BNZ Mandatory Data Collection

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › BNZ Mandatory Data Collection

1 | 2 | 3 | 4 | 5

meow
13580 posts

Uber Geek
+1 received by user: 10912

Moderator

ID Verified

Trusted

Lifetime subscriber

#3459027 5-Feb-2026 11:14

geek3001: I'd like to see them using VOIP or similar to enable voice calls between them and the customer, via their app, instead of relying on landline / mobile phone calls made by them to us, which is far from secure given inbound CLI spoofing.

The downside to that is data use. I know many customers who don't have too much data on their phone. An inbound call is always free for the customer where VoIP isn't.

But banks are using their app still in order to prove to the customer the call is coming from them. BNZ shows notifications in the app and even forces you to wait to ensure you read it (which is awesome). ASB do a caller check so you can pop into the app to verify you're speaking to somebody at the bank and ANZ do similar in their app too.

I fully support all these changes as there are so many vulnerable customers out there so anything to keep their assets safe is a big win in my books.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

geek3001

220 posts

Master Geek
+1 received by user: 331

ID Verified

Subscriber

#3459030 5-Feb-2026 11:24

@michaelmurfy:

The downside to that is data use. I know many customers who don't have too much data on their phone. An inbound call is always free for the customer where VoIP isn't.

Fair point.

Perhaps, in time, the banks can work with the telcos to enable a zero-data framework specifically for the parts banking apps that would benefit from it, along the lines of what the https://www.govt.nz/browse/engaging-with-government/no-data-access-government-websites/ uses.

Granted VoIP etc will use more data than loading web pages, however it could help put an end to voice calls to/from scammers.

Rikkitic

Awrrr
19068 posts

Uber Geek
+1 received by user: 16310

Lifetime subscriber

#3459034 5-Feb-2026 11:42

michaelmurfy:

I fully support all these changes as there are so many vulnerable customers out there so anything to keep their assets safe is a big win in my books.

I suppose I am one of those vulnerable customers. I used to think I was fairly immune because I am fairly cynical about anything new and different, but I am also old and I am starting to have the feeling very much that developments are slipping away from me. I don't use 2FA because I don't understand phones so I don't trust them. I would be helpless with facial recognition because I have never had any working camera on any computer and my laptops all have the lens taped over. I have no idea how to even install or set up a camera. I could learn but I don't want to. Text is the way I communicate. Like I say, I am old and new technology, especially related to security, daunts me. I used to understand how computers work. These days I don't understand how anything works. For years I laughed at my mother because she refused to touch the expensive new VHS someone set up for her because she was afraid she would break it. Now I understand how she felt.

Plesse igmore amd axxept applogies in adbance fir anu typos

richms

29099 posts

Uber Geek
+1 received by user: 10214

Trusted

Lifetime subscriber

#3459036 5-Feb-2026 11:48

michaelmurfy:

The downside to that is data use. I know many customers who don't have too much data on their phone. An inbound call is always free for the customer where VoIP isn't.

Also that assumes you want to be talking on the device that you are using for the banking app. I use different devices for calls/sms and apps so would not work for me.

Richard rich.ms

mudguard

2327 posts

Uber Geek
+1 received by user: 1250

#3459048 5-Feb-2026 12:23

richms:

michaelmurfy:

The downside to that is data use. I know many customers who don't have too much data on their phone. An inbound call is always free for the customer where VoIP isn't.

Also that assumes you want to be talking on the device that you are using for the banking app. I use different devices for calls/sms and apps so would not work for me.

Arguably that would put you in the extreme minority??

mudguard

2327 posts

Uber Geek
+1 received by user: 1250

#3459049 5-Feb-2026 12:26

freitasm:

I think there should be a form with a box saying "I decline for this technology to be used on my account. I assume full responsibility for all uses of my account, including unauthorised access to this account including but not limited to use with intent of fraud as a money mule, overseas money transfer to my newfound long distance love of my life and buying gift cards for tax payments."

I was thinking about this. Probably the issue might be around joint accounts. One opts in, the other doesn't, the one who opts out gets compromised and wipes the accounts.

Obviously I have a bias but as those who are on or around the inside it's absolutely mind blowing what access regular customers give to third parties. It's like all things, it is the lowest common denominator that is being catered for.

My father (in his seventies) thinks it's great fun to read the spam emails he gets. I'm waiting for one of them to be a bank one and all hell breaking loose. I''m always asking him, what are you even doing in the spam folder. Time will tell sadly.

Dyson

Shop now for Dyson appliances (affiliate link).

Eva888

2762 posts

Uber Geek
+1 received by user: 2427

Lifetime subscriber

#3459050 5-Feb-2026 12:28

I would rather have facial scanning than all the permissions we allow on apps. A scanner that doesn’t allow the bank to see me just out of bed and able to take a picture, but can do a point to point scan or an iris scan. The tech must be out there.

richms

29099 posts

Uber Geek
+1 received by user: 10214

Trusted

Lifetime subscriber

#3459055 5-Feb-2026 12:46

Perhaps if the banks are worried about people giving access to third parties they should have done something about poli and account2account before that ship had sailed and they became legitimized by NZTA and the companies office offering them on their sites?

