A lack of security protection on some banks’ websites and apps is leaving “open doors” for scammers, Which? claims.
The customer security systems of 13 current account providers were tested by the consumer group with help from security experts at Red Maple Technologies.
The security features of online and app services offered by account providers were scored by looking at their processes for login, navigation and logout, account management and encryption.
Virgin Money scored the lowest overall for online and app banking in the research.
“The safety and security of our banking services is our top priority, and we are continually monitoring, assessing and improving our security controls," a Virgin Money representative said.
“A number of the points raised in this research relate to decisions we’ve taken to enhance the digital user experience while ensuring our robust, multi-layered controls remain in place to protect customers’ accounts.”
Which? said it also had some concerns over TSB, which received the second lowest score for its app in the study.
“We continue to invest in our online and mobile services – and work with globally leading tech firms to deliver both security and accessibility to our customers," a TSB.
"TSB also tracks well across the industry on fraud prevention and we are the only bank that protects its customers with a guarantee to return their money should they ever fall victim to fraud.”
Nationwide Building Society was given the second lowest score for online banking security.
“Nationwide takes the security of its members and their money very seriously," Nationwide said.
“We are never complacent and conduct regular testing of our systems to ensure that we maintain an appropriate level of protection, whilst ensuring a positive user experience.
“We will take the points raised by Which? on board as we continue to evolve our digital services.”
Meanwhile, Which? said Starling Bank was top for online banking security.
Top scorer for online banking security last year, HSBC UK, also performed well this year. It followed closely behind Starling for online banking, while its app had the highest score.
Which? said the banks included in the research also had behind-the-scenes systems that the consumer group and Red Maple Technologies were not able to test.
In general, the consumer champion said it wanted improvements in which weak passwords were blocked.
It also believes that sensitive data should not be sent by text messages because they can be intercepted.
If the worst happens and people fall victim to remote banking fraud, in many cases they will be entitled to a refund from their bank.
“Banks should not be leaving these open doors for scammers to exploit and must up their game to protect their customers properly," said Sam Richardson, Which? Money deputy editor.
“By making improvements, such as blocking weak passwords, banks can take an important step in preventing unscrupulous fraudsters from attempting to steal money and personal data from consumers.”
A UK Finance representative said: “The banking and finance industry is committed to stopping fraud from happening in the first place, investing billions in advanced technology to protect customers.
“Our figures have shown that the number of recorded cases of unauthorised fraud has fallen year on year, with the first half of 2022 showing a fall of 7 per cent to just under 1.4 million, and banks stopping £583.9 million ($720 million) of unauthorised fraudulent transactions.
“The industry continues to work closely with the government and law enforcement to target the criminal gangs responsible and continue its efforts to prevent fraud to customers.”
Here are five tips from Which? for safe banking online:
1. If you receive unexpected emails, texts, WhatsApp messages or any other type of online correspondence, do not click on the hyperlinks they contain.
Criminals posing as your bank might try to steal sensitive data or trick you into sending money, going as far as creating fake websites to impersonate banks and other companies.
Do not download attachments or call phone numbers. If you need to get in touch with your bank, call it on a trusted number, such as the one on your debit card.
2. Use up-to-date security software. This means downloading antivirus software on your computer, phone and any other devices you have.
It is also important to download and install the latest updates for the device. Updates contain security patches for new vulnerabilities, so do not use an out-of-date device.
3. Protect your mobile phone. Go into the settings to ensure your phone automatically locks after a short period of inactivity.
While you are in there, disable lock screen notifications, to prevent criminals seeing incoming texts, which could include bank codes for accessing your account.
You can also add a Pin to your Sim card, to prevent it being accessed.
4. Check privacy settings on social media. Remove any personal information such as your email, date of birth and phone number, all of which can be used by criminals to steal your identity or impersonate your bank.
Only accept friend requests from people you know.
5. Replace default passwords on your home router. This will prevent others from accessing it. Also, avoid banking on unsecured wireless networks or public computers.
If you do use a public computer, never leave it unattended and always log out when you have finished.
Living in...
This article is part of a guide on where to live in the UAE. Our reporters will profile some of the country’s most desirable districts, provide an estimate of rental prices and introduce you to some of the residents who call each area home.
