Feeds

BoI to refund phishing victims

Compensation u-turn

Beginner's guide to SSL certificates

Bank of Ireland has agreed to compensate victims of a recent phishing scam, backtracking from its earlier position.

The bank had initially refused to refund victims, who lost about €160,000 to scammers after receiving the fake emails. However, reports in the Irish Independent on Tuesday indicate that the bank has since had a change of heart.

For its part Bank of Ireland has refused to comment on the cases, releasing a general statement on phishing instead.

"Bank of Ireland is aware that there are fraudulent emails being circulated purporting to be from Bank of Ireland 365 online," it said. "Bank of Ireland can not discuss individual cases where a customer has received and responded to such an email."

It seems the banks just can't win. The nine customers who were conned out of the cash had threatened to sue the bank for compensation if their money wasn't returned. But now experts fear that there could be a surge in phishing cases, encouraged by the compensation paid out by Bank of Ireland.

Conor Flynn, technical director of Rits, said the move was essentially a goodwill gesture by the bank. However, he warned that people may feel less threatened by the scams in future as a result.

"It certainly will not help things," he said, speaking with ENN. "People will feel they have a buffer of security."

However, he also pointed out that banks may implement more technologies that will push the responsibility back on to the customers to safeguard their details and prove that they didn't reveal their confidential details to a third party.

"It's not a victimless crime," Flynn pointed out. "Banks still have to record record-profits. If they lose cash through compensating phishing victims, bank customers will pay."

However, despite the high profile coverage, phishing is not a unique problem to Bank of Ireland, something the bank is keen to point out.

"This problem is not unique to Bank of Ireland and similar fraudulent emails purporting to come from other banks, credit card companies, e-retailers etc are also in circulation," Bank of Ireland said in its statement.

Other financial institutions have warned customers of other phishing scams, including AIB and internet bank RaboDirect. eBay is also a popular target for scammers.

Copyright © 2006, ENN

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
SHELLSHOCKED: Fortune 1000 outfits Bash out batches of patches
CloudPassage points to 'pervasive' threat of Bash bug
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.