Suspicious call purportedly from my bank . .

EarthBoy

https://forums.moneysavingexpert.com/discussion/comment/81941007#Comment_81941007

So do First Direct, but it was when I'd rung them, not them ringing me.

confederated

I’m in a bit of a quandry. I get my pension on 10th of April. I’ve logged on to the Teachers Pensions site to change my bank details and they tell me they’re processing payments so can’t make any changes for next month. Then I thought I would set up a switch from Triodos to my RBS account, but that isn't accepting my Triodos sort code. Triodos is a member of the CASS so I’m not sure why it doesn’t like the Triodos sort code - it’s actually a NatWest code too, 165810. Can a bank belong to CASS but only allow switches one way?

I’m just concerned that if someone has managed to set up a banking app in my name they will be able to access my pension when it is paid in on 10th April. I’ve empties the account for now, but don’t appear to be able to do anything about my pension being paid in. I HATE weekends!

Am I worrying needlessly? What could a scammer do if they have intercepted the OTP to set up the banking app? Could they do what I fear?

flaneurs_lobster

By "intercepted the OTP" do you mean that you did read the code back to the caller?

confederated

Yes, I did, but to set up an app they need photo ID, driving license or passport, and a selfie - as well as the app passcode (which I’ve changed). I’m not sure they’d be able to do it.

flaneurs_lobster

https://forums.moneysavingexpert.com/discussion/comment/81941076#Comment_81941076

What about online access via a browser? Does this require an active app as a prerequisite? There seems to be a login method that requires only an email address and a code but which code / what access this gives is not clear.

confederated

You need to scan a QR code from within the mobile app to access the account in a browser. What you’re seeing is the old access method by entering a code generated by a physical digipass.

flaneurs_lobster

https://forums.moneysavingexpert.com/discussion/comment/81941094#Comment_81941094

…then why does it say "…received an access code by email."?

confederated

https://forums.moneysavingexpert.com/discussion/comment/81941107#Comment_81941107

I don’t know. That’s why I’m worried.

flaneurs_lobster

https://forums.moneysavingexpert.com/discussion/comment/81941115#Comment_81941115

This is why the scammers have targeted a bank that has no customer service availability outside business hours M-F. Different bank you might well have been able to ask.

I think that you have probably done all you can at the moment. Get on to Triodos first thing on Monday and see if they can tie down access further once you've explained the issue.

confederated

To be fair they have responded to an email I sent to their fraud department and they have put a temporary block on the account and will be able to manually process my pension payment if I can’t get it diverted.

At least they’re aware of the situation so I feel happier. I’m still moving back to RBS - I’m having to manually change my bank details with each company - which is painful. Some let you do it online, others you have to call during office hours. I have a headache. All down to my own stupidity, for which I will beat myself up about in a similar way to our glorious leader KS. Lol!