The specs
Engine: 2.0-litre 4-cyl, 48V hybrid
Transmission: eight-speed automatic
Power: 325bhp
Torque: 450Nm
Price: Dh359,000
On sale: now
Fighter profiles
Gabrieli Pessanha (Brazil)
Reigning Abu Dhabi World Pro champion in the 95kg division, virtually unbeatable in her weight class. Known for her pressure game but also dangerous with her back on the mat.
Nathiely de Jesus, 23, (Brazil)
Two-time World Pro champion renowned for her aggressive game. She is tall and most feared by her opponents for both her triangles and arm-bar attacks.
Thamara Ferreira, 24, (Brazil)
Since her brown belt days, Ferreira has been dominating the 70kg, in both the World Pro and the Grand Slams. With a very aggressive game.
Samantha Cook, 32, (Britain)
One of the biggest talents coming out of Europe in recent times. She is known for a highly technical game and bringing her A game to the table as always.
Kendall Reusing, 22, (USA)
Another young gun ready to explode in the big leagues. The Californian resident is a powerhouse in the -95kg division. Her duels with Pessanha have been highlights in the Grand Slams.
Martina Gramenius, 32, (Sweden)
Already a two-time Grand Slam champion in the current season. Gramenius won golds in the 70kg, in both in Moscow and Tokyo, to earn a spot in the inaugural Queen of Mats.
Lexus LX700h specs
Engine: 3.4-litre twin-turbo V6 plus supplementary electric motor
Power: 464hp at 5,200rpm
Torque: 790Nm from 2,000-3,600rpm
Transmission: 10-speed auto
Fuel consumption: 11.7L/100km
On sale: Now
Price: From Dh590,000
AI traffic lights to ease congestion at seven points to Sheikh Zayed bin Sultan Street
The seven points are:
Shakhbout bin Sultan Street
Dhafeer Street
Hadbat Al Ghubainah Street (outbound)
Salama bint Butti Street
Al Dhafra Street
Rabdan Street
Umm Yifina Street exit (inbound)
BULKWHIZ PROFILE
Date started: February 2017
Founders: Amira Rashad (CEO), Yusuf Saber (CTO), Mahmoud Sayedahmed (adviser), Reda Bouraoui (adviser)
Based: Dubai, UAE
Sector: E-commerce
Size: 50 employees
Funding: approximately $6m
Investors: Beco Capital, Enabling Future and Wain in the UAE; China's MSA Capital; 500 Startups; Faith Capital and Savour Ventures in Kuwait
'Spies in Disguise'
Director: Nick Bruno and Troy Quane
Stars: Will Smith, Tom Holland, Karen Gillan and Roshida Jones
Rating: 4 out of 5 stars
How to apply for a drone permit
- Individuals must register on UAE Drone app or website using their UAE Pass
- Add all their personal details, including name, nationality, passport number, Emiratis ID, email and phone number
- Upload the training certificate from a centre accredited by the GCAA
- Submit their request
What are the regulations?
- Fly it within visual line of sight
- Never over populated areas
- Ensure maximum flying height of 400 feet (122 metres) above ground level is not crossed
- Users must avoid flying over restricted areas listed on the UAE Drone app
- Only fly the drone during the day, and never at night
- Should have a live feed of the drone flight
- Drones must weigh 5 kg or less
Key facilities
- Olympic-size swimming pool with a split bulkhead for multi-use configurations, including water polo and 50m/25m training lanes
- Premier League-standard football pitch
- 400m Olympic running track
- NBA-spec basketball court with auditorium
- 600-seat auditorium
- Spaces for historical and cultural exploration
- An elevated football field that doubles as a helipad
- Specialist robotics and science laboratories
- AR and VR-enabled learning centres
- Disruption Lab and Research Centre for developing entrepreneurial skills
