Getting bank card PIN from phone/wallet theft?

GreatAuk said:
That one sounds like the most likely theory to me - I bet loads of people use the same gym door code as their cards.

Just need to peek over their shoulder when they're entering it (or do a hi tech thermal imaging approach of taking a picture of the keypad, or some other method) then watch which locker they use. People are probably less protective / wary over the pin they use to get into a gym than when getting cash out, so probably easier to spy on them (even if it's the same number).
Click to expand...
Most chain gym codes are not user changeable, or at least not in my experience, they're also a lot longer than a PIN.
 
In the 1980s and 90s there were lots of stories in the news about phantom withdrawals from cash machines and the banks saying they were done with cards and pins.

It very quietly came out a few years ago that it was insiders in the banks doing it (or at least a chunk of it) and it was all quitely covered up at the time.
 
I would say either someone was checking people going into the gym and saw that she was a regular who used the bank before/after and checked her pin entry, or... much much much more likely, the person had their pin written down in the bag.
 
An old favourite would be putting the pin in the phone as a contact. Used to see that a lot.

100% It was written somewhere so they got into her phone and her banking app and realising she ****** up she cried to the bank on twitter and they basically paid her off to stop bad press. The problem is people like this make it harder for genuine victims to sort this **** out.
 
To get your pin from your banking app requires you to log in to the app. You can only do this with either a fingerprint or a password/pin.

I do wish banks were more ballsy at telling people like this no, it's not possible for someone to access your banking app unless you've revealed your login information. It takes resources away from people who are genuinely scammed by sophisticated scams.
 
new boy said:
Doubt some gym locker raiders have expert knowledge on banking app vulnerabilities. More likely she had it written down on a scrap of paper or somthing, has lied to the bank about it and then continued to double down on the lie until she got to where she is now
Click to expand...
At work, You be surprised how many people have their PIN written down on a piece of paper or have it saved on their phone’s notepad, which isn’t secured. Even a colleague found a card with a four digit number written on the signature strip. The customer’s PIN?

People think they have to have the PIN randomly issued by their bank. You don’t. Why not change it to a number you know. Can change PIN at any ATM, under PIN services. Please not 1111 or 1234.
 
cheesefest said:
At work, You be surprised how many people have their PIN written down on a piece of paper or have it saved on their phone’s notepad, which isn’t secured. Even a colleague found a card with a four digit number written on the signature strip. The customer’s PIN?

People think they have to have the PIN randomly issued by their bank. You don’t. Why not change it to a number you know. Can change PIN at any ATM, under PIN services. Please not 1111 or 1234.
Click to expand...
Is 0000 OK?
 
builder22 said:
doesn't want full name published, but a pic and various other details is ok??
Click to expand...

Her name is Charlotte Morgan.

She Tweeted about it. :D





This I think is the important part. Confirms that it's an iPhone she uses.



Now I don't have a Santander account so unsure how the view pin function works, which is something she's very hung up on in her Twitter thread but;

Someone would need to unlock her phone (via pin or biometrics), then unlock the banking app and pass additional auth to view pin of the card.

Of course that someone has already seen her pin, at a cash point, in a shop, at the gym barriers (which were not working at the time) or maybe just possibly on a piece of paper in her bag. And this pin to unlock the phone is the same she uses for her cards and at the gym barriers etc etc.


But then she says things have been 'reset'.

But in order for them to do that they'd need to know her personal ID number for online banking, does that show in the Santander app if you can access it? If not then they'd have to do a 'forgotten my ID' process on the website which requires at least your full name, D.O.B and postcode. Then I assume it asks for more security information.
 
Azza said:
Her name is Charlotte Morgan.

She Tweeted about it. :D





This I think is the important part. Confirms that it's an iPhone she uses.



Now I don't have a Santander account so unsure how the view pin function works, which is something she's very hung up on in her Twitter thread but;

Someone would need to unlock her phone (via pin or biometrics), then unlock the banking app and pass additional auth to view pin of the card.

Of course that someone has already seen her pin, at a cash point, in a shop, at the gym barriers (which were not working at the time) or maybe just possibly on a piece of paper in her bag. And this pin to unlock the phone is the same she uses for her cards and at the gym barriers etc etc.


But then she says things have been 'reset'.

But in order for them to do that they'd need to know her personal ID number for online banking, does that show in the Santander app if you can access it? If not then they'd have to do a 'forgotten my ID' process on the website which requires at least your full name, D.O.B and postcode. Then I assume it asks for more security information.
Click to expand...

I belong to Santander. You use either biometrics (me face scan)or 5 digit PIN (same one as using a computer) To view PIN, you select more at bottom of screen. Then manage cards. If have more than one card with them, like me. You scroll across to the card in question and select view PIN. You are then do biometrics or your 5 digit PIN. You are told not to disclose PIN to anyone. Then a windows pops up with your card PIN. You then press got it or problem with my PIN.

I don’t use Virgin Active gyms. I bet she’s dump enough to use the same PIN to enter the gym as to her card PIN. Then for her 5 digit PIN I bet she uses the same number as her 4 digit one with the 5th digit the same as her 1st or 4th one. So if her card PIN is 5839. Her app PIN will be 58399 or 58395.

Mine a completely different

As to address and DOB - have a driving licence in purse??
 
Any idea if they could have been sophisticated enough to try and take her prints from the locker and somehow use that to open her phone? Or is that beyond reason?

Hate it when stories like this come out but don't include a big part of how.
 
You must log in or register to reply here.
Back
Top Bottom