Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


1344 posts

Uber Geek
+1 received by user: 338


Topic # 230479 25-Feb-2018 22:22
Send private message

My wife was booking laser tag for the kids birthday and the email confirmation has how to pay the booking fee, the first option use POLi Payment.

 

Anyone used them ?  Because it is a hideous idea if you did!

 

It asks what bank you are, then asks you to type in your customer ID and Password for your bank!

 

Click to see full size

 

I wonder how much help your bank will give you if you've given out your login details to a 3rd party over the interweb :-(

 

 


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5
2474 posts

Uber Geek
+1 received by user: 674


  Reply # 1964117 25-Feb-2018 22:28
Send private message

Everybody here slags on them.

I’ve had to use it once or twice, and never had an issue.

Try search ‘POLI’ and you’ll see heaps of prior discussions 😉

5234 posts

Uber Geek
+1 received by user: 2254

Trusted
Lifetime subscriber

  Reply # 1964119 25-Feb-2018 22:31
3 people support this post
Send private message

I certainly wouldn't use it.




Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com


Meow
7611 posts

Uber Geek
+1 received by user: 3700

Moderator
Trusted
Lifetime subscriber

  Reply # 1964131 25-Feb-2018 22:38
13 people support this post
Send private message

I work for a large bank. They don't support this system at all and think it is incredibly dangerous.

 

Behind the scenes POLi is literally logging into your banking on a virtual machine hosted in AWS. Because of this, it is also very easy for banks to detect POLi and mark it in their fraud detection systems. From this point you've actually breaking the internet banking terms of conditions with most banks since you handed over your details to a third party.

 

Just don't do it, ever. First off payments can't be reversed or dishonored if made (you get no buyer protection) and second even if they don't have a record of fraud it doesn't take much for somebody to scrape your details - all it takes these days is allowing custom CSS (see here: https://news.ycombinator.com/item?id=16422696).

 

Using a Credit Card / Debit Card gives you some sort of buyer protection and fraud protection shopping online.

 

I honestly can't stress this enough - just don't use it.





32 posts

Geek
+1 received by user: 10


  Reply # 1964133 25-Feb-2018 22:41
Send private message

PhantomNVD: Everybody here slags on them.

I’ve had to use it once or twice, and never had an issue.

Try search ‘POLI’ and you’ll see heaps of prior discussions 😉

 

Probably because the solution is questionable at best and goes against a lot of the things people are told to think when it comes to online security.  Using it also violates multiple banks' terms and conditions (rightfully, given you are providing your access details to a third party).




1344 posts

Uber Geek
+1 received by user: 338


  Reply # 1964142 25-Feb-2018 23:01
Send private message

Oh a VM farm in AWS? That makes me even more pleased I loudly told the webpage to F'off when I read what it wanted me to do :-)

Amazing that Poli list so many big company names who use them, absurd security choice to give your customers.

14200 posts

Uber Geek
+1 received by user: 1823


  Reply # 1964149 25-Feb-2018 23:11
One person supports this post
Send private message

Intravix:

 

 

 

Probably because the solution is questionable at best and goes against a lot of the things people are told to think when it comes to online security.  Using it also violates multiple banks' terms and conditions (rightfully, given you are providing your access details to a third party).

 

 

 

 

If that is the case, why aren't banks warning about doing it, including sending out brochures etc to customers. I have used it and haven't had any problems, and is the only way to pay some companies without incurring additional credit card fees. But I use it from a bank and account that has minimal cash with. Otherwise I would pay by direct credit which is IMO just as easy.


21283 posts

Uber Geek
+1 received by user: 4289

Trusted
Subscriber

  Reply # 1964152 25-Feb-2018 23:29
Send private message

They have already had to remove all the banks logos from the service.

 

Really banks should lock any account that logs in from those IPs, and only unlock after a long and thorough investigation has happened. That will get some negative news about poli going when someone cant pay something else because poli got their account locked.





