Brian Burkill

UK

Consultant

Where would the responsibility lie for this, with the user or with the bank.

One on line Banker (Halifax) declare that if anyone is a victim of fraud, they will be compensated in full.

They do warn against opening any emails which are designed to redirect you to a site. But what do you do when he malicious email gives no such details. You have acted totally innocently.

I think that banks should bear the responsibility for any phishing. That way, any fight carries more clout, with their combined weight against the scammers, as opposed to the individual.

Until I get a declaration of safety on the on line banking web sites, I am not even going to enter my user name, let alone my password.

It may be an idea to subtly change the content of the online banking front pages daily, with a private letter sent to each customer to specifically look for the change. If it is not present, (say a piece of text or something) then assume the worst.

This would at least harasss the phishers when they try to emulate the web sites, as they would have to look and change them daily, or even hourly.