You should change it after because, well, otherwise they have your real password and can log in anytime. In case you reused this password somewhere else, you should change it to a dummy password beforehand so that if they do keep it in a database somewhere, and it gets compromised, that password is useless to the hackers. If you absolutely must use the online banking option, either due to time constraints or whatever reason, change your password, both before and after.
Not everyone has online banking, and their scraper probably wouldn't work with all smaller banks anyway. Most banks that offer the online banking option, also offer this as an alternative. For example, Dwolla offers this as an option for adding an account.Īs said, the more standard means of verifying an account is through microdeposits. As such, I tend to avoid these services personally, but as far as I can tell they are legitimate. It's always made me a bit nervous, as there is no way to tell what additional data they might be gathering or what they might do with it. They use the data they collect to verify your account info matches what you previously entered. By providing your online banking credentials, their service is able to impersonate you and scrape data from your bank's online banking portal automatically. I have seen a number of banks offer this as a means to authenticate your account ownership instantaneously. This is actually becoming a more common practice, at least in the US. This might not be a scam, but I'd still avoid it I'd check my account statements and tax records if I were you. Unless it's a direct scam, the information will (and should be) completely and utterly useless for the inquirer!Īnother thought that just hit me, is that the burden of proof of the transaction itself normally lies on the debtor (your fiancee, who sends the money and the party who risks harm), except if suspicious circumstances surround the creditor (you, the one who receives the money).
Tl dr: No respected authority or company asks directly for private account information, especially usernames and passwords. Verify as much as you can before you proceed!Īlso, provided your fiancee has conducted the transaction either in person or via 2-factor authenticated online banking, that should provide enoough authentication unless her account is actively under investigation. The best solution would be to simply ask them about their authentication procedures in the scope of your case, at multiple branches and through customer service if you can. In Germany (at least with VolksBank and DiBa) you're usually asked to deliver a handwritten note in person at the nearest branch.Īlso, if you DID receive the inquiry from Macoto Bank, they should be reported to the consumer protection authorities (if you have any). If you DID receive the inquiry directly from Macoto Bank, you should ask about alternative means of authentication. If you have not received the inquiry directly from Macoto Bank, it's with 99.9999% certainty a form of scam. That also means that Macoto bank has at the very least suffered a breach of procedure, as the inquired information is not only useless for them, but also because waaaaaaaayyyyy better methods of authentication exist! Provided that the Macoto bank mentioned is the Macoto Bank of Taiwan, this process is not only suspicious, but illegal, as Taiwan has pretty advanced privacy and data protection laws, fully on par with the US and the EU. Not only is the bank username/password the most important information you carry, for the real Macoto Bank it would be utterly useless for authentication purposes (as they (should) have no way of verifying that information)! To reinforce an earlier answer it is a steaming pile of cow manure.
0 kommentar(er)
