Forum Home
Press F1
 
Thread ID: 55600 2005-03-15 00:09:00 internet bank fraud Adamho (7593) Press F1
Post ID Timestamp Content User
334164 2005-03-15 00:09:00 Have you or has anyone you know been the victim of an internet bank fraud?

We are urgently looking to talk to you .

The Sunday programme on TVNZ is putting together an item on the issue .

Email me at: adam . hollingworth@tvnz . co . nz

Adam Hollingworth
Producer
Sunday
Adamho (7593)
334165 2005-03-15 01:15:00 Great, Some more half baked TV coverage.

Lets see what gets hyped,and what gets missed due to lack of understanding of the subject,and the requirment to make it interesting.

If these TV programs had half a clue they could make it informative rather then creating more confusion for the masses.
Metla (12)
334166 2005-03-15 03:45:00 Well said metla.

I was in the bank yesterday and some poor old man was panicking madly about the whole thing. Probably because the media just loves to create panic so that they can then report on well all the panic :)

On The other hand. Good on you Adam for asking around. Make sure you find an 'expert'; who knows what they are talking about when they try to explain it to your viewers. I havent seen an item about stuff like this that has anyone that knows anything on it.
Sam I Am (1679)
334167 2005-03-15 05:09:00 I haven't myself been the victim of it, but i can see how easy it is to be, and i could easily go and steal from someone's bank account over the net if i were to want to - but don't worry, i don't and won't (i just got named prefect at my high school if that helps)
Even tho i know the dangers, i still continue to use it - as its a whole lot easier and has saved me so much time - rather having to go into town and sort it all out, i can do it over the net.
but saying that, i also make sure my risk's are mininised - when i log into my net banking, i only have access (ie, i can only pay out money) from my accounts that i know don't have a lot in them, so i don't have all my savings and such on there.

The banks can so easily increase security tho, there are a few small things that they could put in place that wouldn't cost alot, but would help a ton.
2 of these are: (note - these things are only what my bank doesn't use, i no some banks may use them)
1) putting limits on your net banking pay out per day, so if you know u'd never pay more than $500 over net banking, you can set it to $500, and IF someone ever did get in, all they could take out would be up to $500. I know this won't be any good for people that need to make large purchases, but it sure would help a few people.
2) Like has been mentioned before - before a payment is made, a code is sent to you somehow, so you can be verified. I no the text message has been mentioned, but i also heard that it will cost you to recieve the text (more bank costs....) and what if you don't have a phone?
Instead, or maybe as well, they could just email you the code - i know this isn't 100% secure, but it'll lower the chances of your money being stolen.

I think all they really need is to have a 2 method unique entry. So you still have your username/code, which indentifies you, then you have your personal password, which you only know (but still risks someone finding it out) and lastly, you have something that the bank can use to double check that it really is you. This could be the code being txted/email to you, or maybe something on your computer that identifies you - but this brings in negatives - which include that you must be on your PC to access net banking.

my 2c anyway!
Fergie (6508)
334168 2005-03-15 06:50:00 Two entries would help, but it's useless if people insist on being lazy and having their browsers save the information on sensitive sites (not applicable at my bank, are there banks that allow this?) .

Banks that insist on or are only completely compatable with IE, only have MS's and their lazy Webmasters interests at heart .

The idea of private and public keys (PGP), has merit . I doubt people would be willing to wait for email though and, that only opens another hole for the crims to exploit . Would Java work and be secure? many use it now anyway .

Make it mandatory for people to have up-to-date AV, 3rd party firewall and anti-malware app's . What the punishement for non-compliance and how you would police it without invasive techniques could cause problems . Oops, forgot, ditch IE, MSN, hell let's make a proper job of it and give Windows the heave-ho in prefernce for anything Nix based ;)
Murray P (44)
334169 2005-03-15 07:18:00 I should have had a sift through this lot (pressf1.pcworld.co.nz) before posting. Murray P (44)
334170 2005-03-15 08:14:00 frankly i cring every time they have "internet advice" on tv. fair go couldn't even get adaware web addy right !

i suspect half the problem is TV guys are chatting to IT pro's who don't understand a home pc nor the interaction with uses. you have banks which only accept the most likly compromised browser, so those sicurity minded folk who use alternative browsers can't use online banking (i have noticed some banks have changed this latly). you have ISP's whose standard policy is to remove tools that help the user (firewall,AV and antispyware) just to make the ISP end easier to fault find. you have IT pro's who insist the only decent firewall is an external stand alone pc/router (ie no software firewalls allowed) promote not useing AV as it slows the pc down and frankly insist that spyware IS NOT A PROBLEM ! ! !

firstly spyware (more correctly called malware) has been around a long time. around mid 2000 i believe the first reports of it started. a free removal program was made around that time. basicly there have been FREE tools advailble to deal with this problem for the last 5 years or more.

what really annoys me is that companies are paying up for what basicly is users stuffing up. telecom is paying for calls dailers make and banks are paying for unathorised withdrawalls all because the end user is simply to lazy to have and use tools that have been advailable (for free) for the last 5 years . its their own dumb fault let them pay the price!

however banks have been vary quiet on the abuse of internet banking, most likly trying not to scare customers off internet banking. frankly a lot of customers NEED to be scared off it. they simply don't have the PC skills required to use a PC sicurely.
i personaly find once you explain what can happen people are far more sicurity focused and some simply refuse to do internet banking simply because they know they cannot keep the family pc malware free.

the other cause of the problem of course is how many windows pc's are setup securly from day 1 ? none! customers want ALL features NOW and MS gives them just that reguardless of the long term problems.

its all a curly problem. its not the banks problem that people pc's are compromised, people simply don't care if their pc is compromised untill they lose money. and when they do care human nature means most won't use the tools properly so they end up being infected.
ideally you need a pc that is so dumbed down it can't be infected or abused by customers............but wait....there is such a pc......its called an ATM ;)
tweak'e (69)
334171 2005-03-15 08:25:00 Have you not heard about ATM scams. Safari (3993)
334172 2005-03-15 08:35:00 As a follow up to Safari, is it not possible to look over someone's shoulder while they're entering their pin ? ;) Edward (31)
334173 2005-03-15 08:55:00 Have you or has anyone you know been the victim of an internet bank fraud?

We are urgently looking to talk to you .

The Sunday programme on TVNZ is putting together an item on the issue .

Adam Hollingworth
Producer
Sunday

Not me, not anyone I know personally, but potentially a large number of people .

When I used to work at a large NZ Bank, we were given incentives to sign up customers to netbanking . You may have noticed when you last spoke to a bank teller that they promote all sorts of stuff . Things started to get out of hand when I noticed workers signing up customers without their knowledge . Thus the bank worker would have to make up the password . This was done to customers who were deemed unlikely to notice - the elderly, the English-incompetent and financially-incompetent . It doesn't take too much imagination to work out how to harvest these netbanking access codes and use/sell them . You could simply siphon off maybe $100 a month and insert an appropriate description in the transaction description box . Old, less-than-lucid people never knew where half their money was when they contacted the bank .

I do wonder sometimes whether a lot of these cases of fraud originate from inside the banks .
vinref (6194)
1 2 3 4 5 6 7 8