Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


13910 posts

Uber Geek
+1 received by user: 2470

Trusted
Subscriber

Topic # 210468 28-Mar-2017 16:41
Send private message

I cancelled a WxC 0800 number and account this afternoon at 16:27. I just wasn't using it, their service was good, forwarding 0800 calls to my cellphone.

 

The woman who answer the phone was friendly, helpful, polite, and did it quickly and easily. I only realised after I got off the phone that I wasn't asked anything other than "what's the phone number you want to cancel". No security questions, no ID, no account number, nothing.

 

Maybe they checked that the number I was calling from matched the one on file, I don't know. It was a very small account with very low billing, I expect larger accounts would get a bit more scrutiny.

 

This makes me wonder what else you could do with a WxC account without needing to prove who you are. Close a big account? Add on services? Are they vulnerable to social engineering to get customer details?

 

I'm not really that bothered about it, but it seems like something a responsible company would like to follow up.

 

If anyone from WxC is concerned and would like to follow up I can give them details of my account (once they convince me they're genuine). I also have a recording of the call.





AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


Create new topic
1586 posts

Uber Geek
+1 received by user: 258

Subscriber

  Reply # 1749615 28-Mar-2017 17:25
Send private message

Yep same thing happened to me when I cancelled my account (VOIP landline) a month ago.  Like you I was surprised there was no questions.


5194 posts

Uber Geek
+1 received by user: 2218

Trusted
Lifetime subscriber

  Reply # 1749617 28-Mar-2017 17:26
Send private message

They do match the number you are calling from.

 

 

 

 





Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com


Meow
7428 posts

Uber Geek
+1 received by user: 3580

Moderator
Trusted
Lifetime subscriber

  Reply # 1749619 28-Mar-2017 17:29
One person supports this post
Send private message

coffeebaron:

 

They do match the number you are calling from.

 

Want me to prove an exploit in that? DM me your number and I'll cancel your services via CID spoofing.







13910 posts

Uber Geek
+1 received by user: 2470

Trusted
Subscriber

  Reply # 1749629 28-Mar-2017 17:47
One person supports this post
Send private message

coffeebaron:

 

They do match the number you are calling from.

 

 

Cool, so only people with access to my premises can cancel my services ;)





AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


1556 posts

Uber Geek
+1 received by user: 350


  Reply # 1749644 28-Mar-2017 17:53
Send private message

I'm thinking, "I wish!"

 

I wouldn't be "complaining" if I didn't have to go through hoops everytime I called my telecoms company from my phone number. The only time I need my Vodafone PIN is when I have a problem and that is when I am least likely to remember it.


5194 posts

Uber Geek
+1 received by user: 2218

Trusted
Lifetime subscriber

  Reply # 1749646 28-Mar-2017 17:56
Send private message

I'd say they check a few things.

 

- Did he say his name was Timmy - check

 

- Is the number he is calling from match that account - check

 

- Is the number he is wanting to cancel associated with that account - check

 

- Does he sound like dodgy guy Michael trying to spoof - check

 

 

 

It's similar with my bank, they actually will ask me for minimal ID info, unless it's something that needs a greater level of security.





Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com


Meow
7428 posts

Uber Geek
+1 received by user: 3580

Moderator
Trusted
Lifetime subscriber

  Reply # 1749649 28-Mar-2017 18:00
Send private message

coffeebaron:

 

 

 

- Does he sound like dodgy guy Michael trying to spoof - check

 

It's similar with my bank, they actually will ask me for minimal ID info, unless it's something that needs a greater level of security.

 

You underestimate me ;) but seriously if somebody was going to do something dodgy from experience they'll call up from the persons number (via CID spoofing), say "oh hi I am xx" and have their facts straight. I am sure there is not as many people going to be phoning up WXC these days to do something dodgy but still, it is a bad practice.





What does this tag do
947 posts

Ultimate Geek
+1 received by user: 192

Subscriber

  Reply # 1749658 28-Mar-2017 18:18
Send private message

This is exactly the same with Spark, if you know the business account number and name you can just phone up and relinquish any services you like.

 

Are you authorised on the account? Yes? Good

 

 


13964 posts

Uber Geek
+1 received by user: 1761


  Reply # 1749659 28-Mar-2017 18:20
Send private message

coffeebaron:

I'd say they check a few things.


- Did he say his name was Timmy - check


- Is the number he is calling from match that account - check


- Is the number he is wanting to cancel associated with that account - check


- Does he sound like dodgy guy Michael trying to spoof - check


 


It's similar with my bank, they actually will ask me for minimal ID info, unless it's something that needs a greater level of security.



Banks now have voice recognition for security. They will usually at the very least have a pin you have to enter, then when they do the security questions you usually have to be logged in online so you can give them details of your account.

3436 posts

Uber Geek
+1 received by user: 1198

Subscriber

  Reply # 1750339 29-Mar-2017 19:14
Send private message

coffeebaron:

 

 

 

 

 

It's similar with my bank, they actually will ask me for minimal ID info, unless it's something that needs a greater level of security.

 

 

Yea spot on. ASB... "we can see you are calling from a registered number", and then basically do anything you want without any more security.


13964 posts

Uber Geek
+1 received by user: 1761


  Reply # 1750389 29-Mar-2017 21:52
Send private message

chevrolux:

 

coffeebaron:

 

 

 

 

 

It's similar with my bank, they actually will ask me for minimal ID info, unless it's something that needs a greater level of security.

 

 

Yea spot on. ASB... "we can see you are calling from a registered number", and then basically do anything you want without any more security.

 

 

 

 

Can't the number that is being called from be faked? I sometimes get overseas scam calls that have an Auckland number for example.


Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07


All or Nothing: New Zealand All Blacks arrives on Amazon Prime Video
Posted 2-Jun-2018 16:21


Innovation Grant, High Tech Awards and new USA office for Kiwi tech company SwipedOn
Posted 1-Jun-2018 20:54


Commerce Commission warns Apple for misleading consumers about their rights
Posted 30-May-2018 13:15


IBM leads Call for Code to use cloud, data, AI, blockchain for natural disaster relief
Posted 25-May-2018 14:12


New FUJIFILM X-T100 aims to do better job than smartphones
Posted 24-May-2018 20:17


Stuff takes 100% ownership of Stuff Fibre
Posted 24-May-2018 19:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.