I recently made use of GTB mobile transfer using the code #737#2 to transfer money to a First Bank account and the only security measure they had in place was to ask me to input the last 4-digits on my ATM card.

After a successful transaction, I wondered to myself if this platform is truly the "smartest" as they claim. Yea, it may be smart, but is it secure? What if I lose my bag containing my wallet (with my ATM cards) and mobile phones? Wouldn't the hoodlum be able to transfer money easily from my account to any account of his choice with no hassle before I can block the ATM?

This bothered me and I thought to share it here. I expect GTB to make this more secure by requesting for pin before money can be transferred.

What do you guys think?

Too bad modern technology has it's own flaws... I thought they requested for you PIN to effect any transaction.

if i were you, I would remove the app from my phone and ensure the bank removes such facility from my account

It is not an app. I never subscribed to mobile banking with GTB. All you need to do is dial *737*1* (acct and amt) for GTB accounts and *737*2* for other banks with the line you used to open your account. Just like buying recharge direct from your account using your mobile phone.
I have tried to google it to know exactly what this service is called.

Brandnew2:
Too bad modern technology has it's own flaws... I thought they requested for you PIN to effect any transaction.

I am sure they do on other portal but not on this one.

Tgirl4real:
It is not an app Pick. I never subscribed to mobile banking with GTB. All you need to do is dial *737*1* (acct and amt) for GTB accounts and *737*2* for other banks with the line you used to open your account. Just like buying recharge direct from your account using your mobile phone.
I have tried to google it to know exactly what this service is called.

in that case, this is a massive security hole

pickabeau1:


in that case, this is a massive security hole

http://www.gtbank.com/media-centre/press-releases/14-media/press-releases/606-gtbank-launches-737-transfers-the-smartest-way-to-transfer-funds-in-nigeria

Have been using their One-Click top-up service for a while now.

Well, a few positives that I noticed is that it times out after about 30 sec (not so sure) if you don't input the necessary info.

Secondly, it has maximum transfer limit of 20k per day.

Tgirl4real:


http://www.gtbank.com/media-centre/press-releases/14-media/press-releases/606-gtbank-launches-737-transfers-the-smartest-way-to-transfer-funds-in-nigeria

Have been using their One-Click top-up service for a while now.

I don't use my phone for any such

I prefer the dual authentication of password and token provided by the intenet banking platform
The good news about your 737 code is that your liability is limited to 20k daily. that way u can act if u r compromised

The *737* Transfer service is only available to GTBank customers via their mobile phone numbers registered with the Bank and has minimum transfer limit of N1,000 and a daily transfer limit of N20,000

There is no problem with new app.even if you lose your phone and the atm card, the bank can still track where your money is transferred to.Therefore, do not panic.

pickabeau1:


I don't use my phone for any such

I prefer the dual authentication of password and token provided by the intenet banking platform
The good news about your 737 code is that your liability is limited to 20k daily. that way u can act if u r compromised

Yea, and still lose 20k. lol

wonderfulman:
There is no problem with new app.even if you lose your phone and the atm card, the bank can still track where your money is transferred to.Therefore, do not panic.

Ha! Track? Which Nigerian Police will pursue the criminal for you. You will use 50k to chase 20k.

Tgirl4real:


Yea, and still lose 20k. lol

20k is 20 litres of fuel o

pickabeau1:


20k is 20 litres of fuel o

Imagine!

May God help us in this country.

Tgirl4real:


I am sure they do on other portal but not on this one.

I use the Diamond yello account and it's quiet safe cuz it requests for a PIN and easy too. Daily limit is about 20k or so and 3k per transaction..

More of a pocket money kind of account.

Brandnew2:

I use the Diamond yello account and it's quiet safe cuz it requests for a PIN and easy too. Daily limit is about 20k or so and 3k per transaction..

More of a pocket money kind of account.

3K per transaction ke?

I forgot to mention that they charged me N110 on my 10k transfer. Wey too high. IMOm

As long as it does not require your pin, then it is Not Secure!! Gtb should do something quickly about this!

Tgirl4real:


3K per transaction ke?

