Author Topic: Chase business bank account security flaw?  (Read 721 times)

Offline ShimshonK

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Nov 2018
  • Posts: 261
  • Total likes: 54
  • DansDeals.com Hat Tips 2
    • View Profile
Chase business bank account security flaw?
« on: January 05, 2021, 07:39:02 PM »
I called Chase business phone line today regarding my business bank account. All I had to enter in the automated menu was the account number and EIN. That's enough for them to tell you the balance, transaction history, etc. When I talked to an actual person, they also asked for my name and business name. None of these questions keep your account very secure. Account numbers are available to anyone that has ever received a check, and EIN's can often be publicly accessible too. Obviously name and business name are real easy.

I thought that they must only be allowing it because they recognize the number I'm calling from, but nope, tried from a different number and got through the exact same way.

Don't know if more secure data would be required for actions like withdraw, etc., but in any case, it seems like way too much access offered to anyone that so desires.

Offline pcgeek

  • Dansdeals Platinum Elite + Lifetime Gold Elite
  • ******
  • Join Date: Dec 2013
  • Posts: 901
  • Total likes: 27
  • DansDeals.com Hat Tips 6
  • Gender: Male
    • View Profile
  • Location: פֹּה
Re: Chase business bank account security flaw?
« Reply #1 on: January 05, 2021, 07:42:01 PM »
I called Chase business phone line today regarding my business bank account. All I had to enter in the automated menu was the account number and EIN. That's enough for them to tell you the balance, transaction history, etc. When I talked to an actual person, they also asked for my name and business name. None of these questions keep your account very secure. Account numbers are available to anyone that has ever received a check, and EIN's can often be publicly accessible too. Obviously name and business name are real easy.

I thought that they must only be allowing it because they recognize the number I'm calling from, but nope, tried from a different number and got through the exact same way.

Don't know if more secure data would be required for actions like withdraw, etc., but in any case, it seems like way too much access offered to anyone that so desires.
Maybe they're using this: https://www.chase.com/personal/voice-biometrics ?
You can test by having someone who never called about your account call using a different number so you know that they're not using your number or voice print. Let us know

Offline ShimshonK

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Nov 2018
  • Posts: 261
  • Total likes: 54
  • DansDeals.com Hat Tips 2
    • View Profile
Re: Chase business bank account security flaw?
« Reply #2 on: January 05, 2021, 07:54:45 PM »
Maybe they're using this: https://www.chase.com/personal/voice-biometrics ?
You can test by having someone who never called about your account call using a different number so you know that they're not using your number or voice print. Let us know
When I brought up my security concern to them, they did mention this. However, the balance, transaction history, etc., is all available on the automated system without saying a word.

Online justmeha

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Feb 2019
  • Posts: 1055
  • Total likes: 104
  • DansDeals.com Hat Tips 7
    • View Profile
Re: Chase business bank account security flaw?
« Reply #3 on: January 05, 2021, 11:53:39 PM »
When I brought up my security concern to them, they did mention this. However, the balance, transaction history, etc., is all available on the automated system without saying a word.
standard DDF advice seems to be... send a email to the CEO. :)

Offline lcm

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Jul 2019
  • Posts: 461
  • Total likes: 123
  • DansDeals.com Hat Tips 5
    • View Profile
  • Location: 5th paragraph of https://www.dansdeals.com/sms/
Re: Chase business bank account security flaw?
« Reply #4 on: January 05, 2021, 11:59:17 PM »
Ein is a funny thing.
On the one hand, it acts like a ssn, but on the other hand it is basically publicly available.
Go figure

Offline ShimshonK

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Nov 2018
  • Posts: 261
  • Total likes: 54
  • DansDeals.com Hat Tips 2
    • View Profile
Re: Chase business bank account security flaw?
« Reply #5 on: January 06, 2021, 01:07:22 AM »
standard DDF advice seems to be... send a email to the CEO. :)
I don't think Mr. Dimon will read my email, but maybe @Dan (and @jj1000 ) have connections :)

Online justmeha

  • Dansdeals Lifetime Platinum Elite
  • *******
  • Join Date: Feb 2019
  • Posts: 1055
  • Total likes: 104
  • DansDeals.com Hat Tips 7
    • View Profile
Re: Chase business bank account security flaw?
« Reply #6 on: January 06, 2021, 03:13:22 AM »
I don't think Mr. Dimon will read my email, but maybe @Dan (and @jj1000 ) have connections :)
correct, but someone in his office (who likely had more "connections" then your average CSR) will.

