I am made aware that there is a friend who tried to login his own online banking account at abt 9 something pm (Nearly 10pm) Monday but did not receive the OTP via sms. Tried again several times but still no sms received. And what’s worse is the bank call centre closed at 10pm.

In the end the person could not perform the banking transaction due to cannot login without the one time pin. I find this is so risky. Sometimes you think it’s secure but end up you yourself unable to login. So, is this due to system failure in bank? Or is it telco problem?
Not likely as can receive sms from other people.

This is ridiculous. Have you guys experience this “craziness”? I told the person to lodge a complaint.

did your friend change service provider via MNP?

i did last time and i need to update the bank and they system refreshes it after 24 hours, and i can continue using OTP

or next time use app, like maybank or cimb has it. use the app to generate the OTP

No change telco/mnp.

The thing is whether someone can intercept the sms OTP and hack into our account??

I find even apps not secure. In view of such risk, better don’t have OTP. Imagine an important transaction you need to make but couldn’t. It’s so stupid! Stupid bank!

This post has been edited by Amideva: Jun 23 2020, 01:36 AM

How can change of telco service provider via mnp affect receiving messages and incoming call ???

Dont you think WITHOUT OTP, your account would have higher risk of being compromised ? Just like pay wave when someone uses your card over the counter without your knowledge.

This post has been edited by mini orchard: Jun 23 2020, 06:27 AM

What you say about paywave is true. That’s why I don’t use it. Too much security, on the other hand, poses other issues. Anyway I don’t believe in relying on the phone for everything. One thing, when you lose your handphone, that’s it. You can’t do anything until you get a replacement SIM card. They could use a secondary question for login or a token. There are some banks whereby you can choose the type of secondary security to use after the initial login.

This post has been edited by Amideva: Jun 23 2020, 07:37 AM

What other security issues are you facing ?

How often you lose your handphone ?
When one losses his hp, of course have to face inconveniences.

Why use banks that have poor security login ?

This post has been edited by mini orchard: Jun 23 2020, 07:39 AM

Don’t argue with me. I’m just giving you the other perspective. There are pros and cons to everything. Even lose your phone once can result in big losses. Some people just don’t think about the issues when they themselves are log out from their own security. Don’t rely on security that solely rely on your phone. Diversify it. That’s what I’m saying.

On the other hand, banks must ensure the system is fool proof. How can the OTP not be received? There is no excuses in this!!

This post has been edited by Amideva: Jun 23 2020, 08:39 AM

happened to me on monday.. restart my phone.. all the pending otp come in at once..

If you dont want discussion, then dont reply my post !

Just rant and close thread !

Why so f up in the morning over your friend's problem ?

This post has been edited by mini orchard: Jun 23 2020, 08:23 AM

I am curious why our bank don't let us use the Authenticator app instead of OTP
since if using the authenticator app the code will change every 30 sec or 1 min
but don't have the inconvenience of need to wait for SMS to come in~

Although this does not solve the problem of losing one's smartphone but I cant imagine myself losing mine cause it is always going to be in my hand no matter what happen.. unless of cuz some accidents and what not.

Then you would have ppl creating thread saying authenticator is not secure also
Due to human nature of misplacing it
And extra burden to carry it around for when you need it

Complaint?
So what your solution?
Just use thumb print?
Use blood?
Or go back to stone age and do stuff over counter?

There no sure proof 100 secure method

It happened sometimes due to system failure. Sometimes OTP delay until timeout. Then you request another one than another one. Suddenly you get OTP but when you keyed in, it is wrong because it was for the previous request. Happened 3 times before last time. Once I get the OTP code the next morning

Sure you want to argue with ts ? Lol

Restarted a few times, but no smses also.

It might appear strange to you, but this also happened to me when i ported to another telco.
When i contacted the bank, i was told I had to update them once I mnp-ed even though the hp number remained the same.
This happened a few years ago, not sure if things have changed.

The person not using apps... I guess lar. But apps also will generate a OTP.

But if you’re referring to token, I think token is more secure since we don’t carry it around like we do our handphones. So chances of it being lost is less. We usually keep it safe somewhere.

This post has been edited by Amideva: Jun 23 2020, 08:46 AM

Pls read my other replies. It shows you’re outdated, only think hphone OTP is only solution.

