Your browser isn't supported
It looks like you're using an old web browser. To get the most out of the site and to ensure guides display correctly, we suggest upgrading your browser now. Download the latest:

Welcome to the MSE Forums

We're home to a fantastic community of MoneySavers but anyone can post. Please exercise caution & report spam, illegal, offensive or libellous posts/messages: click "report" or email forumteam@.

Search
  • FIRST POST
    • MSE Callum
    • By MSE Callum 17th May 18, 6:05 PM
    • 213Posts
    • 94Thanks
    MSE Callum
    MSE News: Fraud alert as TSB customers see £1,000s taken from accounts
    • #1
    • 17th May 18, 6:05 PM
    MSE News: Fraud alert as TSB customers see £1,000s taken from accounts 17th May 18 at 6:05 PM
    TSB customers have hit out at the bank after thousands of pounds was apparently taken from their bank accounts - and they had to spend several hours queuing on the telephone before they could report it...
    Read the full story:
    'Fraud alert as TSB customers see £1,000s taken from accounts'

    Click reply below to discuss. If you havenít already, join the forum to reply.
    Read the latest MSE News
    Flag up a news story: news@moneysavingexpert.com
    Get the Free Martin's Money Tips E-mail
Page 1
    • Shakin Steve
    • By Shakin Steve 17th May 18, 6:14 PM
    • 1,429 Posts
    • 1,152 Thanks
    Shakin Steve
    • #2
    • 17th May 18, 6:14 PM
    • #2
    • 17th May 18, 6:14 PM
    I've just seen on the news that one poor woman had £3500 taken from her account. She did not receive any alerts that her phone number and password had been changed. When the bank reimbursed her, it was stolen again. The mind boggles.
    I came into this world with nothing and I've got most of it left.
    • binaryuniverse
    • By binaryuniverse 17th May 18, 7:58 PM
    • 653 Posts
    • 416 Thanks
    binaryuniverse
    • #3
    • 17th May 18, 7:58 PM
    • #3
    • 17th May 18, 7:58 PM
    I'm starting to think that 5% isn't enough for me to keep my money in there.

    However, I have got an email, in the last half hour, that is official. By the sounds of it, (well, if what they say is what we should go on), it's the usual schemes of phishing email/texts, rather than TSB being compromised themselves (would they admit to that, if they had been, though?)

    So, in theory, keep away from dodgy emails/texts, and you should be okay. But this is more bad PR for TSB.
    • ValiantSon
    • By ValiantSon 17th May 18, 8:05 PM
    • 1,824 Posts
    • 1,693 Thanks
    ValiantSon
    • #4
    • 17th May 18, 8:05 PM
    • #4
    • 17th May 18, 8:05 PM
    So, in theory, keep away from dodgy emails/texts, and you should be okay. But this is more bad PR for TSB.
    Originally posted by binaryuniverse
    Only because journalists and news organisations choose to spin it that way.

    This is not TSB's fault, but as with so much modern journalism, why let the facts get in the way of a good story?
    • Mchambers
    • By Mchambers 17th May 18, 8:09 PM
    • 867 Posts
    • 262 Thanks
    Mchambers
    • #5
    • 17th May 18, 8:09 PM
    • #5
    • 17th May 18, 8:09 PM
    Only because journalists and news organisations choose to spin it that way.

    This is not TSB's fault, but as with so much modern journalism, why let the facts get in the way of a good story?
    Originally posted by ValiantSon
    Disagree. it is TSB's fault. They made a complete mess of an IT upgrade.
    • ValiantSon
    • By ValiantSon 17th May 18, 8:20 PM
    • 1,824 Posts
    • 1,693 Thanks
    ValiantSon
    • #6
    • 17th May 18, 8:20 PM
    • #6
    • 17th May 18, 8:20 PM
    Disagree. it is TSB's fault. They made a complete mess of an IT upgrade.
    Originally posted by Mchambers
    Which just goes to show that you know nothing and understand even less.

    Any more tall tales for us today?
    • binaryuniverse
    • By binaryuniverse 17th May 18, 8:24 PM
    • 653 Posts
    • 416 Thanks
    binaryuniverse
    • #7
    • 17th May 18, 8:24 PM
    • #7
    • 17th May 18, 8:24 PM
    Disagree. it is TSB's fault. They made a complete mess of an IT upgrade.
    Originally posted by Mchambers
    Which would be completely unrelated to your typical phishing scams.
    People are more likely to fall for a scam, given TSB's recent problems. It does not mean they are responsible for that.
    • masonic
    • By masonic 17th May 18, 8:36 PM
    • 9,194 Posts
    • 6,337 Thanks
    masonic
    • #8
    • 17th May 18, 8:36 PM
    • #8
    • 17th May 18, 8:36 PM
    Which would be completely unrelated to your typical phishing scams.
    People are more likely to fall for a scam, given TSB's recent problems. It does not mean they are responsible for that.
    Originally posted by binaryuniverse
    It depends on whether or not some of the security measures normally in place have been compromised by the continued infrastructure problems.