Offline ShimshonK

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Nov 2018
  • Posts: 261
  • Total likes: 54
  • DansDeals.com Hat Tips 2
    • View Profile
Re: Chase business bank account security flaw?
« Reply #7 on: January 06, 2021, 04:23:04 AM »
correct, but someone in his office (who likely had more "connections" then your average CSR) will.
Fair enough. If I can actually get my email viewed, I might as well try.

Online AsherO

  • Global Moderator
  • Dansdeals Lifetime 20K Presidential Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 22914
  • Total likes: 1139
  • DansDeals.com Hat Tips 74
    • View Profile
  • Location: NYC
Re: Chase business bank account security flaw?
« Reply #8 on: January 06, 2021, 08:05:37 AM »
standard DDF advice seems to be... send a email to the CEO. :)

Funny you say that, worked for me yesterday with a different F500, sent an email to the CEO and had a callback from someone in an executive response team within hours. Got an incident number, and the guyd direct extension with clear expectations of what to expect and when.
My barber needs your support, hes a real sweetheart.

https://www.gofundme.com/f/save-our-barber-shop

Offline S209

  • Dansdeals Presidential Platinum Elite
  • ********
  • Join Date: Jun 2016
  • Posts: 4915
  • Total likes: 1398
  • DansDeals.com Hat Tips 0
  • Gender: Male
    • View Profile
    • Gowns By Shevy
  • Location: Lakewood, NJ
  • Programs: Marriott Gold, SPG Gold, Ritz Carlton Gold, *G, Hyatt Explorist, Hertz PC, National EE, Rock Royalty Wild Card, Wyndham Diamond, MLife Gold, Total Rewards Diamond, Hilton Diamond, Uber VIP, IHG Platinum Elite, DDF Prez Platinum Elite, AmEx Platinum
Re: Chase business bank account security flaw?
« Reply #9 on: January 06, 2021, 09:59:48 AM »
Funny you say that, worked for me yesterday with a different F500, sent an email to the CEO and had a callback from someone in an executive response team within hours. Got an incident number, and the guyd direct extension with clear expectations of what to expect and when.
What sort of issue? Something they messed up on, or a general inquiry/request?
Gowns By Shevy
732-806-1136
info@gownsbyshevy.com

Offline Shmulie

  • Dansdeals Platinum Elite + Lifetime Gold Elite
  • ******
  • Join Date: Dec 2013
  • Posts: 986
  • Total likes: 45
  • DansDeals.com Hat Tips 4
  • Gender: Male
    • View Profile
  • Location: Brooklyn
Re: Chase business bank account security flaw?
« Reply #10 on: January 06, 2021, 10:14:19 AM »
Ein is a funny thing.
On the one hand, it acts like a ssn, but on the other hand it is basically publicly available.
Go figure

Where can you lookup an EIN? I've actually tried in the past

Online AsherO

  • Global Moderator
  • Dansdeals Lifetime 20K Presidential Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 22914
  • Total likes: 1139
  • DansDeals.com Hat Tips 74
    • View Profile
  • Location: NYC
Re: Chase business bank account security flaw?
« Reply #11 on: January 06, 2021, 10:53:37 AM »
What sort of issue? Something they messed up on, or a general inquiry/request?

Fraud committed on my account, likely identity theft. Couldn't get answers elsewhere so I self-escalated to executive services. Email was all facts and request for more information; no complaints, threats, or requests for compensation.
My barber needs your support, hes a real sweetheart.

https://www.gofundme.com/f/save-our-barber-shop

Offline ShimshonK

  • Dansdeals Platinum Elite
  • ****
  • Join Date: Nov 2018
  • Posts: 261
  • Total likes: 54
  • DansDeals.com Hat Tips 2
    • View Profile
Re: Chase business bank account security flaw?
« Reply #12 on: January 09, 2021, 07:33:03 PM »
Well, got a response (voicemail) from someone in the executive office.

Online AsherO

  • Global Moderator
  • Dansdeals Lifetime 20K Presidential Platinum Elite
  • **********
  • Join Date: May 2008
  • Posts: 22914
  • Total likes: 1139
  • DansDeals.com Hat Tips 74
    • View Profile
  • Location: NYC
Re: Chase business bank account security flaw?
« Reply #13 on: January 14, 2021, 08:07:40 PM »
Well, got a response (voicemail) from someone in the executive office.

Saying?
My barber needs your support, hes a real sweetheart.

https://www.gofundme.com/f/save-our-barber-shop