Hi,
Dont wanna reveal too much but what if someone is using your Bank account details (login & password) and getting all the payments transferred to another bank.
Is the bank able track that person ?
![]() ![]() ![]() |
|
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
Your first stop should be the bank then the police.. Has that been done?
michaelmurfy: ERM you mean phished? As in, somebody using your login for online banking or are they using their account to fraudulently receive funds and send it on (money mule).
If any of these 2 things. Contact your bank ASAP!
Else, you need to provide more information.
Bank has been contact and they are working on it. Not sure about the police (its the company and not my personal account)
scenario - 3 people - A, B & C assigned bank logins
A & B are main people
C is just backup (does not know the this process)
A creates a transaction & approves it, then goes to "B" for approval. (standard procedure)
But this time, After "A" created it, just after an hour "C" goes in and modifies the payment (changed the bank account Name & number, also created a duplicate of the payee name with a minor change in wording)
PS: "C" is not even aware of this at all.
then A & B approves it & payment goes through (without checking the details as the name appeared the same & been doing this for past 15 years & never has any issue)
am i Making sense?
I Eat Dumbbells for Breakfast
Obviously the bank is going to have;
Depending on when / where the payment was sent to the bank maybe able to reverse it and/or seek further information from any other bank involved.
If the IP is local & genuine (non VPN or Tor) it the bank maybe able to correlate it to a particular customer or technically could traced by Police however I wouldn't hold my breath.
This sounds like business banking. I'm afraid, while it is rare it does happen. When it does, your bank is the first line of defence.
I do understand how this works and lets just say, it is easy to track (not going to go into too much details here).
Bank + Police needs to be involved. But, always contact the bank if you suspect something is up.
Edit: Isn't "hacking" in such. This is just a breach of trust by otherwise trusted individuals since business accounts normally need a signatory to authorise the transaction.
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
Westpac?
Check out their Facebook. Has it gone and made everyone do PW change? Some seemed to think they've been doing dodgy xfers
/edit for clarity
Oblivian: Westpac?
Check out their Facebook. Has made everyone do PW change and think they've been doing dodgy xfers so took it offline
@Oblivian Can you please provide more information cause looking at the Facebook page Westpac NZ I see nothing like what you have mentioned
I can see and the below issue is resolved nothing about changing PW
" Our Westpac One online banking service and mobile app are currently unavailable "
John
Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...
Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not coo
So are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challenge
will i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect information
And so on
So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others
Hmm... This sounds like mass phishing rather than a hack.
Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)
Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.
Oblivian:Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...
Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not cooSo are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challengewill i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect informationAnd so on
So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others
Further update: Customers who made multiple Westpac One log-in attempts during our outage (between 4.23pm-5.29pm), may find themselves locked out of their accounts.
So looks like everyones acct basically got nuked during it if you tried.
Only reason I noticed was a mutal contact said theirs had been locked.
This is not the same as OP's case. Please do not send OP to Facebook.
OP has been advised to work with bank.
Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSync | Backblaze backup
The OP's company could beef up security to include split authorities and two factor authentication: -
Mike
MikeAqua:
The OP's company could beef up security to include split authorities and two factor authentication: -
- A can create transactions - needs both B and C to authorise;
- B and C can't create transactions - they can separately review, verify and authorise (using 2FA)
Is there a comprehensive comparison somewhere showing which banks support these sorts of features?
MikeAqua:
The OP's company could beef up security to include split authorities and two factor authentication: -
- A can create transactions - needs both B and C to authorise;
- B and C can't create transactions - they can separately review, verify and authorise (using 2FA)
A & B are admins
A & B are the only one who can authorize.
C can only create / modify.
I Eat Dumbbells for Breakfast
|
![]() ![]() ![]() |