[506] in Privacy_Forum

home help back first fref pref prev next nref lref last post

[ PRIVACY Forum ] Warning! Well Fargo Bank Will No Longer Password

daemon@ATHENA.MIT.EDU (privacy@vortex.com)
Fri Aug 28 19:01:13 2009

Date: Fri, 28 Aug 2009 15:43:29 -0700
To: privacy-list@vortex.com
Message-ID: <20090828224329.GB28193@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: privacy@vortex.com
Reply-To: PRIVACY Forum Digest mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit


   Warning! Well Fargo Bank Will No Longer Password Protect Business Accounts

               http://lauren.vortex.com/archive/000608.html


Greetings.  This is just a quick heads-up.  I've been informed, and
have verified through multiple sources, that Well Fargo Bank will now
refuse to password protect business banking accounts.  Callers
punching directly through to an agent without entering identifying
information may be able to obtain full account access using only an
account (e.g. checking account) number, and last four digits of
taxpayer ID or SSN -- all data elements that tend to be widely
available in the course of doing business for many entities.  Note
that Well Fargo phone agents do not routinely ask for PINs, either.

In theory, Wells claims that if a business already has a password
assigned it will still be honored for now -- but in practice it
appears that many phone agents are simply ignoring the passwords, and
will refuse to set a new one.  Nor can businesses even go into a
branch to assign a password (as, supposedly, consumer account holders
still are permitted to do).

Wells' explanation for this change is that supposedly too many people
forgot their passwords, and that the passwords could be bypassed
anyway with other easily obtainable information.

In fairness, all Wells Fargo representatives I've spoken to about this
agree that's it's a dangerous and stupid (their words!) policy.  After
all, just because some people lock themselves out of their cars, and
it's possible to break in through windows, we still expect auto
manufacturers to provide locks.

Businesses with their accounts at Wells Fargo may wish to reevaluate
their situation in light of this information.  I'll update if and when
I learn more about this significantly outrageous policy change.

--Lauren--
Lauren Weinstein
lauren@vortex.com
Tel: +1 (818) 225-2800
http://www.pfir.org/lauren
Co-Founder, PFIR
   - People For Internet Responsibility - http://www.pfir.org
Co-Founder, NNSquad
   - Network Neutrality Squad - http://www.nnsquad.org
Founder, GCTIP - Global Coalition 
   for Transparent Internet Performance - http://www.gctip.org
Founder, PRIVACY Forum - http://www.vortex.com
Member, ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein

_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy


home help back first fref pref prev next nref lref last post