Online banking and related transactions need more security awareness

Online banking and related transactions need more security awareness

Last year I wrote about two challenges of using ATM machines and some online transfers as banks don’t send out statement of bank accounts now.

Now I want alert others how to make payments for online services and products.  We are still very fresh in a banking environment as we enter a new era of cashless society with fiat currencies and soon with crypto currencies when the world comes to accept it as the only medium of transactions with the little known blockchain apps. I will come to blockchain later.

As we proceed to cashless society, we have to know of the massive benefits of not using paper currencies especially with the explosive tourism business.  Currencies exchangers may soon be redundant because online transactions using smart phones in most areas are relatively simple by a few clicks and QR Codes.  All these can a new scenario for many. Meanwhile we must also come to grip with Artificial Intelligence (AI) and that applications that cannot be avoided. 

So I come to the very important issues of security of using online banking and those payment transactions using ATM or debit cards as a very fast payment transactions online using online personal computers (PC).  I think the speed of online banking or transactions can be expedited by blockchain without going through several parties concerned. Even with blockchain apps, the sender and receiver only deal with blockchain in any cryptocurrency transaction. .Blockchain  is a worthwhile investment now.

I think many do their online payments using credit cards and the setback can be the repeated monthly payments for hosting of websites can be charged to the same credit cards without referring to the card holders.  Such transactions can be disputed but some credit card companies can reverse such payments on complaints.

I have the recent ‘nightmarish’ experience of using ATM cards to make some small payments online with my smartphone and personal computer both online.

The caller from the company would request details of the ATM cards including the three digits socalled identity security numbers at the back of the cards to allow transactions to be carried out.

Then the caller would give instructions on the smartphone live with me on the PC online to assist the completion of the transactions unlike just providing the credit card details for the company to complete the transactions without PC online.

But it was new to me that the caller would ask me to log on the PC to software known as AnyDesk and then on my bank account once open online related to the ATM or debit card would be visible to the caller online.  Would the caller see my username ID and password I would not know?  Are these two items visible or blocked to the caller for security?

What shocked me was when the two bank accounts online banking was open on the same page, the caller could simple move the fund in one account to the other account on the same page. I would not how to stop that.  I also would not know if such transaction could transfer money out without the usual process of filling the instant transfer forms online. Even I myself need to complete the instant transfer form online to be verified by token (transaction instrument) and PAC numbers normally obtained in personal smartphone. It was ‘lucky’ both the saving and current accounts have little funds on the same page.

After this unusual experience in ignorance and for the first time, I went to the local banks and told  them and the response as usual “is safe with the password not disclosed”.  In this matter, I am not sure if Anydesk is in operation. I hope Bank Negara would advise how to stop such unauthorised online transactions of just simply moving from one account to another account on the same page in online banking for better consumer security and protection. Also can the caller come back to gain access to the bank accounts later with the data already obtained or he could keep the page open? For safety sake, I changed the password concerned.

I did not incur any losses but sharing this case can improve our online banking now already a daily must. 

I would hope that we can set up online banking clubs to update ourselves in the face of new technologies and softwares developed daily as AI is fairly advanced now.

Joshua Y C Kong   17/04/2019