Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Chat Tng e wallet kena locked out, baru bangun. security expert in

views
     
TSakhito
post Aug 24 2022, 08:00 AM, updated 3y ago

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


Today bangun tng e -wallet terus kena locked out and cannot login cuz max login attempt.
I am not even angry another day someone tried to hacked my e-wallet by our leaked info such as phone number.
Just need to email tng support haiz.

The question is how to prevent this type thing happened again.
What can we consumer do?
Then what should tng n go do?
One thing 1st maybe I should enable tng face verification. (Ya Ts bodoh should enable face verification, using face they will ask u to blink. U dun kena record video face and blink should be ok.)
Why tng why no fingerprint doh.gif

another thing is why must bind phone number cannot use specific user-id to login ah haiz. cuz phone number is easily available for attack
update just called tng careline and got it unlocked
Steps
QUOTE
1. call 03-50223888
2. wait for their sometime inaudible recorded message key 1,1,6 (english 2 for Bahasa Melayu, normal customer not merchant, fraud transaction if u press 3 acc details it will get u to recording haiz)
3. verify ur identity with the customer service and got it unlocked.


Update2:
If u change PIN within app, it will send OTP to ur phone for verification. If login also need better but weak link is SMS and mandate only one device at a time safer.
Best if TNG move on to 2FA or MFA, to login must got both PIN and face/fingerprint/TOTP from google authenticator like GRAB and other players.

This post has been edited by akhito: Aug 24 2022, 12:08 PM
poweredbydiscuz
post Aug 24 2022, 08:04 AM

 
*******
Senior Member
3,834 posts

Joined: Oct 2011
QUOTE(akhito @ Aug 24 2022, 08:00 AM)
The question is how to prevent this type thing happened again.
What can we consumer do?
*
Don't use tng ewallet.
TSakhito
post Aug 24 2022, 08:06 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(poweredbydiscuz @ Aug 24 2022, 08:04 AM)
Don't use tng ewallet.
*
what e wallet u suggest got better feature. If google pay come I also want to cut ewallet ald
shinchan^^
post Aug 24 2022, 08:08 AM

K66
*********
All Stars
21,256 posts

Joined: Jan 2003
From: Pekopon


QUOTE(akhito @ Aug 24 2022, 08:00 AM)
Today bangun tng e -wallet terus kena locked out and  kena login cuz max login attempt.
I am not even angry another day someone tried to hacked my e-wallet by our leaked info such as phone number.
Just need to email tng support haiz.

The question is how to prevent this type thing happened again.
What can we consumer do?
Then what should tng n go do?
One thing 1st maybe I should enable tng face verification. But i scared then ppl use photo me then can ald I lagi sad.
Why tng why no fingerprint doh.gif
*
ya happened to me as well last saturday
someone deliberately trying to login my touch n go account

doh.gif
Pugface
post Aug 24 2022, 08:10 AM

On my way
****
Junior Member
522 posts

Joined: Apr 2014
Nothing is safe lately haiz
TSakhito
post Aug 24 2022, 08:19 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(shinchan^^ @ Aug 24 2022, 08:08 AM)
ya happened to me as well last saturday
someone deliberately trying to login my touch n go account

doh.gif
*
so how u go call tng careline got it unlocked?
Ayambetul
post Aug 24 2022, 08:25 AM

Casual
***
Junior Member
336 posts

Joined: Mar 2017
use conventional wallet
wilson0416
post Aug 24 2022, 08:29 AM

Casual
***
Junior Member
343 posts

Joined: Jul 2011


Cash is king now
poweredbydiscuz
post Aug 24 2022, 08:30 AM

 
*******
Senior Member
3,834 posts

Joined: Oct 2011
QUOTE(akhito @ Aug 24 2022, 08:06 AM)
what e wallet u suggest got better feature. If google pay come I also want to cut ewallet ald
*
Use grabpay if you have grab lo.
Use shopeepay if you have shopee lo.
Use mae if you have maybank lo.
TSakhito
post Aug 24 2022, 08:34 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(poweredbydiscuz @ Aug 24 2022, 08:30 AM)
Use grabpay if you have grab lo.
Use shopeepay if you have shopee lo.
Use mae if you have maybank lo.
*
how are they safer than tng?
poweredbydiscuz
post Aug 24 2022, 08:41 AM

 
*******
Senior Member
3,834 posts

Joined: Oct 2011
QUOTE(akhito @ Aug 24 2022, 08:34 AM)
how are they safer than tng?
*
They have 2FA and fingerprint.
Zot
post Aug 24 2022, 08:44 AM

