Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


286 posts

Ultimate Geek
+1 received by user: 23


Topic # 240227 27-Aug-2018 16:34
Send private message quote this post

Hi,

 

Dont wanna reveal too much but what if someone is using your Bank account details (login & password) and getting all the payments transferred to another bank.

 

Is the bank able track that person ?





I Eat Dumbbells for Breakfast


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
Meow
7788 posts

Uber Geek
+1 received by user: 3849

Moderator
Trusted
Lifetime subscriber

  Reply # 2079848 27-Aug-2018 16:41
Send private message quote this post

ERM you mean phished? As in, somebody using your login for online banking or are they using their account to fraudulently receive funds and send it on (money mule).

If any of these 2 things. Contact your bank ASAP!

Else, you need to provide more information.




303 posts

Ultimate Geek
+1 received by user: 81

Trusted
Emergency Management

  Reply # 2079849 27-Aug-2018 16:42
3 people support this post
Send private message quote this post

Your first stop should be the bank then the police.. Has that been done?




286 posts

Ultimate Geek
+1 received by user: 23


  Reply # 2079857 27-Aug-2018 16:55
Send private message quote this post

michaelmurfy: ERM you mean phished? As in, somebody using your login for online banking or are they using their account to fraudulently receive funds and send it on (money mule).

If any of these 2 things. Contact your bank ASAP!

Else, you need to provide more information.

 

Bank has been contact and they are working on it. Not sure about the police (its the company and not my personal account)

 

scenario - 3 people -  A, B & C assigned bank logins

 

A & B are main people

 

C is just backup (does not know the this process)

 

A creates a transaction & approves it, then goes to "B" for approval. (standard procedure)

 

But this time, After "A" created it, just after an hour "C" goes in and modifies the payment (changed the bank account Name & number, also created a duplicate of the payee name with a minor change in wording)

 

PS: "C" is not even aware of this at all.

 

then A & B approves it & payment goes through (without checking the details as the name appeared the same & been doing this for past 15 years & never has any issue)

 

 

 

am i Making sense?





I Eat Dumbbells for Breakfast


530 posts

Ultimate Geek
+1 received by user: 125

Subscriber

  Reply # 2079859 27-Aug-2018 17:07
2 people support this post
Send private message quote this post

Obviously the bank is going to have;

 

     

  1. The times / dates of logins & activity
  2. IP addresses of the logins
  3. Bank account number of the recipient

 

Depending on when / where the payment was sent to the bank maybe able to reverse it and/or seek further information from any other bank involved.

 

If the IP is local & genuine (non VPN or Tor) it the bank maybe able to correlate it to a particular customer or technically could traced by Police however I wouldn't hold my breath.


Meow
7788 posts

Uber Geek
+1 received by user: 3849

Moderator
Trusted
Lifetime subscriber

  Reply # 2079895 27-Aug-2018 17:59
One person supports this post
Send private message quote this post

This sounds like business banking. I'm afraid, while it is rare it does happen. When it does, your bank is the first line of defence.

 

I do understand how this works and lets just say, it is easy to track (not going to go into too much details here).

 

Bank + Police needs to be involved. But, always contact the bank if you suspect something is up.

 

Edit: Isn't "hacking" in such. This is just a breach of trust by otherwise trusted individuals since business accounts normally need a signatory to authorise the transaction.





2777 posts

Uber Geek
+1 received by user: 291


  Reply # 2079904 27-Aug-2018 18:17
Send private message quote this post

Westpac?

Check out their Facebook. Has it gone and made everyone do PW change? Some seemed to think they've been doing dodgy xfers

 

 

 

/edit for clarity


3617 posts

Uber Geek
+1 received by user: 2002

Trusted
Lifetime subscriber

  Reply # 2079905 27-Aug-2018 18:22
Send private message quote this post

Oblivian: Westpac?

Check out their Facebook. Has made everyone do PW change and think they've been doing dodgy xfers so took it offline

 

@Oblivian Can you please provide more information cause looking at the Facebook page Westpac NZ I see nothing like what you have mentioned

 

I can see and the below issue is resolved nothing about changing PW

 

" Our Westpac One online banking service and mobile app are currently unavailable "

 

https://status.westpac.co.nz

 

John





Ex JohnR VodafoneNZ 17 years 4 days

2777 posts

Uber Geek
+1 received by user: 291


  Reply # 2079908 27-Aug-2018 18:30
Send private message quote this post

Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...

 

Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not coo

 

So are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challenge

 

will i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect information

 

And so on

 

So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others

 

 


Meow
7788 posts

Uber Geek
+1 received by user: 3849

Moderator
Trusted
Lifetime subscriber

  Reply # 2079924 27-Aug-2018 19:14
Send private message quote this post

Hmm... This sounds like mass phishing rather than a hack.





3617 posts

Uber Geek
+1 received by user: 2002

Trusted
Lifetime subscriber

  Reply # 2079925 27-Aug-2018 19:26
2 people support this post
Send private message quote this post

Oblivian:

Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...


Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not coo


So are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challenge


will i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect information


And so on


So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others


 



That is not official coms from Westpsc but idiots posting stupid crap

John




Ex JohnR VodafoneNZ 17 years 4 days

2777 posts

Uber Geek
+1 received by user: 291


  Reply # 2079927 27-Aug-2018 19:30
Send private message quote this post

Further update: Customers who made multiple Westpac One log-in attempts during our outage (between 4.23pm-5.29pm), may find themselves locked out of their accounts.

 

So looks like everyones acct basically got nuked during it if you tried.

 

Only reason I noticed was a mutal contact said theirs had been locked.


BDFL - Memuneh
61200 posts

Uber Geek
+1 received by user: 11981

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 2079947 27-Aug-2018 20:02
Send private message quote this post
4967 posts

Uber Geek
+1 received by user: 2017


  Reply # 2080073 28-Aug-2018 09:13
Send private message quote this post

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 





Mike

530 posts

Ultimate Geek
+1 received by user: 125

Subscriber

  Reply # 2080078 28-Aug-2018 09:19
Send private message quote this post

MikeAqua:

 

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 

Is there a comprehensive comparison somewhere showing which banks support these sorts of features?




286 posts

Ultimate Geek
+1 received by user: 23


  Reply # 2080304 28-Aug-2018 14:56
Send private message quote this post

MikeAqua:

 

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 

 

 

A & B are admins

 

A & B are the only one who can authorize.

 

C can only create / modify.





I Eat Dumbbells for Breakfast


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.