Customer services asking for sensitive info to be emailed

Customer services has emailed my wife and asked for passport, bank account, selfie with ID to be emailed to them. Really…? Can’t think of a more insecure method of providing sensitive personal information. When we queried this, we were sent a link to a “we take your security seriously” article.

I know lots of organisation pay lip service to their privacy policies but submitting this sort of information over email isn’t acceptable from a financial institution.

Only after prodding was a web link contact form sent…

3 Likes

If they’d asked for it to be shared via facebook that would have been more insecure. Nothing was submitted by email. Nobody died.

1 Like

Hi! If you do not wish to send your documents to us via email, you can provide them by submitting the contact form on our website

This is due to taxes

I wholeheartedly agree! Even the format of the request is all wrong. I posted something along these very lines earlier today, you would expect to see better from a regulated financial institution. to reply to a generic info@… email or even to submit via a generic web form is a pretty poor way to transfer sensitive PII. How can anyone be sure on how this information is stored, or who would have access to this. Surely it cannot be that difficult to develop a secure messaging feature from within the account. At least you would have some assurances it would be dealt with within your account wrapper, rather than the current fire & forget method!

1 Like