Computerworld
Barclays 'chairman' scams his own bank
Fraudster poses as bank’s chairman, withdraws £10,000
Andrew Hendry  11 January, 2008 12:28

Barclays bank in the UK has found itself at the centre of another security scam, this time around someone posed as the bank's chairman and scammed £10,000 out of his personal account.

The fraudster rang a Barclays call centre posing as the bank's chairman, Marcus Agius, and managed to have a new credit card sent out to him under Agius' name.

He then went into a Barclays branch and used the newly issued credit card to withdraw £10,000 out of Agius personal account.

Britain's Sun newspaper reported that Barclay's bosses were 'burning up' with embarrassment.

The scam follows the highly publicised actions of BBC Top Gear presenter Jeremy Clarkson, who published his Barclay's account number in an attempt to prove that the UK's largest ever data breach was nothing to fuss over.

A cheeky reader subsequently used the details to help Clarkson 'donate' £500 to a UK charity .

"The banks have to protect people connecting to their services, but if I know enough about you or anyone, you would be amazed what I could do," said Andreas Baumhof, CTO of online fraud protection company TrustDefender.

"If you've lost your account number or password for online banking, is your bank providing you with a service to recover those details? Every bank does, because it's a normal thing that happens," he said.

"They provide you with this information after checking your identity, which typically is your address, telephone number and some personal information. So if you know this information they will release your password."

With the right story and the right personal information, the security measures of any bank can be circumvented

Baumhof said call centres are a typical target of online fraudsters and identity thieves. Their tactics involve bombarding a call centre with phone calls, talking to a different person each time and extracting a little piece of information with each call.

"After they've rung them fifty times, you can connect a lot of information about someone," he warned.

According to Baumhof a lot comes down to telling the right story to the right person.

"In the end it comes down to human behaviour, if you look like you are in the right place at the right time then people tend to trust you."

Baumhof said that with the right story and the right personal information, the security measures of any bank can be circumvented because of this human element.

"The banks can provide really good secure protection but it only helps if we protect people's identities generally."

Barclay's is reported to have accepted liability for the breach and has reimbursed the £10,000 into Agius' account.

Amid fears other senior execs could become targets, the bank is reported to have reissued all passwords and is revising its security practices.

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Whitepaper

Understanding Email Marketing: A Guide for SMBs

Email marketing is often viewed as a marketers silver bullet. If used effectively, email campaigns will provide strong results for a limited spend each and every time. Download this white paper to discover how email marketing can work for you and your business.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.