Evacuations to France hit by controversy
- Over 500 Gazans have been evacuated to France since November 2023
- Evacuations were paused after a student already in France posted anti-Semitic content and was subsequently expelled to Qatar
- The Foreign Ministry launched a review to determine how authorities failed to detect the posts before her entry
- Artists and researchers fall under a programme called Pause that began in 2017
- It has benefited more than 700 people from 44 countries, including Syria, Turkey, Iran, and Sudan
- Since the start of the Gaza war, it has also included 45 Gazan beneficiaries
- Unlike students, they are allowed to bring their families to France
A State of Passion
Directors: Carol Mansour and Muna Khalidi
Stars: Dr Ghassan Abu-Sittah
Rating: 4/5
The specs: 2018 Jeep Compass
Price, base: Dh100,000 (estimate)
Engine: 2.4L four-cylinder
Transmission: Nine-speed automatic
Power: 184bhp at 6,400rpm
Torque: 237Nm at 3,900rpm
Fuel economy, combined: 9.4L / 100km
EPL's youngest
- Ethan Nwaneri (Arsenal)
15 years, 181 days old
- Max Dowman (Arsenal)
15 years, 235 days old
- Jeremy Monga (Leicester)
15 years, 271 days old
- Harvey Elliott (Fulham)
16 years, 30 days old
- Matthew Briggs (Fulham)
16 years, 68 days old
SERIES INFO
Cricket World Cup League Two
Nepal, Oman, United States tri-series
Tribhuvan University, Kathmandu
Fixtures
Wednesday February 5, Oman v Nepal
Thursday, February 6, Oman v United States
Saturday, February 8, United States v Nepal
Sunday, February 9, Oman v Nepal
Tuesday, February 11, Oman v United States
Wednesday, February 12, United States v Nepal
Table
The top three sides advance to the 2022 World Cup Qualifier.
The bottom four sides are relegated to the 2022 World Cup playoff
1 United States 8 6 2 0 0 12 0.412
2 Scotland 8 4 3 0 1 9 0.139
3 Namibia 7 4 3 0 0 8 0.008
4 Oman 6 4 2 0 0 8 -0.139
5 UAE 7 3 3 0 1 7 -0.004
6 Nepal 0 0 0 0 0 0 0
7 PNG 8 0 8 0 0 0 -0.458
Ukraine%20exports
%3Cp%3EPresident%20Volodymyr%20Zelenskyy%20has%20overseen%20grain%20being%20loaded%20for%20export%20onto%20a%20Turkish%20ship%20following%20a%20deal%20with%20Russia%20brokered%20by%20the%20UN%20and%20Turkey.%3Cbr%3E%22The%20first%20vessel%2C%20the%20first%20ship%20is%20being%20loaded%20since%20the%20beginning%20of%20the%20war.%20This%20is%20a%20Turkish%20vessel%2C%22%20Zelensky%20said%2C%20adding%20exports%20could%20start%20in%20%22the%20coming%20days%22%20under%20the%20plan%20aimed%20at%20getting%20millions%20of%20tonnes%20of%20Ukrainian%20grain%20stranded%20by%20Russia's%20naval%20blockade%20to%20world%20markets.%3Cbr%3E%22Our%20side%20is%20fully%20prepared%2C%22%20he%20said.%20%22We%20sent%20all%20the%20signals%20to%20our%20partners%20--%20the%20UN%20and%20Turkey%2C%20and%20our%20military%20guarantees%20the%20security%20situation.%22%3C%2Fp%3E%0A
TEST SQUADS
Bangladesh: Mushfiqur Rahim (captain), Tamim Iqbal, Soumya Sarkar, Imrul Kayes, Liton Das, Shakib Al Hasan, Mominul Haque, Nasir Hossain, Sabbir Rahman, Mehedi Hasan, Shafiul Islam, Taijul Islam, Mustafizur Rahman and Taskin Ahmed.
Australia: Steve Smith (captain), David Warner, Ashton Agar, Hilton Cartwright, Pat Cummins, Peter Handscomb, Matthew Wade, Josh Hazlewood, Usman Khawaja, Nathan Lyon, Glenn Maxwell, Matt Renshaw, Mitchell Swepson and Jackson Bird.
DUNGEONS%20%26%20DRAGONS%3A%20HONOR%20AMONG%20THIEVES
%3Cp%3EDirectors%3A%20John%20Francis%20Daley%20and%20Jonathan%20Goldstein%3Cbr%3EStars%3A%20Chris%20Pine%2C%20Michelle%20Rodriguez%2C%20Rege-Jean%20Page%2C%20Justice%20Smith%2C%20Sophia%20Lillis%3Cbr%3ERating%3A%203%2F5%3C%2Fp%3E%0A