    Either way, TSB isn't the first bank to make a balls-up and it certainly isn't the first to be exploited in a targeted fraud attack.

    I'm comfortable leaving my accounts as they are. TSB is one of several banks I use and if I wake up one morning and see an account has been emptied, I can get on with my life while TSB sorts it out and refunds me.
    • mapk
    • By mapk 17th May 18, 8:47 PM
    • 150 Posts
    • 70 Thanks
    mapk
    • #9
    • 17th May 18, 8:47 PM
    • #9
    • 17th May 18, 8:47 PM
    I'm starting to think that 5% isn't enough for me to keep my money in there.

    However, I have got an email, in the last half hour, that is official. By the sounds of it, (well, if what they say is what we should go on), it's the usual schemes of phishing email/texts, rather than TSB being compromised themselves (would they admit to that, if they had been, though?)

    So, in theory, keep away from dodgy emails/texts, and you should be okay. But this is more bad PR for TSB.
    Originally posted by binaryuniverse
    I've also received email today which I'm quite confident comes from TSB, titled 'How to protect yourself from fraud'. This is despite their advice in point 6 that 'We'd never ever request that you to carry out a 'test' transaction online'. That's just sic [sic] and I'd like some er, wonga for the confusion caused by their grammatical mistake.
    • masonic
    • By masonic 17th May 18, 8:53 PM
    • 9,194 Posts
    • 6,337 Thanks
    masonic
    I've also received email today which I'm quite confident comes from TSB, titled 'How to protect yourself from fraud'. This is despite their advice in point 6 that 'We'd never ever request that you to carry out a 'test' transaction online'. That's just sic [sic] and I'd like some er, wonga for the confusion caused by their grammatical mistake.
    Originally posted by mapk
    Someone must have picked up on it during the mail run, The version of point 6 I received about an hour ago is sans error.
    • Yorkshire Pud
    • By Yorkshire Pud 17th May 18, 10:23 PM
    • 882 Posts
    • 592 Thanks
    Yorkshire Pud
    The frauds illustrated seem to be remote access to some people's accounts without any involvement from the account holder, no giving over of log in details, clicking on links they shouldn't etc

    But the advice then given for prevention seems to pertain to account holder involvement?

    Are accounts being cleaned out remotely?
    • lushlifesaver
    • By lushlifesaver 18th May 18, 9:23 AM
    • 2,290 Posts
    • 18,465 Thanks
    lushlifesaver
    I'm not sure TSB will recover from this. Someone was able to change my address on my account to one in London via the telephone banking team despite the fact that I have never used telephone banking and don't having security codes etc set up. they then spent my available balance and to the end of my small overdraft. this was Saturday, I reported sunday when I found out at 8am (3.5hr call, 3hrs on hold) had to go in branch on Monday to verify my correct address (but they hadn't had them verify the change of my address) and I found out they tried to spend an awful lot more but it was rejected due to lack of funds. however I will have incurred additional fees and charges for this having happened when direct debit were due to go out but supposedly I won't be left out of pocket. even though they left me with less than £30 - needing to feed a 4 year old, get my husbands medication, my own medication, food and needing fuel to get to and from work! apparently they think it's acceptable. 5 days later and I am no closer to getting my money back or any real response to my complaint re the breach in my data/security.


    fact is this could well be TSB customers who have seen my account on their own online banking and decided to take the risk to claim it as their own. something that could, and should, have been prevented by TSB.


    I pay for a platinum account - yes I get extra benefits for that money however currently I'm left with next to nothing as I can't use my card, can't access my money online, can't pay for things or use the other benefits as many are through online banking or need account references and all access and my account has been frozen.


    I'm not usually one to cry for compensation but I do feel they have let customers down massively and they need to acknowledge that with more than a 'we're sorry your not getting the service you expect and that we expect to give customers' stock letter/tweet every few days. they need to step it up and get these complaints resolved. they say they have a maximum of 8 weeks to resolve this I'm sorry but I don't find that acceptable; it's been 'added to my existing complaint' to try and speed it up...not the first complaint I made weeks ago, the one I made last week so they didn't have to acknowledge it within 5 days as the complaint had already been acknowledged and now they are 1 week in to the 8 to resolve it.


    I still don't have my money back because the transactions are still pending and apparently that's a visa problem nothing at all to do with tsb so tsb won't help until they are no longer pending. they have said I won't be out of pocket but I'll still need to repay the part of my overdraft I wouldn't have gone in to if it was me ?! and their solution to help me access money to feed my family etc? extend the overdraft on the compromised account which I would then have to pay back too! I think that's an easy answer...no
    Perfect Princess born 26/03/14 <3
    • zerog
    • By zerog 18th May 18, 1:26 PM
    • 2,359 Posts
    • 818 Thanks
    zerog
    I received two phishing emails over the past week asking me to click on links akin to tsb.bank-fraudster.co.uk and halifax.this-is-a-secure-website.com

