Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


CapBBeard

211 posts

Master Geek


#195434 20-Apr-2016 10:07
Send private message

Hey guys,

 

So I recently upgraded from a Nexus 5 to a 5X. This necessitated moving from my older micro SIM to a nano SIM.

 

I headed down to my local Spark store to get this sorted. Let me be clear upfront; I was served in a professional and friendly manner by the staff, so no qualms with them personally.

 

In saying this, I am pretty gobsmacked by the total lack of any sort of identity verification, particularly in todays age where a lot of services use SMS as a second authentication factor, or account reset mechanism.

 

Here's a simplified version of how our conversation played out:

 

Me: I've just got a new phone, can I please move over to a new nano SIM?

 

Spark: Sure, what's your number?

 

Me: 027 xxxxxxx

 

*some fiddling at the PC, hands over new SIM packet*

 

Spark: Cool, all done. That'll be $5.

 

Sure enough, an hour or two later, the new SIM was up and running, and the old one was no more.

 

There was no check against any of my details, or even that I did in fact have the original SIM at all. I could've said any number under the sun, or less maliciously, the number may have been keyed incorrectly.

 

Now I am on prepaid so perhaps there would be a more robust check for an on account customer/number (they did ask if I was prepaid or account, to be fair), however I still feel some basic level of verification is definitely needed here. I've had my number for over 10 years so I'm not sure what specific details Spark will have on file, but it seems all too easy to go in and hijack some unsuspecting victims number (at least if they are a prepaid customer!).

 

I can understand perhaps the 'burner' nature of short term prepaid users, however with the semi-recent (and very attractive) monthly prepaid packs, I'm sure I'm not the only one who has stuck with prepaid for years.

 

Historically, at worst this would 'just' be grabbing someones phone number; today, we're potentially talking bank account access, and all manner of online accounts.

 

Has anyone else experienced this? Is this the standard Spark procedure for this sort of request?

 

 


Create new topic

xpd

xpd
aka Fast Raccoon !
13158 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #1536318 20-Apr-2016 10:12
Send private message

I've had it with Vodafone and 2D - sometimes you get asked for ID/verification, but more often than not, nothing asked.

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree -   kiwiblast.co.nz - Lego and more

 

       Support Kiwi music!   The People   Black Smoke Trigger   Like A Storm   Devilskin

 

                                            NZ GEEKS Discord______________________________

 

 


 
 
 

Backblaze Unlimited Backup. World’s easiest cloud backup. Get peace of mind knowing your files are backed up securely in the cloud (affiliate link).
  #1536325 20-Apr-2016 10:16
Send private message

I don't think that is the usual process. 

 

I recently had done this for someone and they have asked a Photo Identification and the person said the only acceptable photo identification is a Drivers License or a Passport. 

 

 

 

So, my guess is the person doing the swap was not aware of the process or missed it somehow. 

 

 


jonb
1752 posts

Uber Geek

Trusted

  #1536327 20-Apr-2016 10:18
Send private message

Had same experience at 2degrees store also.




timmmay
19720 posts

Uber Geek

Trusted
Lifetime subscriber

  #1536340 20-Apr-2016 10:26
Send private message

Anyone know the name and phone number of the Spark CEO?


wellygary
7481 posts

Uber Geek


  #1536391 20-Apr-2016 10:48
Send private message

timmmay:

 

Anyone know the name and phone number of the Spark CEO?

 

 

No idea,

 

but Details for people like the Head of Corporate Comms are in places like this

 

https://nzx.com/companies/SPK/announcements/280837


richms
26534 posts

Uber Geek

Trusted
Subscriber

  #1536431 20-Apr-2016 11:47
Send private message

Yup, totally absurd how easy it is to move over to a new sim.

 

A phone bill has all the details you need to initiate a port to another provider on them, so if instore fails and you can get hold of someones account number then just get a $5 2 degrees sim, log in, and port to that, then you can 2 factor to your hearts content as someone else.

 

That is why I dont really trust SMS 2 factor as a second factor. So more like 1.5 factor.





Richard rich.ms

solival
160 posts

Master Geek


  #1536509 20-Apr-2016 12:36
Send private message

Had the same with vodafone :) Even more, dude make some mistake and I've got somebody's else number. I didn't notice until strange people started calling me and ask for some Bob :) Then checked and yeap - I had different than my number, and looks like unlucky Bob sim was unregistered.




BarTender
3536 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1536779 20-Apr-2016 15:48
Send private message

It different between prepaid and postpaid.

Prepaid there is no easy way to validate apart from pulling the sim.

With postpaid you should have been asked for your name and probably address. As that's what I was asked for last time I did a sim swap.




and


Create new topic





News and reviews »

InternetNZ Releases Internet Insights 2023
Posted 20-Feb-2024 10:31


Seagate Adds 24TB IronWolf Pro Hard Drives for Multi-user Commercial and Enterprise RAID Storage Solutions
Posted 19-Feb-2024 16:54


Seagate Skyhawk AI 24TB Elevates Edge Security Capacity and Performance
Posted 9-Feb-2024 17:18


GoPro Releases Quik Desktop App for macOS and Introduces Premium+ Subscription Tier
Posted 9-Feb-2024 17:14


Ring Introduces New Ring Battery Video Doorbell Pro
Posted 9-Feb-2024 16:51


Galaxy AI Transforms the new Galaxy S24 Series
Posted 18-Jan-2024 07:00


D-Link launches AI-Powered Aquila Pro M30 Wi-Fi 6 Mesh Systems
Posted 17-Jan-2024 20:02


Newest LG 4K Lifestyle Projector Doubles as Art Objet
Posted 9-Jan-2024 15:50


More LG Smart TV Owners Set To Enjoy the Latest webOS Upgrade
Posted 9-Jan-2024 15:45


Panasonic Announces the Z95A and Z93A With Fire TV Built In
Posted 9-Jan-2024 15:30


Amazon Echo Pop Review
Posted 8-Jan-2024 14:22


Samsung Tab S9 FE Review
Posted 17-Dec-2023 08:26


Year in Search: What Kiwis Searched for in 2023
Posted 12-Dec-2023 08:18


New Air Traffic Management Platform and Resilient Buildings a Milestone for Airways
Posted 6-Dec-2023 05:00


Logitech G Launches New Flagship Console Wireless Gaming Headset Astro A50 X
Posted 5-Dec-2023 21:00









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







Backblaze unlimited backup