Look at all my stars!!
*******
Senior Member
7,938 posts

Joined: Mar 2014
QUOTE(shinchan^^ @ Aug 24 2022, 08:08 AM)
ya happened to me as well last saturday
someone deliberately trying to login my touch n go account

doh.gif
*
I'm not clear about this. Got other people cloning the phone using PC or what? Do you logout your e-wallet every time after use?
samftrmd
post Aug 24 2022, 08:48 AM

Interface 2037
******
Senior Member
1,774 posts

Joined: Nov 2007
From: Planet Earth



Change new phone number?
maxpudding
post Aug 24 2022, 08:49 AM

Getting Started
**
Junior Member
164 posts

Joined: Mar 2007
Ipay88 must be held accountable for the data breach
TSakhito
post Aug 24 2022, 08:49 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(poweredbydiscuz @ Aug 24 2022, 08:41 AM)
They have 2FA and fingerprint.
*
thanks for the info just get to grab and set up fingerprint.

This post has been edited by akhito: Aug 24 2022, 09:00 AM
karazure
post Aug 24 2022, 08:51 AM

Getting Started
**
Junior Member
70 posts

Joined: Aug 2014


QUOTE(akhito @ Aug 24 2022, 08:00 AM)
Today bangun tng e -wallet terus kena locked out and  kena login cuz max login attempt.
I am not even angry another day someone tried to hacked my e-wallet by our leaked info such as phone number.
Just need to email tng support haiz.

The question is how to prevent this type thing happened again.
What can we consumer do?
Then what should tng n go do?
One thing 1st maybe I should enable tng face verification. But i scared then ppl use photo me then can ald I lagi sad.
Why tng why no fingerprint doh.gif

another thing is my must bind phone number cannot use specific user-id to login ah haiz
update just called tng careline and got it unlocked
Steps
*
stop visit ilegal porn la dei
Steponlego
post Aug 24 2022, 08:54 AM

Enthusiast
*****
Junior Member
938 posts

Joined: Sep 2013
dang, everything is compromised these days.
shinchan^^
post Aug 24 2022, 08:55 AM

K66
*********
All Stars
21,256 posts

Joined: Jan 2003
From: Pekopon


QUOTE(akhito @ Aug 24 2022, 08:19 AM)
so how u go call tng careline got it unlocked?
*
the app says auto unlocked in 8 hours

after 8 hours change the pin
TSakhito
post Aug 24 2022, 08:55 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(Zot @ Aug 24 2022, 08:44 AM)
I'm not clear about this. Got other people cloning the phone using PC or what? Do you logout your e-wallet every time after use?
*
no, tng e wallet can login use phone number and pin .
so when ur phone number is leaked, they just need the pin. the thing if ur working, ur phone number is constantly used for a lot for thing. not to mentioned data breach which covered all malaysian.
so the scammer will try to login tng ewallet using ur phone number and pin he/she guessed. too may error will activate tng e wallet protection mechanism which then locked out every existing user and they can't login for certain hours. Not only scammer, if someone hated u got ur number they can do the same to u.

QUOTE(samftrmd @ Aug 24 2022, 08:48 AM)
Change new phone number?
*
leaked again I change again haha there must be other way man. phone number is exposed a lot if u working or actively engaging with client

This post has been edited by akhito: Aug 24 2022, 08:59 AM
TSakhito
post Aug 24 2022, 08:59 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(karazure @ Aug 24 2022, 08:51 AM)
stop visit ilegal porn la dei
*
Hi expert,can u story how ur phone number got leaked via illegal porn notworthy.gif

QUOTE(shinchan^^ @ Aug 24 2022, 08:55 AM)
the app says auto unlocked in 8 hours

after 8 hours change the pin
*
my one kena until 19 hours. I called the careline and got it unlocked. Now turned on face verification see how it go
karazure
post Aug 24 2022, 09:00 AM

Getting Started
**
Junior Member
70 posts

Joined: Aug 2014


QUOTE(akhito @ Aug 24 2022, 08:59 AM)
Hi expert,can u story how ur phone number got leaked via illegal porn notworthy.gif
my one kena until 19 hours. I called the careline and got it unlocked. Now turned on face verification see how it go
*
unker oni use pornhub, so far no issue.
pobox
post Aug 24 2022, 09:03 AM