Next morning still never get the OTP. In this case, it’s not time out. It’s not receive at all. Anyway OCBC is investigating.

Ppl will still complaint the extra question to log in is a hassle
Token?
Ppl complain it an extra burden to carry around
Human nature will always misplace stuff
Then will open thread in /k complaint how stupid the system is
I read your reply and I haven't seen any brilliant solution

That is the bank problem and will piss off its customer thus probably migrate to other bank. I'd say this is not security issue that will compromise customer.

One bank need OTP:
1) To login.
2) To create favorite account but still need another OTP to transfer money
3) To transfer money to 3rd party account.
4) To make payment
5) Reset password

Another bank need OTP:
1) To create favorite account and subsequently need no more OTP to transfer money to favorite account
2) To transfer money to 3rd party account
3) Reset password

Although looks like less security, I still prefer the 2nd bank

Using TAC via SMS is the most convenient to majority of users as most of us carry our phone all the time. Some banks use hardware token and allow users to choose either sms or pin generated by this token for most banking transactions.

I know of at least one bank in Sg that requires a hardware token plus hp sms combo if you perform a more "risky" transaction like adding new favourite payee or sthg like that.

The issue with TAC usage in Msia is they are not very reliable when it comes to receiving the sms with tac. As with most things here, we've come to accept it as it is. I've personally lost the opportunity to purchase ASNB unit trusts online a few times because the TAC never came or arrived after time-outs.

Not all faults lies with bank. Telco is also a partner. Receiver location is also important.

As usual msia only know to blame the bank

Is the registered number is the same as current number?

Have to blame the banks cos big sum money inside !

Customers are right one ... DONT ARGUE !

This post has been edited by mini orchard: Jun 23 2020, 09:40 AM

the clue is :-

set receiver phone to airplane mode, and off it again to refresh the network.

then use another phone , send dummy sms to the OTP receiver number, this can "unstuck" incoming SMS from 5 digit premium number and at the same time ensure that the receiver number is fully functional to receive SMS.

how it work? don't ask me, it's magic.

if it doesn't work, then pretty much it's bank side issue, not telco anymore.

If you are not sure how it works, how sure is not telco anymore.?

Write something you can explain.

This post has been edited by mini orchard: Jun 23 2020, 09:44 AM

Try again some other time, to see if you can receive the OTP. If few tries still fail, then please contact your bank.

And if you want to rant, please make sure you rant it face to face with the bank officers so your ideas can be heard by them.

Even when kena scam also bank fault
Malaysia boleh!

MNP records is just like DNS concept but in slower way to update DB... There is a root server that holds the master DB...

For call and normal SMS, the record can easily divert from Telco A -> Telco B during location lookup in real time

But for OTP (Application) wise, usually it won't be updated in real time...

This post has been edited by thankyou: Jun 23 2020, 10:38 AM

You don't have to.

Do you know how your body works when you consume food?

Are you bothered on each and every ingredient you consumed at outside?

Are you bothered on how does this forum work? Do you know how a source code work? Do you care how all the bits are streamed through the internet while you are using the Internet?

Are you bothered how your account is used on every single social media pages?

No.

What a bank or telco do is just providing service to you on the front end, they don't have to explain to you about anything that is running on the back end because that part is none of your business.

I am just merely providing solution that works, I don't have to explain any technical term because you wouldn't understand anyway. In short, I dumb it down for normal user like YOU and this method is called troubleshooting.

Ever heard the term " you tak suka, you keluar ", you can always change to another bank or close it down or open a new bank yourself.

You can only blame yourself / your friend for not having contingency account from other bank. There is no provider that can provide 100% uptime for their services.

This post has been edited by a13solut3: Jun 23 2020, 11:00 AM

If you cannot assure it works, dont even bother to explain. Using magic to create 'solution' ?

This post has been edited by mini orchard: Jun 23 2020, 11:01 AM

The issue is, it is working. Did you try it? Probably not.

Anyway, stupidity and egoism will not bring you very far in this harsh world.

Don't try this method when shits hit the fan again ya.

I dont have problem with my banks. You should tell that to ts. He is ranting.

This post has been edited by mini orchard: Jun 23 2020, 11:05 AM

It is not as easy as you think. Different channel different server. You send SMS probably just loop local network. The TAC request goes through several networks. So still depends on how telco network and bank on how they structure the network.