Richard rich.ms

Meow
7611 posts

Uber Geek
+1 received by user: 3700

Moderator
Trusted
Lifetime subscriber

  Reply # 1964156 25-Feb-2018 23:51
One person supports this post
Send private message

mattwnz: If that is the case, why aren't banks warning about doing it, including sending out brochures etc to customers. I have used it and haven't had any problems, and is the only way to pay some companies without incurring additional credit card fees. But I use it from a bank and account that has minimal cash with. Otherwise I would pay by direct credit which is IMO just as easy.

 

The bank I work for has warned its customers multiple times - people don't listen and do it anyway. If we were to block POLi then those customers would likely just go to another bank. In-fact there was an internet banking release not too long ago that unintentionally broke POLi and we had customers telling us to fix it.





398 posts

Ultimate Geek
+1 received by user: 207

Subscriber

  Reply # 1964162 26-Feb-2018 02:31
6 people support this post
Send private message

So, when are these banks going to get off their asses and provide a solution like POLi? It fills an incredibly useful gap in every bank's services - low cost, instant confirmation bank transfers initiated from the merchant website.

 

 

 

It's incredibly frustrating to hear banks ragging on POLi for years, but making absolutely no effort to provide a more secure replacement. It seems especially disingenuous when the banks then push credit cards as the alternative - the payment method which so often comes with multiple percentage points of surcharge attached. I wonder how much of that goes to the bank?

 

 

 

Speaking as a kiwibank customer, I wouldn't trust a bank's security advice as far as I can throw it. Kiwibank still has their ridiculous 'keepsafe' system, which they claim is a second factor of authentication. It isn't, of course, because the second factor is only useful if it's an object which can not be easily replicated.


Meow
7611 posts

Uber Geek
+1 received by user: 3700

Moderator
Trusted
Lifetime subscriber

  Reply # 1964164 26-Feb-2018 07:02
Send private message

ripdog: So, when are these banks going to get off their asses and provide a solution like POLi? It fills an incredibly useful gap in every bank's services - low cost, instant confirmation bank transfers initiated from the merchant website.

 

Even if a bank offered such a solution to do instant verification bank payments I still wouldn't use it over a credit card due to the fact bank transfers can't be reversed. I can't speak of what is in the pipeline but lets say a solution may be coming. You have to remember, it has to be secure for all parties.

 

It's incredibly frustrating to hear banks ragging on POLi for years, but making absolutely no effort to provide a more secure replacement. It seems especially disingenuous when the banks then push credit cards as the alternative - the payment method which so often comes with multiple percentage points of surcharge attached. I wonder how much of that goes to the bank?

 

Some merchants charge way too much and pocket it. Others charge 2.5% which is around the cost incurred to them. The thing is, you're getting payment protection out of this which people don't understand. I've seen it multiple times where a customer has made a payment via POLi to Jetstar and Jetstar have cancelled the flight - the problem is the customer is in the mercy of Jetstar as they paid with POLi where is in most cases you could load a dispute with your bank if you paid with a credit card and get your money back in these situations. To me, that buyer protection is worth it.

 

Honestly, if you know what I know about this and have seen the type of stuff the fraud teams deal with then you too wouldn't use POLi either.

 

Speaking as a kiwibank customer, I wouldn't trust a bank's security advice as far as I can throw it. Kiwibank still has their ridiculous 'keepsafe' system, which they claim is a second factor of authentication. It isn't, of course, because the second factor is only useful if it's an object which can not be easily replicated.

 

Technically it still is but it is old and not great. It is still, in most cases, better than nothing. It is also a terrible attitude to have because you've got to think your bank has seen it all. If they say something then you should follow it.





14049 posts

Uber Geek
+1 received by user: 2512

Trusted
Subscriber

  Reply # 1964166 26-Feb-2018 07:15
One person supports this post
Send private message

Mark: Oh a VM farm in AWS? That makes me even more pleased I loudly told the webpage to F'off when I read what it wanted me to do :-)

 

AWS is quite secure if set up correctly, definitely more secure than running Javascript on the average web browser given how poor some people are at keeping OS / software / etc up to date.





AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


3241 posts

Uber Geek
+1 received by user: 1764

Lifetime subscriber

  Reply # 1964171 26-Feb-2018 07:46
Send private message

I've used Poli regularly over the last few years, never had an issue. If the banks want to wipe it out, all they need to do is stop merchants charging additional fees for credit cards, or offer a safe alternative that costs the customer nothing and is as convenient and quick.