On my way
****
Junior Member
551 posts

Joined: May 2013


TNG account is phone number?
TSakhito
post Aug 24 2022, 09:12 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(maxpudding @ Aug 24 2022, 08:49 AM)
Ipay88 must be held accountable for the data breach
*
IPAY 88 is one but this one largest whole malaysia birth years from 1940 to 2004. not one safe
Another JPN Database Appears Online With An Asking Price Of Almost RM44,000
QUOTE
Meanwhile, the seller also claimed that the 160GB dataset has 22.5 million rows in it with 20 attributes such as name, IC number, address, date of birth, gender, race, religion, mobile number, and Base54-based photo. To prove their point, they posted information belonging to Hamzah Zainudin in their listing which is quite daring, to say the least

and then u get respond like this
Defence Minister Not Worried About Personal Data Leak

QUOTE(pobox @ Aug 24 2022, 09:03 AM)
TNG account is phone number?
*
more correctly u register tng e wallet using ur phone number. ur acc is based on the phone number

This post has been edited by akhito: Aug 24 2022, 09:14 AM
Zot
post Aug 24 2022, 09:32 AM

Look at all my stars!!
*******
Senior Member
7,938 posts

Joined: Mar 2014
QUOTE(akhito @ Aug 24 2022, 08:55 AM)
no, tng e wallet can login use phone number and pin .
so when ur phone number is leaked, they just need the pin. the thing if ur working, ur phone number is constantly used for a lot for thing. not to mentioned data breach which covered all malaysian.
so the scammer will try to login tng ewallet using ur phone number and pin he/she guessed. too may error will activate tng e wallet protection mechanism which then locked out every existing user and they can't login for certain hours. Not only scammer, if someone hated u got ur number they can do the same to u.
leaked again I change again haha there must be other way man. phone number is exposed a lot if u working or actively engaging with client
*
I thought the wallet is tied to the phone number in a sense that if the payment originated from another phone it will not go through. I think during the transmission the phone number is also in data packets. If can pay from any terminal with phone as login ID and 6 digit pin number, then it is not secure at all
PJng
post Aug 24 2022, 11:14 AM

10k Club
********
All Stars
12,047 posts

Joined: Oct 2017


I hate that app keep spam notification about he ads, promotion which no way to turn off
pureawesomeness
post Aug 24 2022, 11:17 AM

Getting Started
**
Junior Member
191 posts

Joined: Oct 2021
Does that mean I can purposely fail login using my enemies phone number and lock out their accounts?
maxpudding
post Aug 24 2022, 11:19 AM

Getting Started
**
Junior Member
164 posts

Joined: Mar 2007
QUOTE(akhito @ Aug 24 2022, 09:12 AM)
IPAY 88 is one but this one largest whole malaysia birth years from 1940 to 2004. not one safe
Another JPN Database Appears Online With An Asking Price Of Almost RM44,000

and then u get respond like this
Defence Minister Not Worried About Personal Data Leak
more correctly u register tng e wallet using ur phone number. ur acc is based on the phone number
*
Lefu
TSakhito
post Aug 24 2022, 11:48 AM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(PJng @ Aug 24 2022, 11:14 AM)
I hate that app keep spam notification about he ads, promotion which no way to turn off
*
I know. i disable background usage somehow also can prompt ads. If disable all notiifcation takut pula
QUOTE(pureawesomeness @ Aug 24 2022, 11:17 AM)
Does that mean I can purposely fail login using my enemies phone number and lock out their accounts?
*
possible if they dun turn on face verification to login but dun be so bad la. U nice I nice tak payah ada enemy

This post has been edited by akhito: Aug 24 2022, 12:01 PM
PJng
post Aug 24 2022, 12:07 PM

10k Club
********
All Stars
12,047 posts

Joined: Oct 2017


QUOTE(akhito @ Aug 24 2022, 11:48 AM)
I know. i disable background usage somehow also can prompt ads. If disable all notiifcation takut pula

possible if they dun turn on face verification to login but dun be so bad la. U nice I nice tak payah ada enemy
*
Yes, i already set restrict backgroud still keep pop up
But disable notification bahaya
SUSKaya Butter Toast
post Aug 24 2022, 12:09 PM

Casual
***
Junior Member
325 posts

Joined: Feb 2022

Still got facial verification? I tot they just removed it 2 months ago.