I have already stated. Everything has pros and cons, only a matter of more pros or more cons. In my opinion my statement that some banks let you choose is indeed the best solution... at least that’s my opinion.

This post has been edited by Amideva: Jun 23 2020, 11:55 AM

I agree. Good example. That’s what I’m saying abt using phone OTP for too many things. When phone or sms problem, everything cannot be done.

This post has been edited by Amideva: Jun 23 2020, 12:07 PM

Bank 1 is HSBC ke? I also think its a hassle to login with OTP.

Glad you shared. Another user that experienced the TAC or OTP that never came.

Guys, don’t get me wrong. I’m not saying it’s not useful. It is... but as the above writer says... well, the sms coming in need to be improved.

That’s possible too. But in my friend’s case, it’s not.

I don't know whose fault it is. As for receiver location, we can only depend on the signal strength indicator of our phone. SMS has existed since the first time I got a mobile phone in the nineties. I'd expect it to be the most reliable method of receiving messages.

As I said, the general consensus is "take it or leave it" when it comes to demanding reliable banking service. For example, whenever someone complains how angry he is because the internet banking of Bank A was down without advance notice when he had to do a transaction, he would be chided for demanding 100% uptime.

My old phone samsung phone also same, ever since send to explace battery and reflash, difficult to get OTP. After off, then on, only the OTP some in.

Now before I do transaction I will Off on my phone so that can get OTP SMS easier.

Bank 1 is AmBank, and I think CIMB and probably others too.

Bank 2 is Maybank

Luckily it is very rare case for me.

As usual, Malaysians accept poor service and worse, self justify it.

The banking communicates with the telco. Nobody knows what runs behind the scene unless he is in this field.

If Lazada or Shopee or any merchant fails to process your credit card refunds after certain deadline, do you complain to the bank or Lazada?
As a customer of Lazada or Shopee, do you need to know their refund system works?

Ah, icic. Thanks.

Cimb no, as i am using it. No nid otp to login.

But hsbc yes, damn troublesome. They give a security device which we have to bring everywhere if we want to login.

I forget about the CIMB login, but I remember that transfer money to favorite list still need TAC. I'm no more using CIMB since the company is now using AmBank ( even more rare location )

I transfer monthly salary to my Maybank . More accessible

Then ask ur so call friend to change bank
The bank won't change jus coz of 1 fussy customer
Not everything revolve around you and your fren

my bank islam always become this..use onexox..use maybank no problem..then use bank islam again no problem..maybank more powerful push OTP maybe

encountered this yesterday when I want to top-up my Grab credits. Using online banking, keep failing which maybe due to Grab. Then I tried using Visa/MC, got to the Secure Code page, wait2 for Code but never came. Ask my friend to SMS me, and I can receive immediately. Could it be got issue with SMS Gateway?

I restart my phone then the SMSes came thru but the number from Maybank was +45 20 20 66 33 and not the normal 5 digit. Weird.

With traditional banking, you lost anything. You have to go the bank personally.

With online banking, you lost phone, get a replacement SIM and you are good to go. Telco will only give you replacement SIM if you are the actual owner.

Which is easier for you? Go to bank or go to Telco?

I once have problem with OTP from one particular bank. Bank couldn't resolve it. So change bank.

If you actually loses your phone, you need to go to both.

You’re probably not aware of risk management and customer service. For banking industry, issues like this are high priority. If there’s an issue with the security of banks, they will take it seriously even if it’s just one case because they want to know how extensive is the issue.

It’s good to share whenever we hv these issues to create public awareness and to help one another. The purpose is never to rant and complaint only but it serves to improve the overall service of the banks. For example, it’s good that someone compare between banks and we can see that from our experience with certain banks, we know that their service level is better and don’t rely too much on OTPs or TACs for every thing. Practices of different banks vary and by sharing these knowledge, we’ll be able to choose our preferences. At the same time, be able to recommend positive changes to our banks.

Thanks to all for sharing. Enough of this thread. Bye.

This post has been edited by Amideva: Jun 23 2020, 07:23 PM

yes this method work most of time my otp also always delay and received late / expired this is telco problem until I figure out to use the on airplane mode and off back to push for the sms

If only the bank ceo was in /k