I forgot to mention that they charged me N110 on my 10k transfer. Wey too high. IMOm

Diamond charges 100 on the 3k.

suyamasta:
As long as it does not require your pin, then it is Not Secure!! Gtb should do something quickly about this!

True!

its not secured....last digit of mastercard is NOT security

crap

I thought the same.

They should have asked us to use our atm pin

GTBank has seriously dropped security wise, if not, how will a bank give Telcos direct access to our bank accounts in the shade of *737*whatever#
why not add token generation to the mix or did we not pay N3000 naira for that very token security.

first off, glo has been using this golden opportunity to debit user's bank account without you making the request.
or when you make 2 requests, they bill you then deliver credit once.

If they had added the token generation to it, Glo would not have been able to debit our account unjustly as glo will need a valid token to be able to complete transactions.

I just pity those old pensioners who's primary source of livelihood will be equally shared by their housemaids via *737* introduced by some dull GTBAnk's business development managers

now they are raising the bar and giving your account access to everyone with access to your phone and ATM
what a bank

GTB una fall my hand

That's a risk the bank has decided to take. I am very sure there's a ceiling of how much you can transact in a day under this perceived unsecured arrangement. Perhaps N5k per day or something. Please ask.

I found a way round the security issue. I defaced the last 4 digits on my ATM card. The number is known only to me and serves as my security code. Yes the card still works on ATMs

I thot of same too when I saw d advert... Someone who has access to your atm card and mobile fone can transfer money without you knowing... If your purse containing your mobile fone and atm is stolen on Saturday, you cn lose upto 60k... or even more because the person will both recharge n transfer... I don't see the smartness there...
Pin request would be a lot better.

Brandnew2:

I use the Diamond yello account and it's quiet safe cuz it requests for a PIN and easy too. Daily limit is about 20k or so and 3k per transaction..

More of a pocket money kind of account.

Wema Bank Mobile banking is seamless and maintains 2 factor authentication (password and Token) it is not tied to a particular phone , easy to use and gives you exactly the same features as their internet banking. I was impressed using it.

Tgirl4real:
It is not an app Pick. I never subscribed to mobile banking with GTB. All you need to do is dial *737*1* (acct and amt) for GTB accounts and *737*2* for other banks with the line you used to open your account. Just like buying recharge direct from your account using your mobile phone.
I have tried to google it to know exactly what this service is called.

Its called a USSD transfer

wonderfulman:
There is no problem with new app.even if you lose your phone and the atm card, the bank can still track where your money is transferred to.Therefore, do not panic.

Track? After the beneficiary has emptied his account of the manna from heaven?

This is surely a massive security risk. I don't think the control is adequate.

4 last digits isn't a proper authetication means, and as such, there's no control.

I think GTB was too quick to go live on this procedure without doing proper risk assessments to determine operational risks inherent in this new process. One should have expected such issues are discovered in their controlled-pilot phase and not during implementation.


I expect the Bank to include a valid authentication measure, either by PIN (which could be different from ATM PIN) or a timed OTP.

It takes little effort for a fraudster to hack and transfer funds from a GTB account.

I think it is against CBN's regulation for an unsolicited service such as this, if one doesn't subscribe to it. This can lead to reputation damage and regulatory sanction.

In this case wot i tink they should make use of is d 4 digit ATM PIN code. Though i rilly love this idea i don't care about the charges coz it saves more time

Tgirl4real:
I recently made use of GTB mobile transfer using the code #737#2 to transfer money to a First Bank account and the only security measure they had in place was to ask me to input the last 4-digits on my ATM card.

After a successful transaction, I wondered to myself if this platform is truly the "smartest" as they claim. Yea, it may be smart, but is it secure? What if I lose my bag containing my wallet (with my ATM cards) and mobile phones? Wouldn't the hoodlum be able to transfer money easily from my account to any account of his choice with no hassle before I can block the ATM?

This bothered me and I thought to share it here. I expect GTB to make this more secure by requesting for pin before money can be transferred. That

What do you guys think?

the platform is very secure and safe #1 to initiate any transaction on your account you need to register your phone number with GTBank meaning that unregistered GSM number will not be able to transact
#2 all transaction made on the platform have reference that is the beauty of BVN if hoodlums hijacks your phone nd ATM any account that receives money will be track with BVN let me stop here