|
|
|
Loose lips may sink ships - Be smart - Don't post internal/commercially sensitive or confidential information!
Loose lips may sink ships - Be smart - Don't post internal/commercially sensitive or confidential information!
mdf: It feels like that there is a bit of a detente between the banks and Akahu, Poli and the like. Based on what others more informed than me have said, using these services is against the terms and conditions and is a bad idea security wise. However if the banks really didn't want these services used, there is more they could do to crack down on them.
And I would guess that there are further technical measures to prevent this sort of third party access and screen scraping?.
I posted above about this but I have personally been the one responsible for blocking a few scrapers on some platforms that I looked after. The biggest problem is once you block them customers do not understand and will blame the bank for "being down" or not working. The companies who are scraping also tell customers to basically put pressure on the bank if there are any issues. After a whole lot of calls / emails / secure mail's about "insert scraping service here" not working upper management way above me tells the team to unblock it.
But as somebody who has seen the traffic coming from these services I 100% do not trust them. Not just because of them scraping, but because of what other information they collect without the customer knowing.
Banks hate them, they can't really do anything about them (unless if all banks do this at the same time) and it'll continue to be a problem until open banking gets fully released. The other side of this is the risk that this opens up allowing scrapers from "insert large cloud provider here" that it can be used for other malicious things too as there is no whitelist for these companies. It is simple to stop by simply enabling bot management but the amount of noise from customers when that was enabled was insane as it caused considerable contact centre load.
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
mike: Storing your online banking credentials in a password manager, Google Account or iCloud is also against many bank terms and conditions. The T&Cs are there to protect the bank.
Australia is ahead of us in banking innovation and regulation. Their Commerce Commission equivalent has specifically said screen scraping is all good.
https://www.afr.com/companies/financial-services/asic-accc-give-green-light-to-screen-scraping-20200228-p54588
Just FYI of course the ACCC would say screen scraping is OK. POLi is owned by the Australian Government.
Not sure if this requires a new thread (maybe a general open banking one?), but:
Another new open banking / venmo / request to pay type app: https://volley.nz
However, very differently to all the others, seems to be via bank-approved API: https://blog.bnz.co.nz/2023/07/bnz-and-volley-announce-agreement-to-bring-request-to-pay-app-to-new-zealand
And in the paper: https://www.stuff.co.nz/business/132603302/request-to-pay-app-volley-could-simplify-split-bills
Seems to be a way of making a "pull" request for an internet banking transfer which is then approved and paid via existing bank apps, c.f. the traditional "push" payment. Pitched as a way of splitting a bill but I can't think of any reason why it wouldn't work as an e-commerce alternative to credit cards or internet banking.
@mdf Yep - this is using open banking. Both ANZ and BNZ are basically ready here (you'll note there are some new open banking type things in the ANZ goMoney app). The key here is "Pay any Volley link directly from your bank’s app" and " We’ll never ask you for your bank password or security codes and we don't need you to send us money to "top up your wallet". Your money stays safe and secure in your bank - where it belongs".
More apps will be coming soon. Online Eftpos is very similar in this regard with using Open Banking essentially to make a payment straight through your banks app.
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
|
|
|