The reason why all previous phising e-mails failed is that they do not contain proper language. It would be better the bank asks about your last transaction, the year you opened your account or a combination of all. Just say you’re traveling and don’t know the accountnumber. Maybe even without an account number (only name/birthdate) it will be possible to block someone’s card (test.anyone. Just say you don’t know the cardnumber because the card is stolen/lost. They will not ask for a Sofinumber or Tin-code because it must be possible to block your card (when it’s stolen) without having this data in front of you.

The only ‘secret question’ thing they can ask is address and birthdate. When you know someone’s name and account number, you can just block his/her bank card. The ABN-AMRO Bank is quite vulnerable for easy ‘social hacking’. Blocking the IP-address would block all employees of Shell (i.e. Shell uses NAT and is present with just 1 IP-address on the internet.

Normally you would say: Just block the IP-address which does the request, but that’s not a really a good option.įor example: Employees of Shell or a large school are all internet banking during their lunch time. This reduces the number of valid account number dramatically.īuy some put options first and prepare for a little stock dip ) But read on and imagine all things mentioned here happen at the same day. Info: Officially a bank account number is 10 numbers long but you’ve probably seen them with just 9 numbers so far, the first (10th number) is a leading zero.īank account numbers apply to a special algorithm called the ‘ 11-proef‘. It’s even more easy because ABN-AMRO uses fixed ranges of account numbers (see this thready for bank account ranges, officially it’s not a given range but let’s say they use the whole 4x.xx.xx.xxx range). The bank’s Service Center (0900-0024) will be probably be overloaded, this is the same phone number as being used for payments, stock advice/buying/selling, lost cards, etc. Wrong!, imagine building a script, blocking all account numbers of all internet banking customers. You might think: “Nothing wrong, it’s just one account”. meanwhile he/she cannot enjoy internet banking or online stock trading. The owner of the account needs to call the Service Center (or submit a letter/fax) and request to unlock his/her account. Going to and typing an existing bank account number with any card number, submit this 5 times and the account will be locked. It’s made too simple to lock an account for internet banking. This article including it’s examples and example code (which will be posted later) are for educational purposes only. Today I took some time to write a little about ABN-AMRO’s security weaknesses.

Abnamro Nl E Dentifier2 Inloggen