Banking - Physical vs Digital Token

[yuzu28]

pretty sure can set internet banking pin to be different from atm pin .
in fact that should be a hygiene to set different pins.

i suspect most of the ocbc scam victimes internet banking pin and atm pin is the same , thats why fraudster only need to phish user id + pin + sms otp to setup the digital token since atm pin is same pin

When ocbc first started, the internet banking pin is same as atm. I dunno can change or not after that, cos my balance in there is low. And their IB pin is too simple. Dbs is a little more complex than ocbc, but still considered simple. Scb, Citi are ok, using password, will take longer time to crack.

 

[wira]

When ocbc first started, the internet banking pin is same as atm. I dunno can change or not after that, cos my balance in there is low. And their IB pin is too simple. Dbs is a little more complex than ocbc, but still considered simple. Scb, Citi are ok, using password, will take longer time to crack.

for ocbc online banking, go to customer service tab, click Change Pin. Thats it.
you can also go to same tab, click Reset Debit/ATM Card Pin.


Since the odds of getting each digit is 1/10, you multiply 1/10 by itself 6 times. There's literally a one in a million chance of guessing the PIN correctly.

and most banks will already lock your accounts if you enter wrong pin 3 tries. so how easy is it to crack ?

 

[yuzu28]

for ocbc online banking, go to customer service tab, click Change Pin. Thats it.
you can also go to same tab, click Reset Debit/ATM Card Pin.


Since the odds of getting each digit is 1/10, you multiply 1/10 by itself 6 times. There's literally a one in a million chance of guessing the PIN correctly.

and most banks will already lock your accounts if you enter wrong pin 3 tries. so how easy is it to crack ?

Hackers use algo to crack, they will have a way. For consumers, easiest is dun anyhow click and dun be greedy.

 

[wira]

Hackers use algo to crack, they will have a way. For consumers, easiest is dun anyhow click and dun be greedy.

definitely.

No matter how secure and sophisticated the security is, its pointless if you gave away the keys willingly

 

[reddevil0728]

Hackers use algo to crack, they will have a way. For consumers, easiest is dun anyhow click and dun be greedy.

definitely.

No matter how secure and sophisticated the security is, its pointless if you gave away the keys willingly

and victims who are irresponsible will blame others but themselves

 

[cscs3]

pretty sure can set internet banking pin to be different from atm pin .
in fact that should be a hygiene to set different pins.

i suspect most of the ocbc scam victimes internet banking pin and atm pin is the same , thats why fraudster only need to phish user id + pin + sms otp to setup the digital token since atm pin is same pi

pretty sure can set internet banking pin to be different from atm pin .
in fact that should be a hygiene to set different pins.

i suspect most of the ocbc scam victimes internet banking pin and atm pin is the same , thats why fraudster only need to phish user id + pin + sms otp to setup the digital token since atm pin is same pin

If this is the case, I believe csn certainly set something in their system to ensure customer do not use the same pin for varies login.

By the way, someone also mention the bank actually retain the old simple user id that is supposedly should be changed to long ID back in SEP2020. He discovered the old ID cam actually use for mobile apps login but for login with internet browser, long ID is required.

 

[cscs3]

When ocbc first started, the internet banking pin is same as atm. I dunno can change or not after that, cos my balance in there is low. And their IB pin is too simple. Dbs is a little more complex than ocbc, but still considered simple. Scb, Citi are ok, using password, will take longer time to crack.

You are right.
PIN is much easier to hack. By the way, UOB and MalBank also use password.

 

[ftpofmpo]

When ocbc first started, the internet banking pin is same as atm. I dunno can change or not after that, cos my balance in there is low. And their IB pin is too simple. Dbs is a little more complex than ocbc, but still considered simple. Scb, Citi are ok, using password, will take longer time to crack.

shows u how "high tech & digitalalized" our local banks are

wat a laughing stock

 

[TooFree]

Hi All,
Are there pros/cons using physical vs digital ?
If going overseas, any issues ?

TIA.

Physical Token
Pros - Handy size, separate functional, aesthetic design, more secure
Cons - Separate item to carry, batt needed, large size and cumbersome to use
Digital
Pros - Integrated with HP, simple to authenticate
Cons - Troublesome if lost HP or no batt, need WIFI or data, need to download app which can clutter with ads, need regular update of app

 

[sohguanh]

Physical Token
Pros - Handy size, separate functional, aesthetic design, more secure
Cons - Separate item to carry, batt needed, large size and cumbersome to use
Digital
Pros - Integrated with HP, simple to authenticate
Cons - Troublesome if lost HP or no batt, need WIFI or data, need to download app which can clutter with ads, need regular update of app

Great point form format and I agree. Clutter with ads will depend as I think bank mobile app don't have ads except for services provided by their own bank. Regular update of app is "forced" as Google Play just update unless my phone is those China with no Google Play installed and somehow you extract the apk and install manual (which depend on bank implementation they are checking for such non-Google Play installs)

 

[wira]

Physical Token
Pros - Handy size, separate functional, aesthetic design, more secure
Cons - Separate item to carry, batt needed, large size and cumbersome to use
Digital
Pros - Integrated with HP, simple to authenticate
Cons - Troublesome if lost HP or no batt, need WIFI or data, need to download app which can clutter with ads, need regular update of app

most bank digital token would still be able generate otp without data, fyi.

 

[chiokcc]

Received email from DBS today, says will support Android 9 and iOS 11 and above only from Sep 2022....

 

[sohguanh]

Received email from DBS today, says will support Android 9 and iOS 11 and above only from Sep 2022....

Some smartphone cannot go to that high as updates stopped. Only way is to buy newer phones. Wonder if they consider that. Even other bank mobile apps also never set so high

 

[reddevil0728]

Some smartphone cannot go to that high as updates stopped. Only way is to buy newer phones. Wonder if they consider that. Even other bank mobile apps also never set so high

technically not their business ma. not their cost.

but if got security lapse and ppl lose money, is their issue

 

[reddevil0728]

Understand need to up the version but theirs is super new which mean past 1-2 year phones which has stopped updates all need buy new phones. In theory if 9 is latest must give some leeway say support up to 6 i.e give allowance. But like you say is their business so they say A is A like serve NS cannot siam.

like that buy iphone better? iphone tends to have 1 of the longest ios support.

 

[dappermen]

who carry a phy token in this era?
I dont even have an NRIC (physical)