Piru wrote:
Maybe I should explain how "online banking" works here in Finland.
In order to get access to my account you'd need to know my user id. It is no way related to my account number or any personal information.
Second, you'd need to know my password. It is no way related to my account number or any personal information.
Once you've logged in, in order to do any transaction you'd need to know challenge-response number from a key list (say, "enter security ID #75"). Needless to say, the lists are totally random and I have the only copy. One number is used only once. Once all the numbers are used I can order a new list (and the numbers on that particular list are only activated at that time). Note that the list itself is useless unless if you know the user id and password, too.
My bank in Turkey started something similar in these lines. Whenever I do a transaction online, they send a confirmation number to my cell phone by SMS. The transaction doesn't take place unless I enter the confirmation number in 15 minutes.
and no, you can't change the cell phone number on file without personal application (to the bank).
Now, although this feels quite secure, it rendered online banking totally useless for me, cause my cell phone doesn't work here in japan :headwall: :headwall: :headwall: (Turkey uses GSM like most of europe while japan has CDMA, no possibility of roaming)
