Big bank goes phishing

I was on the road recently. I forgot/lost/misplaced my password to log on to Internet banking so I could pay my staff. I called 1-800-Amsouth and asked for my password. They asked me for: 1) my name; 2) account name and number; 3) address; 4) federal ID number; and 5) date of birth. Then they gave me my password.

My wife overheard the conversation and raised hell with me about how easy it was to gain access to our intertwined online accounts with no decent security check. AmSouth's proof-positive security check was, in fact, public information. Big bank goes phishing - Network World

Linked by shanmuga Thursday, 18th May 2006 1:37AM