A Big NZ bank email security with address and photo ID updates

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › A Big NZ bank email security with address and photo ID updates

Gordy7

1906 posts

Uber Geek

ID Verified

Lifetime subscriber

#306540 2-Aug-2023 07:52

As part of a Big NZ bank improving impersonation and fraud prevention measures, my wife received a letter asking to provide verified proof (Doctor, Teacher, Police, etc) of address and photo ID by email or to take the documents to a bank – nearest is over 100km away.

If ID information is not updated by 18 August, the bank will place restrictions on accounts.

My wife uses 2FA for all bank processing.

When questioned about security of using email for sending verified ID documents, the bank suggested that they receive hundred of such emails daily (therefore it must be right?). Also suggested was sending documents by the postal system.

No options to do a secure upload or send a member of staff to pick up documents.

I don’t think the bank’s due diligence processing is adequate. A low budget effort!

Gordy

My first ever AM radio network connection was with a 1MHz AM crystal(OA91) radio receiver.

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#3110866 2-Aug-2023 08:22

And a fail if some of their customers are actually living overseas.......

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

cddt

1548 posts

Uber Geek

#3110922 2-Aug-2023 09:18

On a similar note I was recently called by an insurance company who started by asking me to verify my identity by telling them my full name, address, DOB, etc.

I said, hang on, YOU called me, I need to ask you to verify YOUR identity.

He was a bit taken aback, and as you said, tried to explain that it was standard practice for his company to ring people and ask them for personal data.

Eva888

2428 posts

Uber Geek

Lifetime subscriber

#3110953 2-Aug-2023 10:36

What about people who are overseas and won’t be back by the 18th. Will they suddenly find they can’t access their account and be left stranded without money.

timmmay

20575 posts

Uber Geek

Trusted

Lifetime subscriber

#3110957 2-Aug-2023 10:53

You could make a complaint to the banking ombudsman. Email is not secure, and it is very easy to impersonate.

cddt:

On a similar note I was recently called by an insurance company who started by asking me to verify my identity by telling them my full name, address, DOB, etc.

I said, hang on, YOU called me, I need to ask you to verify YOUR identity.

He was a bit taken aback, and as you said, tried to explain that it was standard practice for his company to ring people and ask them for personal data.

I've done the same, I refuse to give any details to anyone who calls me. I tell them if they give me their name or extension number I will call them back using the published phone number for their company, or to prove their identity somehow.

mudguard

2114 posts

Uber Geek

#3110992 2-Aug-2023 12:32

I had an awkward recently with Sharsies, because my balance had tipped over $1000 they needed to verify my ID. Fair enough, they have a website portal to enable the camera so you take a selfie holding your licence by your face. That was fine. Problem is my licence is sort of delaminating for some reason, like all the colour is coming off. No idea how. So when I tried to use their portal to take a photo, it kind of disables my phone's autofocus, so for the life of me could not take a clear picture, of what is not a super clear licence to begin with.

I did send them through a PDF of the same licence from when I did my mortgage application, but they didn't like that. They wanted a JPEG. And a recent one.

cddt

1548 posts

Uber Geek

#3110995 2-Aug-2023 12:52

mudguard:

I did send them through a PDF of the same licence from when I did my mortgage application, but they didn't like that. They wanted a JPEG. And a recent one.

It's a good thing converting PDFs to JPEGs is a one-liner these days!

mattwnz

20141 posts

Uber Geek

#3111078 2-Aug-2023 14:37

Banks in NZ really need to improve their systems. They should all have scure messaging and upload facilities in online bank IMO. I think the IRD now even has this feature. Some don't even have secure messaging such as Westpac, who only have a feedback messaging service, were they email rather than secure message you back which isn't secure. Some only have it in the website version, so the apps are crippled in the features. Accessibility is getting worse IMO, especially if you don't or can't access online services. Surprised that we don't have fines for companies if things don't meet accessibility standards.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

mattwnz

20141 posts

Uber Geek

#3111079 2-Aug-2023 14:39

timmmay:

I've done the same, I refuse to give any details to anyone who calls me. I tell them if they give me their name or extension number I will call them back using the published phone number for their company, or to prove their identity somehow.

Many people don't answer calls these days unless they know the incoming caller number, and let it go to voice mail. A lot of callers these days are scammers.

SirHumphreyAppleby

2844 posts

Uber Geek

#3111095 2-Aug-2023 15:39

Gordy7:

As part of a Big NZ bank improving impersonation and fraud prevention measures, my wife received a letter asking to provide verified proof (Doctor, Teacher, Police, etc) of address and photo ID by email or to take the documents to a bank – nearest is over 100km away.

I see no reason for you not to name the bank here. A smaller NZ bank asked me to e-mail them an updated drivers license. I told them where to go, and also that I've worked with e-mail for 20+ years. Sure, I could send the e-mail directly to their designated MX servers, but why should I trust them.

And no, I won't install their app either.

neb

11294 posts

Uber Geek

Trusted

Lifetime subscriber

#3111096 2-Aug-2023 15:39

Gordy7:
As part of a Big NZ bank improving impersonation and fraud prevention measures, my wife received a letter asking to provide verified proof (Doctor, Teacher, Police, etc) of address and photo ID by email or to take the documents to a bank – nearest is over 100km away.

If ID information is not updated by 18 August, the bank will place restrictions on accounts.

To resolve this problem and prevent any problem with your account, please email your user name and password to ivan@virusbucket.ru. Thankyou for banking with Big NZ Bank, and remember, we'll never ask for your password in email, except this once.

cokemaster

Exited
4927 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#3112145 5-Aug-2023 20:21

xpd:

And a fail if some of their customers are actually living overseas.......

I've had a hit and miss. Westpac NZ seems to be ok with remote verification (overseas that is) although I suspect that might change if one applied for debt products. I do need to update my details with the others so will see how that goes.

That being said - Westpac NZ wanted me to FAX a form in... interesting times.

ICBC on the other hand - some things you can do via email/phone from overseas, other things (eg. getting a new token) - they expect you to walk into their Auckland branch.

webhosting

Loose lips may sink ships - Be smart - Don't post internal/commercially sensitive or confidential information!