 

Banks need to tighten up on merchants charging fees, and incidentally they need to make paywave mandatory.. so sick of going to shops, even major chains, and "no paywave" stickers on the eftpos machines.





Information wants to be free. The Net interprets censorship as damage and routes around it.

 

Thinking about signing up to BigPipe? Get $20 credit with my referral link.


26747 posts

Uber Geek
+1 received by user: 6242

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1964185 26-Feb-2018 08:01
Send private message

Lias:

 

I've used Poli regularly over the last few years, never had an issue. If the banks want to wipe it out, all they need to do is stop merchants charging additional fees for credit cards, or offer a safe alternative that costs the customer nothing and is as convenient and quick.

 

Banks need to tighten up on merchants charging fees, and incidentally they need to make paywave mandatory.. so sick of going to shops, even major chains, and "no paywave" stickers on the eftpos machines.

 

 

Credit card fees have nothing to do with the banks. They're goverened by the Reserve Bank, and the sole reason they are now legal is because of a Court case the Commerce Commission took against credit card companies that backfired badly on them. One of the consequences of the court case was effectively making credit card surcharges legal in NZ (they weren't previously). This backfired badly with credit card companies pushing Platinum cards with even higher interchange rates.

 

Many stores that intentionally don't have Paywave take this approach because they don't want to see their credit card fees skyrocket.

 

The Reserve Bank inquiry into interchange fees was supposed to come out around the middle of last year. There has been silence from the incoming government who were very vocal about this when in opposition.

 

 


5234 posts

Uber Geek
+1 received by user: 2254

Trusted
Lifetime subscriber

  Reply # 1964186 26-Feb-2018 08:06
Send private message

ASB do a product called "Online EFTPOS". But low adoption at this stage, and of course only applicable if you're an ASB customer.




Chorus has spent $1.4 billion on making their xDSL broadband network faster. If your still stuck on ADSL or VDSL, why not spend from $150 on a master filter install to make sure you are getting the most out of your connection?
I install - Naked DSL, DSL Master Splitters, VoIP, data cabling and general computer support for home and small business.
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com


2895 posts

Uber Geek
+1 received by user: 1095

Subscriber

  Reply # 1964187 26-Feb-2018 08:07
Send private message

ASB have a system to accept eftpos payments online. But my understanding is that it only works with ASB accounts.

https://www.asb.co.nz/banking-with-asb/online-eftpos-and-asb-mobile.html

Edit - Coffeebaron beat me to it.





 1 | 2 | 3 | 4 | 5
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Targus set sights on enterprise and consumer growth in New Zealand
Posted 13-Aug-2018 13:47


Huawei to distribute nova 3i in New Zealand
Posted 9-Aug-2018 16:23


Home robot Vector to be available in New Zealand stores
Posted 9-Aug-2018 14:47


Panasonic announces new 2018 OLED TV line up
Posted 7-Aug-2018 16:38


Kordia completes first live 4K TV broadcast
Posted 1-Aug-2018 13:00


Schools get safer and smarter internet with Managed Network Upgrade
Posted 30-Jul-2018 20:01


DNC wants a safer .nz in the coming year
Posted 26-Jul-2018 16:08


Auldhouse becomes an AWS Authorised Training Delivery Partner in New Zealand
Posted 26-Jul-2018 15:55


Rakuten Kobo launches Kobo Clara HD entry level reader
Posted 26-Jul-2018 15:44


Kiwi team reaches semi-finals at the Microsoft Imagine Cup
Posted 26-Jul-2018 15:38


KidsCan App to Help Kiwi Children in Need
Posted 26-Jul-2018 15:32


FUJIFILM announces new high-performance lenses
Posted 24-Jul-2018 14:57


New FUJIFILM XF10 introduces square mode for Instagram sharing
Posted 24-Jul-2018 14:44


OPPO brings advanced technology to the smartphone market with new device
Posted 24-Jul-2018 09:20


Hawaiki Transpacific cable ready-for-service
Posted 20-Jul-2018 11:29



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.