TSakhito
post Aug 24 2022, 12:11 PM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(Kaya Butter Toast @ Aug 24 2022, 12:09 PM)
Still got facial verification? I tot they just removed it 2 months ago.
*
got ah ts baru enable and test login with it today. using latest app on google play.
Just not sure if face fail will fall back to PIN or not. If yes then still same bahaya

This post has been edited by akhito: Aug 24 2022, 12:16 PM
SUSKaya Butter Toast
post Aug 24 2022, 12:17 PM

Casual
***
Junior Member
325 posts

Joined: Feb 2022

QUOTE(akhito @ Aug 24 2022, 12:11 PM)
got ah ts baru enable and test login with it today. using latest app on google play
*
Okay, maybe they disabled zoloz facial recognition and using the one built in iOS

Are you using iOS?
United Rulez
post Aug 24 2022, 12:20 PM

On my way
****
Senior Member
668 posts

Joined: Sep 2006
I... I dont even logout. Every time open app it doesn't even prompt anything to verify....?

This post has been edited by United Rulez: Aug 24 2022, 12:21 PM
xpole
post Aug 24 2022, 12:23 PM

Rain on me baby
******
Senior Member
1,410 posts

Joined: Dec 2009
From: Everywhere



I only open touch n go app if I want to topup my touch n go card.

I don't even bother to use this e wallet.

Cash or credit card or Apple Pay.
TSakhito
post Aug 24 2022, 12:24 PM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(United Rulez @ Aug 24 2022, 12:20 PM)
I... I dont even logout.  Every time open app it doesn't even prompt anything to verify....?
*
I also dun logut mah. Just scammer try too hard, tng for security logout everyone
QUOTE(Kaya Butter Toast @ Aug 24 2022, 12:17 PM)
Okay, maybe they disabled zoloz facial recognition and using the one built in iOS

Are you using iOS?
*
no i use android
kamfoo
post Aug 24 2022, 01:42 PM

Enthusiast
*****
Junior Member
846 posts

Joined: Nov 2010


What phone use..?
Optizorb
post Sep 14 2022, 10:36 PM

Regular
******
Senior Member
1,260 posts

Joined: Sep 2021
jibai today i just kena this..

was using as normal.. then when i want to enter edit info page to see if there's IC info on the tng ewallet app.. then it kicked me out..

wanted to log in and got this shit.. say locked for 37 hours
wallance0113
post Oct 9 2022, 12:42 PM

New Member
*
Junior Member
12 posts

Joined: Jan 2022
QUOTE(Optizorb @ Sep 14 2022, 10:36 PM)
jibai today i just kena this..

was using as normal.. then when i want to enter edit info page to see if there's IC info on the tng ewallet app.. then it kicked me out..

wanted to log in and got this shit.. say locked for 37 hours
*
I kena today. I think the lockout preventing is bad cause anyone can use your number yo make your tng lock out
PJng
post Oct 9 2022, 12:45 PM

10k Club
********
All Stars
12,047 posts

Joined: Oct 2017


Look bad if someone try key your number, we will get locked out
Even friend and family, kolik know our phone number
azbro
post Oct 9 2022, 01:04 PM

Look at all my stars!!
*******
Senior Member
4,403 posts

Joined: Jan 2007
From: Johor Bahru


Cash still King, unless you get locked from using the ATM machine as well.
vhs1
post Jan 18 2023, 03:28 PM

Look at all my stars!!
*******
Senior Member
2,830 posts

Joined: Sep 2008
QUOTE(PJng @ Oct 9 2022, 12:45 PM)
Look bad if someone try key your number, we will get locked out
Even friend and family, kolik know our phone number
*
Knn... I kena log out
Have wait 24 hours?
Call carline but 30 min no one angkat
TSakhito
post Jan 18 2023, 03:33 PM

Enthusiast
*****
Junior Member
749 posts

Joined: Jul 2016


QUOTE(vhs1 @ Jan 18 2023, 03:28 PM)
Knn... I kena log out
Have wait 24 hours?
Call carline  but 30 min no one angkat
*
well if u choose fraud should be faster but if not just wait it out
there are ppl who wait it out also
jmas
post Jan 18 2023, 03:45 PM

I can edit title???
*****
Junior Member
830 posts

Joined: Mar 2010
QUOTE(akhito @ Aug 24 2022, 08:06 AM)
what e wallet u suggest got better feature. If google pay come I also want to cut ewallet ald
*
google pay is recently available, just limited card supported for now
maybank still considering
vhs1
post Jan 18 2023, 04:15 PM

Look at all my stars!!
*******
Senior Member
2,830 posts

Joined: Sep 2008
QUOTE(akhito @ Jan 18 2023, 03:33 PM)
well if u choose fraud should be faster but if not just wait it out
there are ppl who wait it out also
*
I chose fraud also same.

 

Change to:
| Lo-Fi Version
0.0268sec    0.39    5 queries    GZIP Disabled
Time is now: 14th December 2025 - 07:44 PM