I also think that the spam folder is a great read sometimes to see what dumb crap must be working enough to be worth sending. Apparently elon is investing in all sorts of things, that someone has hacked my camera, that my casino payout is ready and that my cloud is expired and my photos will go away.

Richard rich.ms

richms

29099 posts

Uber Geek
+1 received by user: 10214

Trusted

Lifetime subscriber

#3459062 5-Feb-2026 13:12

mudguard:

Arguably that would put you in the extreme minority??

Probably, but I prefer to keep the legacy communications separate as my old phone has better call recording capabilities but is now out of updates by several years.

Richard rich.ms

alasta

6890 posts

Uber Geek
+1 received by user: 3364

Trusted

Subscriber

#3459073 5-Feb-2026 14:03

My elderly father significantly overestimates his technical ability and owns devices designed for advanced users despite having no capacity to configure or maintain them correctly. Considering the potential consequences of unauthorised bank account access, I am all in favour of the bank cutting off his internet banking access if there is any whiff of his devices being insecure.

I understand the commercial imperative for banks to scale back their branch network, but I hope branches will remain in main towns and cities for the benefit of elderly people who can't realistically use internet banking without undue risk.

MikeB4

MikeB4
18775 posts

Uber Geek
+1 received by user: 12766

ID Verified

Trusted

Subscriber

#3459080 5-Feb-2026 14:35

michaelmurfy:

@MikeB4 You're thinking too much into it and seriously have nothing to worry about.

Respectfully I have to disagree. I am not thinking too much about this. Disabled folk like myself have a constant battle with the disabilities and a never end fight for access to places, services and life, banks are just one of the obstacles being put in the way and in the words of Pink Floyd "it's just another brink in the wall".

The relentless march by the banks to close their bricks and mortar centres and pushing folks to online and App banking makes access to banking more challenging for many disabled. Yes it does have advantages but it in turn has many hurdles and walls. I have become more and more restricted with use of my hands and this is progressive. There are many conditions that have this issue and there is also the visual impairments. In the group that of fellow sufferers that I belong to many are anxious about this. Theirs and my concerns are genuine.

I would love to hear from someone who is working in this area for a bank that can explain how the typing, mouse and general device use is going be scrutinised and what impact in consistencies will have on access. Any staff here could PM me

Here is a crazy notion, lets give peace a chance.

Dyson

Shop now for Dyson appliances (affiliate link).

richms

29099 posts

Uber Geek
+1 received by user: 10214

Trusted

Lifetime subscriber

#3459081 5-Feb-2026 14:39

I am aware of some online banking in the states that made it hostile to people that need to use alternative keyboards on desktop to use all in the name of security.

Richard rich.ms

michaelmurfy

meow
13580 posts

Uber Geek
+1 received by user: 10912

Moderator

ID Verified

Trusted

Lifetime subscriber

#3459088 5-Feb-2026 15:12

richms:

Perhaps if the banks are worried about people giving access to third parties they should have done something about poli and account2account before that ship had sailed and they became legitimized by NZTA and the companies office offering them on their sites?

I've spoken about this many times on here and even been fully responsible for actually "doing something about it" at a big bank a few times.

The biggest problem here is banks left it too late. They should have stamped out screen scrapers at the very beginning before they fully took off but many banks didn't have the technology to successfully block it at this point without blocking legitimate traffic. By the time banks had the ability to put a stop to POLi and Account2Account and other screen scrapers it was too late. Doing a WAF block for POLi for example would blow up the call centre with people thinking internet banking was down as POLi would direct people to their banks. The fact govt, airlines and large companies were using it on their sites made it harder again to block.

In the end messaging went out that banks don't support it, and it is against your internet banking terms and conditions but that is all banks could do without blowing up their call centres with tonnes of frustrated customers.

On the other side of this, there was a need for a solution like this and it is good there are now open banking solutions that have put a stop to screen scrapers but it happened too late IMHO.

richms

29099 posts

Uber Geek
+1 received by user: 10214

Trusted

Lifetime subscriber

#3459090 5-Feb-2026 15:15

IMO suspending internet banking access after the fact for suspicious access is the minimum that should be done for those services. Banking here moves absurdly slowly it's embarrassing that some are just bringing out cycling CSC's now thinking that is a useful product for people when the rest of the world has had virtual card numbers for decade+ timeframes.

Richard rich.ms

cddt

1967 posts

Uber Geek
+1 received by user: 1904

#3459207 6-Feb-2026 07:02

michaelmurfy:

In the end messaging went out that banks don't support it, and it is against your internet banking terms and conditions but that is all banks could do without blowing up their call centres with tonnes of frustrated customers.

But now the banks do support POLI, I assume it's no longer against the T&Cs...

1 | 2 | 3 | 4 | 5