Saturday | 11 October, 2008
Computerworld
Barclays 'chairman' scams his own bank
Fraudster poses as bank’s chairman, withdraws £10,000
Andrew Hendry 11/01/2008 12:28:04

Related Features
  • +

    Ticked Off at Tick the Box Mentality 04/02/2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
  • +

    How to Get Real About Strategic Planning 04/02/2008 12:50:59

    Everyone agrees that having a strategic plan for IT is a good thing but most CIOs approach the process with fear and loathing. In fact, the majority of CIOs (and the enterprises they work for) are faking it when it comes to strategic planning. Isn't it time we all got real?
    Oh, it must be nice to be the CIO of a FedEx or a GE or a Credit Suisse. Places where IT and the business are so tightly aligned you can barely tell the two apart. Where corporate leaders understand that IT is a strategic asset and support it as such
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
RSS Feeds

Barclays bank in the UK has found itself at the centre of another security scam, this time around someone posed as the bank's chairman and scammed £10,000 out of his personal account.

The fraudster rang a Barclays call centre posing as the bank's chairman, Marcus Agius, and managed to have a new credit card sent out to him under Agius' name.

He then went into a Barclays branch and used the newly issued credit card to withdraw £10,000 out of Agius personal account.

Britain's Sun newspaper reported that Barclay's bosses were 'burning up' with embarrassment.

The scam follows the highly publicised actions of BBC Top Gear presenter Jeremy Clarkson, who published his Barclay's account number in an attempt to prove that the UK's largest ever data breach was nothing to fuss over.

A cheeky reader subsequently used the details to help Clarkson 'donate' £500 to a UK charity .

"The banks have to protect people connecting to their services, but if I know enough about you or anyone, you would be amazed what I could do," said Andreas Baumhof, CTO of online fraud protection company TrustDefender.

"If you've lost your account number or password for online banking, is your bank providing you with a service to recover those details? Every bank does, because it's a normal thing that happens," he said.

"They provide you with this information after checking your identity, which typically is your address, telephone number and some personal information. So if you know this information they will release your password."

With the right story and the right personal information, the security measures of any bank can be circumvented

Baumhof said call centres are a typical target of online fraudsters and identity thieves. Their tactics involve bombarding a call centre with phone calls, talking to a different person each time and extracting a little piece of information with each call.

"After they've rung them fifty times, you can connect a lot of information about someone," he warned.

According to Baumhof a lot comes down to telling the right story to the right person.

"In the end it comes down to human behaviour, if you look like you are in the right place at the right time then people tend to trust you."

Baumhof said that with the right story and the right personal information, the security measures of any bank can be circumvented because of this human element.

"The banks can provide really good secure protection but it only helps if we protect people's identities generally."

Barclay's is reported to have accepted liability for the breach and has reimbursed the £10,000 into Agius' account.

Amid fears other senior execs could become targets, the bank is reported to have reissued all passwords and is revising its security practices.

Market Place

Computerworld Member Login


 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
Whitepaper

Taking On Demand CRM Integration to the Next Level

Discover the current integration challenges facing businesses attempting to deploy on demand CRM systems. Learn how to create comprehensive integration of your data, user interface and business process levels and transform a portfolio of disparate applications into a unified, virtual application suite.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links