natwest online banking security issue

[martyh]

this afternoon i tried to log on as normal into my account to pay some bills ,and was redirected to a page that was asking for all of my personnal details i.e name ,address ,post code a/c number ,sort code and security number on the debit card .immediatley i became suspicious and phoned the bank and they said it was normal procedure to re-register after a period of time or if you log in, incorrectly (which i didn't ,as the log in page didn't appear)
I think this a stupid system to have as how would one know if the page was genuine ,we hear all the time about online fraud using this type of thing to get peoples bank details ,so i think natweast should have a look at this and come up with something else .I can appreciate that online security is a big issue for the banks but i don't think this is the best idea

incidently i have used online banking through natwest for about 5 yrs and never had this happen before so it must be a new thing .
do other banks have such a system ?

[SnoopZ]

I've never had that happen to me with Natwest and i would be very annoyed if it did!

[martyh]

Originally Posted by SnoopZ

I've never had that happen to me with Natwest and i would be very annoyed if it did!

i was ,i would much prefer a banner on the page telling me phone the bank which i ended up doing anyway to check the page was genuine

[Hom3r]

Originally Posted by martyh

this afternoon i tried to log on as normal into my account to pay some bills ,and was redirected to a page that was asking for all of my personnal details i.e name ,address ,post code a/c number ,sort code and security number on the debit card .immediatley i became suspicious and phoned the bank and they said it was normal procedure to re-register after a period of time or if you log in, incorrectly (which i didn't ,as the log in page didn't appear)
I think this a stupid system to have as how would one know if the page was genuine ,we hear all the time about online fraud using this type of thing to get peoples bank details ,so i think natweast should have a look at this and come up with something else .I can appreciate that online security is a big issue for the banks but i don't think this is the best idea

incidently i have used online banking through natwest for about 5 yrs and never had this happen before so it must be a new thing .
do other banks have such a system ?

I know what you mean, but if you careful you should be ok. But if in any doubt contact your branch and do NOT any data on the page.

A few years ago I had an email from my bank (HSBC) telling me to log into my account.

Warey of the fact backs rearly if ever do this, I cautiously clicked the link provided []www.hsbc.co.uk.[]

But when the page loaded the address was displayed as []www.text.hsbc.co.uk[] well that sent alarm bells screaming, I immedaitely closed the link, and reported it both to the bank and on this forum.

I also as a precaution ran AV & spyware software.

To be honest I think it is a good idea that you have to re-register after a period of in activity.

[martyh]

Originally Posted by Hom3r

I know what you mean, but if you careful you should be ok. But if in any doubt contact your branch and do NOT any data on the page.

A few years ago I had an email from my bank (HSBC) telling me to log into my account.

Warey of the fact backs rearly if ever do this, I cautiously clicked the link provided www.hsbc.co.uk.

But when the page loaded the address was displayed as www.text.hsbc.co.uk, well that sent alarm bells screaming, I immedaitely closed the link, and reported it both to the bank and on this forum.

I also as a precaution ran AV & spyware software.

To be honest I think it is a good idea that you have to re-register after a period of in activity.

so do i but using this method can make people a bit lax about fake pages as you have described imo

[SnoopZ]

How long was your period of inactivity?

[martyh]

Originally Posted by SnoopZ

How long was your period of inactivity?

no inactivity i use practically everyday ,the cs rep said the page usually ony pops up if you log in incorrectly ,but can appear to perform random checks on customers details ,as it did with me

[Hom3r]

Originally Posted by martyh

so do i but using this method can make people a bit lax about fake pages as you have described imo

True but banks will always have pages like

www.bankname.co.uk/pagename,

or possibly

www.bankname.pagemane.co.uk/pagename

But never

www.pagename.bankname.co.uk/*

---------- Post added at 18:52 ---------- Previous post was at 18:50 ----------

Can a mod please remove he HTTP links from my posts, I've tried but when I save there back?

[Raistlin]

Done. For future reference use of the [noparse] and [/noparse] tags will do what you wanted to achieve by stopping the forum software from creating URL tags automatically.

[*sloman*]

I work for a bank we class current accounts as inactive/dormant after 6months of no transactions (money in or out, excluding interest)

I bank with NatWest (but don't work for) and never had the above before

[BenMcr]

I've been registered for NatWest online banking for 9 years and never had to reregister

[Ben B]

Well, not as long as some of you, used it since last year and never had to re-register

[beeman]

Originally Posted by Hom3r

True but banks will always have pages like


www.bankname.pagemane.co.uk/pagename

But never

www.pagename.bankname.co.uk/*

NO NO NO NO

YOU HAVE THOSE THE WRONG WAY ROUND (appoligies for shouting)

the thing immediatly BEFORE the TLD (.com, .co.uk .eu etc) is the domain if its something like page.hsbc.co.uk or something.something.hsbc.co.uk then it is still a sub-domain of the hsbc url (only someone who has access to the hsbc dns record can create those). However if as you suggested it was www.hsbc.pagename,co.uk the it would actually point you to a subdomain of the website "pagename.co.uk".