I think that there are some companies out there that don’t quite understand the reason for security. It’s no wonder identity can be stolen so easily. I had a few incidents where I need to change some information on my account and some of their verification process might be slightly flawed. They aren’t aware of the wealth of information that is available, all thanks to the internet.
Last week, I made plans to some the mailing address of Jenn’s cell phone bill and change my PIN with HSBC. I couldn’t believe how easy it was to have those information changed. I questioned the employee that I was speaking with but they didn’t have an answer that I found acceptable.
First I called Rogers to have the billing address change to my current house. Jenn’s mom was using her cell phone here because she didn’t have to pay long distance charges when calling Jenn’s brother. When this month’s invoice came in, Jenn’s brother’s cell phone number was designated as being in Toronto so that stopped the free cell phone to cell phone calls.
Jenn’s mom didn’t want to use the phone anymore if she has to pay so they gave the SIM card back to me and asked that I change the billing address to the house. I called up Rogers and told them who I was and that I’m an authorized user on the account. The representative informed me that I had authorization to change the billing address but in order to do that I need to confirm the current address. I know the address of Jenn’s mom but I didn’t know their postal code. I wasn’t sure why they needed that much since I confirmed the street address already.
The representative told me that I cannot go any further unless I provide her with the postal code. I told her to wait a few seconds while I search for that information. I launched Firefox and surfed on over to Canada Post’s website and did a search for the postal code. I typed in the necessary information and it provided me with the postal code, which I read out to the representative.
As for the PIN to my HSBC debit card, two pieces of photo ID was not good enough. I had to provide them with my SIN card and my birth certificate. I why my driver’s license and health card wasn’t accepted and the clerk told me that I need to use my SIN and my birth certificate because those were the documents that I used to open the account. I pointed out that my driver’s license should be sufficient since I need my SIN and my birth certificate to obtain my driver’s license. Unfortunately, she wouldn’t accept any of the ID that I presented her with.
I went quiet for a while and she asked if I knew my Social Insurance Number. I told her that I did and she asked me to write it down. She wasn’t will to accept my driver’s license but she was willing to accept a piece of paper with some numbers on it. Once she verified that the SIN matched the record on the computer she was able to accept my driver’s license.
That process doesn’t sound right. There are a lot of information available on anyone as long as you know their name. After you get their name, a simple Google search will return just about any basic information about that person. The simple address change with Roger isn’t that big of a deal but the PIN for my debit card is. If someone was able to change the PIN that easily, they have access the $3.25 that I have in the bank. If someone takes that money, I’d be pissed!