Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




305 posts

Ultimate Geek
+1 received by user: 23


Topic # 240227 27-Aug-2018 16:34
Send private message

Hi,

 

Dont wanna reveal too much but what if someone is using your Bank account details (login & password) and getting all the payments transferred to another bank.

 

Is the bank able track that person ?





I Eat Dumbbells for Breakfast


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
Mr Snotty
8302 posts

Uber Geek
+1 received by user: 4270

Moderator
Trusted
Lifetime subscriber

  Reply # 2079848 27-Aug-2018 16:41
Send private message

ERM you mean phished? As in, somebody using your login for online banking or are they using their account to fraudulently receive funds and send it on (money mule).

If any of these 2 things. Contact your bank ASAP!

Else, you need to provide more information.




380 posts

Ultimate Geek
+1 received by user: 128

Trusted
Emergency Management

  Reply # 2079849 27-Aug-2018 16:42
3 people support this post
Send private message

Your first stop should be the bank then the police.. Has that been done?


 
 
 
 




305 posts

Ultimate Geek
+1 received by user: 23


  Reply # 2079857 27-Aug-2018 16:55
Send private message

michaelmurfy: ERM you mean phished? As in, somebody using your login for online banking or are they using their account to fraudulently receive funds and send it on (money mule).

If any of these 2 things. Contact your bank ASAP!

Else, you need to provide more information.

 

Bank has been contact and they are working on it. Not sure about the police (its the company and not my personal account)

 

scenario - 3 people -  A, B & C assigned bank logins

 

A & B are main people

 

C is just backup (does not know the this process)

 

A creates a transaction & approves it, then goes to "B" for approval. (standard procedure)

 

But this time, After "A" created it, just after an hour "C" goes in and modifies the payment (changed the bank account Name & number, also created a duplicate of the payee name with a minor change in wording)

 

PS: "C" is not even aware of this at all.

 

then A & B approves it & payment goes through (without checking the details as the name appeared the same & been doing this for past 15 years & never has any issue)

 

 

 

am i Making sense?





I Eat Dumbbells for Breakfast


599 posts

Ultimate Geek
+1 received by user: 149

Subscriber

  Reply # 2079859 27-Aug-2018 17:07
2 people support this post
Send private message

Obviously the bank is going to have;

 

     

  1. The times / dates of logins & activity
  2. IP addresses of the logins
  3. Bank account number of the recipient

 

Depending on when / where the payment was sent to the bank maybe able to reverse it and/or seek further information from any other bank involved.

 

If the IP is local & genuine (non VPN or Tor) it the bank maybe able to correlate it to a particular customer or technically could traced by Police however I wouldn't hold my breath.


Mr Snotty
8302 posts

Uber Geek
+1 received by user: 4270

Moderator
Trusted
Lifetime subscriber

  Reply # 2079895 27-Aug-2018 17:59
One person supports this post
Send private message

This sounds like business banking. I'm afraid, while it is rare it does happen. When it does, your bank is the first line of defence.

 

I do understand how this works and lets just say, it is easy to track (not going to go into too much details here).

 

Bank + Police needs to be involved. But, always contact the bank if you suspect something is up.

 

Edit: Isn't "hacking" in such. This is just a breach of trust by otherwise trusted individuals since business accounts normally need a signatory to authorise the transaction.





2987 posts

Uber Geek
+1 received by user: 342


  Reply # 2079904 27-Aug-2018 18:17
Send private message

Westpac?

Check out their Facebook. Has it gone and made everyone do PW change? Some seemed to think they've been doing dodgy xfers

 

 

 

/edit for clarity


4133 posts

Uber Geek
+1 received by user: 2365

Trusted
Lifetime subscriber

  Reply # 2079905 27-Aug-2018 18:22
Send private message

Oblivian: Westpac?

Check out their Facebook. Has made everyone do PW change and think they've been doing dodgy xfers so took it offline

 

@Oblivian Can you please provide more information cause looking at the Facebook page Westpac NZ I see nothing like what you have mentioned

 

I can see and the below issue is resolved nothing about changing PW

 

" Our Westpac One online banking service and mobile app are currently unavailable "

 

https://status.westpac.co.nz

 

John


2987 posts

Uber Geek
+1 received by user: 342


  Reply # 2079908 27-Aug-2018 18:30
Send private message

Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...

 

Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not coo

 

So are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challenge

 

will i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect information

 

And so on

 

So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others

 

 


Mr Snotty
8302 posts

Uber Geek
+1 received by user: 4270

Moderator
Trusted
Lifetime subscriber

  Reply # 2079924 27-Aug-2018 19:14
Send private message

Hmm... This sounds like mass phishing rather than a hack.





4133 posts

Uber Geek
+1 received by user: 2365

Trusted
Lifetime subscriber

  Reply # 2079925 27-Aug-2018 19:26
2 people support this post
Send private message

Oblivian:

Was short on space on mobile to expand more. So edited for clarity to not sound so finger pointage...


Wow! So helpful to find that out after spending FIFTEEN minutes waiting to get through to you guys, thinking my account was being hacked because I was getting notifications to my phone saying transactions were being processed..... Not coo


So are we locked out Westpac?? On 0800 number for 20 minutes now. No I can't self reset on the online guardian challenge


will i have to change my log in details once it has been corrected as the site indicated I had been logged out with incorrect information


And so on


So simiarly was querying if OP was perhaps getting notifications of approval etc and suspected similar acct issues like the others


 



That is not official coms from Westpsc but idiots posting stupid crap

John

2987 posts

Uber Geek
+1 received by user: 342


  Reply # 2079927 27-Aug-2018 19:30
Send private message

Further update: Customers who made multiple Westpac One log-in attempts during our outage (between 4.23pm-5.29pm), may find themselves locked out of their accounts.

 

So looks like everyones acct basically got nuked during it if you tried.

 

Only reason I noticed was a mutal contact said theirs had been locked.


BDFL - Memuneh
62264 posts

Uber Geek
+1 received by user: 12809

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 2079947 27-Aug-2018 20:02
Send private message
5369 posts

Uber Geek
+1 received by user: 2196


  Reply # 2080073 28-Aug-2018 09:13
Send private message

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 





Mike

599 posts

Ultimate Geek
+1 received by user: 149

Subscriber

  Reply # 2080078 28-Aug-2018 09:19
Send private message

MikeAqua:

 

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 

Is there a comprehensive comparison somewhere showing which banks support these sorts of features?




305 posts

Ultimate Geek
+1 received by user: 23


  Reply # 2080304 28-Aug-2018 14:56
Send private message

MikeAqua:

 

The OP's company could beef up security to include split authorities and two factor authentication: -

 

  • A can create transactions - needs both B and C to authorise;
  • B and C can't create transactions -  they can separately review, verify and authorise (using 2FA)

 

 

 

A & B are admins

 

A & B are the only one who can authorize.

 

C can only create / modify.





I Eat Dumbbells for Breakfast


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.