FNB is dropping email and SMS

[Jet-Fighter7700]

Phone needs to be unlocked though right?
This is still no less secure than receiving an SMS - you don't need a password to read your SMSs, right? If your phone is taken, then you're vulnerable. But you're likely to notice this. You're a lot less likely to notice a sim swap or a compromised mail account in time to stop your account being emptied.

no pin or password on mine though,
is that bad? or again, you still need a SEPARATE password to get into FNB app.

 

[Grouter]

Get her one with a fingerprint reader?

Send her one for Christmas please. She will send you back a kiss. I will insist.

 

[NeonNinja]

Yes, and it just approves it. The problem, as I outlined above, is that my wife refuses to pin-or-password protect her phone....

Then she falls in the stupid category. People who deserve to be compromised.

 

[Grouter]

Then she falls in the stupid category. People who deserve to be compromised.

Been down that road, believe me. I gave up.

But this conversation will make me try again.

 

[Sinbad]

Send her one for Christmas please. She will send you back a kiss. I will insist.

Pics first please... I have done my share of frogs

 

[Grouter]

Pics first please... I have done my share of frogs

Here you go:

 

[Pho3nix]

Funny enough, prefer this method and wish Standard Bank would do something similar.

 

[RVQ]

I suspect an underlying reason for many of the changes is to drive people towards the app. There is significant intelligence behind modern solutuons and legacy systems might be adding significant complexity and limitations on the backend development, data gathering and user profiling. The Digital Devs are probably counting down the days they can dump all the stone age kit.

 

[2023]

I suspect an underlying reason for many of the changes is to drive people towards the app. There is significant intelligence behind modern solutuons and legacy systems might be adding significant complexity and limitations on the backend development, data gathering and user profiling. The Digital Devs are probably counting down the days they can dump all the stone age kit.

I'd also say that cost is a driving factor here too.

 

[backstreetboy]

Mine, yes. Wife: no. Just a password. Let's not go there. I keep telling her.....I showed her how dangerous it is. She's so whatsapp-happy she cursed like a sailor having to unlock her phone all the time.
Perhaps I need to risk another dummy-spit moment and insist she puts a password on her phone. Thanks for reminding me.

Smart lock? Can unlock the phone automatically if in a trusted location etc. https://www.androidcentral.com/smart-lock

 

[Grouter]

Smart lock? Can unlock the phone automatically if in a trusted location etc. https://www.androidcentral.com/smart-lock

Tried that. Half the time the stoopid phone couldn't remember it was at home.

 

[2023]

same with me, just says approve, no password or anything required.

So if you make a payment in the app, you then approve the transaction in the app again via the push notification?

Feels kinda pointless for this scenario really.

 

[Pho3nix]

So if you make a payment in the app, you then approve the transaction in the app again via the push notification?

Feels kinda pointless for this scenario really.

You haven't needed to do that even before?

 

[Jet-Fighter7700]

So if you make a payment in the app, you then approve the transaction in the app again via the push notification?

Feels kinda pointless for this scenario really.

yes, thats what I get,
even if I do a payment via Web, comes up without asking for a password.

too many holes and no fallback for if your phone is stolen.

 

[NeonNinja]

yes, thats what I get,
even if I do a payment via Web, comes up without asking for a password.

too many holes and no fallback for if your phone is stolen.

AFAIK it's only beneficiary transactions that push a notification. If you're doing an online (buying) transaction it will prompt your approval via password/finger.

 

[Ancalagon]

"That email thing that someone else invented sucks, let's roll our own because it will be WAY better!"

Sigh. Not a good idea.

Also, private clients is not what it used to be. So difficult to get hold of anyone! I used to have a private banker on platinum, now I don't even have one on private clients. They charge more but deliver less service and less eBucks.

 

[Jet-Fighter7700]

Also, private clients is not what it used to be. So difficult to get hold of anyone! I used to have a private banker on platinum, now I don't even have one on private clients. They charge more but deliver less service and less eBucks.

but but but, its got a cool looking black card, and you get vouchers to use at the airport.

 

[2023]

You haven't needed to do that even before?

It's been OTPs to approve things. My point is that if the transaction is initiated from the App, the App should not be allowed to be the approval point of the transaction (via notification).

If evil people started the transaction from the app, they will approve it from the app as they have access.
If a normal person started the transaction from the app, they will approve it from the app as they have access.

Thus, in all situations that the app started the transaction, it will be approved by the app and is pointless.

If the transaction was started outside the app, then the notification approval makes sense as 2 channels would have to have been compromised for fraud to happen.

 

[Nuro]

Banking aside, people really should be securing their phones as best they can. What about photos, location info, personal details etc. It's not about hiding stuff either, my wife's fingerprint is registered on my phone. It's about knowing that when the phone gets stolen or lost, nobody is walking around with a load of personal info. Imagine they open your timeline and see what places you have visited, where your kids go to school etc. If they are tech savvy, they can hijack a bunch of other accounts. Phones have made things very easy and convenient, but damn people, secure them, even if it's just a lock pattern.

 

[Sinbad]

It's been OTPs to approve things. My point is that if the transaction is initiated from the App, the App should not be allowed to be the approval point of the transaction (via notification).

If evil people started the transaction from the app, they will approve it from the app as they have access.
If a normal person started the transaction from the app, they will approve it from the app as they have access.

Thus, in all situations that the app started the transaction, it will be approved by the app and is pointless.

If the transaction was started outside the app, then the notification approval makes sense as 2 channels would have to have been compromised for fraud to happen.

The app is considered 2fa already. There's a physical device and a password or biometric.