Monday, June 20, 2005

Banks, cards and security

In times that the transactions with cards are in danger of fraud, banks don't really seem to care and choose partners that have very poor security!
I lately received a letter from a company completely unknown to me, claiming that they are authorised by my bank to deliver my cards on their behalf. The letter was generic and generated, with my name and address stuck on it with a white sticker. I believed it was fraud. It was not signed, and the name of the person was quite common. This rang another bell for fraud. Their address was a PO BOX somewhere in east London. I was now completely sure that it is fraud and thought of throwing away the letter, being angry at the same time that some company that I used to do shopping online has sold my details to these people.
On a second thought, I didn't throw away the letter and decided to go and ask the bank, whether it is fraud or not, and, if it is, to let them go after this "company".

The next day I went to the bank, being completely sure that I will pass them a case of fraud. Well things were not really like that. They said that this letter is original and legit and that I should go online to the site written on the letter to register for my card to be delivered. I accepted it and left. Later I went online to the site.

I was hoping to find more details about this "Security services" company on their site. I believed that a company employed by my bank should be transparent and that I could find more details about them, if I wished so. Well, things were not like that. The website was minimalistic. I only had 4 options. To "Arrange delivery" of my card, to read the terms of use of the site, and a privacy statement. The fourth option was taking me to the company that designed the site. I must say I didn't like that at all. No info about this company, a company that seemed that it was only delivering things... I pressed "Arrange Delivery" to find out that I was asked personal details on a page with no security!

I wonder whether the people of my bank that employed this company, ever thought that a site like that could easily be made by fraudsters! A site created with Dreamweaver, using free scripts to do fancy stuff with HTML. A site that gives no information about the company. A site that uses no security and asks my personal details! How can I trust such a website?

I haven't used the website yet. And I don't think I will! Back to the traditional way of paying using cash, and queueing to withdraw money!

(Or maybe time to change bank!)

No comments: