5 ms·
In some countries, like at least Norway, you sign these loans with what is called BankID - it is essentially used for all kinds of e-signing, it's probably the
by TrackerFF 4y ago
In some countries, like at least Norway, you sign these loans with what is called BankID - it is essentially used for all kinds of e-signing, it's probably the most used 2FA tool here. Probably other Scandinavian countries too.
But back to my point - if you for whatever reason get compromised to such a degree that other people can sign off things with your BankID, you're basically completely fucked. At least for probably 99.99% of the cases.
This is because the law recognizes that sign-off as if you did it. And if some other did it, you've breached the ToS - which more or less states that you, and you only, can know the password, and it is your responsibility that said password is hidden / unavailable to others. Your signature and confirmation, your loan.
The most common victims of these cases are spouses and close family members.
But again, these things do differ from country to country.
- eckesicle 4y agoI'm pretty sure you're mistaken. Consumers in Scandinavia are not responsible when scammed unless they've acted with grave misjudgment or ill intent. There was even a case in the high court to cement this right in Sweden this summer specifically for BankID. https://www.konsumentverket.se/aktuellt/ko-har-ordet/2022/ko-har-ordet-starkt-konsumentskydd-for-konsumenter-som-luras-pa-pengar-via-bankbedragerier/ https://www.konsumentverket.se/aktuellt/ko-har-ordet/2022/ko...
- DownGoat 4y agoThe supreme court of Norway just denied an appeal from a bank on a similar case in Norway. The person had been phished over a telephone call, and gave away passwords and 2fa token to what they believed was a bank employee. https://www.domstol.no/globalassets/upload/hret/avgjorelser/2022/september-2022/hr-2022-1752-a.pdf https://www.domstol.no/globalassets/upload/hret/avgjorelser/...
- utucuro 4y agoIn Turkey, 2FA tokens for banks generated by app or sent by SMS all contain a message about never giving the token or your password to a bank employee...
- ouid 4y agoso?
- mmerlin 4y agoso if Norwegian banks did the same as Turkish banks, the customer is now fully liable for doing the exact opposite of what they've been explicitly told never to do by the warning clause accompanying each 2FA message
- utucuro 4y agoNot how the law works here - you're always liable in either case, but it is hoped that the message might prevent some cases of fraud. It's difficult to secure people against social engineering...
- downrightmike 4y agoyeah, America is about twenty years behind you guys in banking tech. But that is for a reason.