Lock screen notifications and leaking OTPs

[Jan]

Lock screen notifications and leaking OTPs

South Africans who use their smartphones to receive one-time pins (OTPs) for banking transactions or to access important accounts should ensure these do not appear on their lock screens.

Criminals with access to someone's device could use the feature to perform banking transactions or make changes to their accounts, with devastating financial consequences for their victims.

 

[Lupus]

Good advice. One of the first things I turn off are Lock Screen notification. Terrible idea. Like when your banking app displays your balance in bold 42pt font on start up for everyone to see as you go in to do a payment or other transaction. Silly.

My banking app doesn't do that, that is rather silly if it does.

 

[SauRoNZA]

FaceID and I would hope its droid equivalents solve this neatly.

Non-issue if you aren’t an idiot.

 

[FiestaST]

Not being facetious but all this falls under the concept of “common sense”.

Then again you know what they say about common sense.

 

[bwana]

I disagree. If it were a setting you chose to turn on, sure, but there are lots of people who don’t know you can turn this off. It’s on by default IIRC.

Then iPhone users should also turn on the new lockdown mode setting under privacy and security which prevents thieves from adding their biometrics without authentication if the phone is not near your home or business (that said it should always ask for authentication by default IMO - can’t believe it’s not on always).

You're confusing Lockdown mode with Stolen Device Protection.

 

[Brian_G]

Regarding the other concern brought up here;
With Standard Bank's app the easy-balance-view option is off by default, surely the same with all bank apps?

 

[Brian_G]

I disagree. If it were a setting you chose to turn on, sure, but there are lots of people who don’t know you can turn this off. It’s on by default IIRC.

For which bank?

 

[Brian_G]

SMS notifications are not bank related.

Sorry, thought you meant balances - you brought it up in post #2

 

[Brian_G]

Only reason I use the app at all is to access the virtual cards. Prefer PC online banking... but I don't travel much.

 

[Smiggles]

It hasn't been a thing for years. Capitec and FNB now use the app for notifications. Slow news day with all the repeats here.

 

[Brian_G]

It hasn't been a thing for years. Capitec and FNB now use the app for notifications. Slow news day with all the repeats here.

We discussed this yesterday - some / many banks still give the option to get OTP's instead, even AFTER registering for the app....

Agenda much?

 

[Brian_G]

On virtual cards, I've had a few fails trying to use them and just yesterday noticed a "regret, we don't accept virtual cards" at the car rental place - though understandable in their case I guess.

So... same question, different reason, lol... which bank?

 

[Randomwasavailable]

More troublesome is that at some banks you cannot force confirmation before transactions are done on your accounts. Apparently the payment processing platform gets to decide this, and the bank allows the payment.

 

[Brian_G]

More troublesome is that at some banks you cannot force confirmation before transactions are done on your accounts. Apparently the payment processing platform gets to decide this, and the bank allows the payment.

Don't have that problem, but I've found that if you do a screen dump of the on-screen confirmation (on a PC etc.) , many places will accept that as official enough.

 

[Smiggles]

We discussed this yesterday - some / many banks still give the option to get OTP's instead, even AFTER registering for the app....

Agenda much?

Yes move to a proper bank.

 

[xera]

Common sense says you shouldn't walk around with a phone directly linked to your bank account.

 

[Smiggles]

Common sense says you shouldn't walk around with a phone directly linked to your bank account.

You also shouldn't walk around because a bus might hit you.

 

[Brian_G]

Common sense says you shouldn't walk around with a phone directly linked to your bank account.

Being South Africa, you may well be right.

 

[bwana]

Common sense says you shouldn't walk around with a phone directly linked to your bank account.

Why not? The information is secure.

 

[Brian_G]

All banks.

View attachment 1842420

Depends what you want virtual for. In my case, mostly to make overseas payments.

BTW, with the acc. I have, I save on any fees for such payments by using the virtual option. And never had a failure.