU SHOULD CHANGE ITS LOGIN PAGE to remove the customer number as an option, and mandate that the user input their account password as the ONLY options to get into their account, and to input their passphrase to activate any new SIM that has been ordered via their website.

flaneurs_lobster

Short version.

Regardless of who your new operator is:

When you order a new SIM don't input a PAC from the old service.

Wait until the new SIM has been delivered, put it into a phone and check that the service is working satisfactorily.

Then give the PAC to the new service operators.

Isolis

I'm glad I opted for the eSIM option after reading this!

flaneurs_lobster

Isolis said:

I'm glad I opted for the eSIM option after reading this!

Indeed, but I'd still stick by my advice about checking out the new service before canning the old one.

Isolis

flaneurs_lobster said:

Indeed, but I'd still stick by my advice about checking out the new service before canning the old one.

I did do that. Spusu seems to encourage providing the PAC on sign up though, since there is no form to submit it later on. They ignored two of my emails so I submitted it by phone in the end, but at least the agent was friendly 

Ayr_Rage

Yes, your own serious mistake of inputting the PAC code before you had the new SIM in your possession.

After that a series of unfortunate events including you thinking you could ask the provider to add security (secret code) that wasn't possible.

Oops, lesson learned.

sheffieldeagle

Quickly looking at the Spusu site it does seem to be the case you have to contact an agent to port over. Is this correct?

Cheers

Isolis

@sheffieldeagle if you don't provide PAC at sign-up, then yes.

sheffieldeagle

Isolis said:

@sheffieldeagle if you don't provide PAC at sign-up, then yes.

Actually it looks like you can do it through your online account amongst other options.

Cheers

Isolis

sheffieldeagle said:

Actually it looks like you can do it through your online account amongst other options.

I looked in my control panel earlier this week but saw no such option.

dcman

Luckiy, I had put a passkey on my Whatsapp which would have requested it before actually registering itself to the other phone, but if they had gone into my SPUSU account as their precedures enable, it would have been a LONG distressing process trying to actually get it sorted out

To create a passkey on whattsAPP:

1. Tap

> Settings.Tap Account > Passkeys > Create passkey > Continue.Tap Continue.