    Just for fun I visited those sites in a private browser and they were a perfect replica of the log in pages, except they then asked for full passwords, personal details and card details at a later stage.
    • Terry98
    • By Terry98 20th May 18, 5:35 AM
    • 919 Posts
    • 2,502 Thanks
    Terry98
    A lot more about this on Money Box yesterday https://www.bbc.co.uk/programmes/b0b39ph0
    • nic_c
    • By nic_c 20th May 18, 7:59 AM
    • 1,446 Posts
    • 791 Thanks
    nic_c
    I received two phishing emails over the past week asking me to click on links akin to tsb.bank-fraudster.co.uk and halifax.this-is-a-secure-website.com

    Just for fun I visited those sites in a private browser and they were a perfect replica of the log in pages, except they then asked for full passwords, personal details and card details at a later stage.
    Originally posted by zerog
    I hope you didn't put your full password in to get to the later stage I guess you just used a random string of text though. Did you do a full system scan too just in case even vising the site leaves nasties behind.
    • nic_c
    • By nic_c 20th May 18, 8:39 AM
    • 1,446 Posts
    • 791 Thanks
    nic_c
    fact is this could well be TSB customers who have seen my account on their own online banking and decided to take the risk to claim it as their own. something that could, and should, have been prevented by TSB.
    Originally posted by lushlifesaver
    True it depends on what security checks they do on the phone line - if its confirming past transactions, then that could be it a risk. Just listened to the moneybox podcast, as posted above, It looks like they suspect the usual User Error rather than bank fault, but then I suppose they would. If it happened I would be sending in a DSAR for transcripts of all phone calls from within the past month, in fact as they will be free from 5 days time, it may be worth getting the request ready - probably by letter since the phone lines are still busy.

    Do I part pay my stooze from the TSB portion, or simply transfer, or wait it out
    • Be Happy
    • By Be Happy 20th May 18, 4:13 PM
    • 1,149 Posts
    • 500 Thanks
    Be Happy
    Had phone call from TSB yesterday which I assume was a scam, but still not sure where the scam was going to set in.

    Came home to recorded message on answer machine giving me a 'one time only password' to continue my banking transaction. I hadn't been doing any banking yesterday. Googled number it was from and found it to be a genuine TSB number. Went into branch who checked through my accounts and found nothing wrong - odd transactions, unfinished transactions, new payees, etc. Was told it must have been a 'cloned phone number' scam and as long as I didn't phone back and give out information it would be OK.

    If the phone number was cloned, then the recorded message was also cloned. It was identical to any message I've received. Even finishing with the instruction to hang up and follow the instructions on screen.

    Was I assumed to be listening to the recorded message at the time it was sent and enter 1 to hear the password number again as told or was it expected that I would phone the cloned number immediately to report the error and then be asked for information?

    It may even have been a wrong phone number dialled on TSB's part!
    • nic_c
    • By nic_c 20th May 18, 4:42 PM
    • 1,446 Posts
    • 791 Thanks
    nic_c
    Had phone call from TSB yesterday which I assume was a scam, but still not sure where the scam was going to set in.

    Came home to recorded message on answer machine giving me a 'one time only password' to continue my banking transaction. I hadn't been doing any banking yesterday. Googled number it was from and found it to be a genuine TSB number. Went into branch who checked through my accounts and found nothing wrong - odd transactions, unfinished transactions, new payees, etc. Was told it must have been a 'cloned phone number' scam and as long as I didn't phone back and give out information it would be OK.
    Originally posted by Be Happy
    Frome the website
    We!!!8217;re dealing with your money and so, sometimes we want to be absolutely sure we!!!8217;re dealing with you. So we use Enhanced Internet Authentication (EIA).

    You!!!8217;ll receive an automated call and be asked to confirm details about the transaction you!!!8217;re setting up. You!!!8217;ll then be asked to enter a four digit number that will be displayed on your computer screen.

    We use EIA when you set up a new payment recipient, card payment, or standing order.

    We can call you on any number we already hold for you. If you!!!8217;d like to use a new number, you!!!8217;ll need to register that number and wait up to three days before it is activated.
    So it could have been an attempted new payee, but so long as it was not followed up that should be okay. So long as there is no way for your telephone number to be changes, like from call centre operative or anything.

    Of course the TSB internet gives info of One Time Password
    A one-time password is a unique password we will send you in the post. It is different from the password you use to log in to Internet Banking. This one-time password can only be used for confirming your telephone number change, and will be usable for 14 days from the time you request it.
    but that seems to say it would be posted out.
    Last edited by nic_c; Yesterday at 4:47 PM.
Welcome to our new Forum!

Our aim is to save you money quickly and easily. We hope you like it!

Forum Team Contact us

Live Stats

1,236Posts Today

7,578Users online

Martin's Twitter
  • It's the start of mini MSE's half term. In order to be the best daddy possible, Im stopping work and going off line? https://t.co/kwjvtd75YU

  • RT @shellsince1982: @MartinSLewis thanx to your email I have just saved myself £222 by taking a SIM only deal for £7.50 a month and keeping?

  • Today's Friday twitter poll: An important question, building on yesterday's important discussions: Which is the best bit of the pizza...

  • Follow Martin