Feeds

NatWest 'spam' email cockup got me slapped with late payment fee, says angry Reg reader

SPF update fail junks critical bank communications

Secure remote control for conventional and virtual desktops

NatWest customers should watch out for lost credit card statements as an IT cockup has been blamed for one Register reader getting smacked with a late payment fee.

A reader told The Reg how he was fined by NatWest for missing the regular payment on his credit card.

The reader, who wishes to remain anonymous, receives his NatWest statements via email. January’s statement was dispatched as usual but wasn’t received, so our reader missed his payment.

Instead, the statement was caught in the spam filters of his email service provider, Fluent.

Both Fluent and our reader blamed the errant email on fiddling within NatWest’s email servers that resulted in the email being logged as spam.

Specifically, they claim NatWest’s techies had changed the IP address of the mail servers that dispatch credit card statements and failed to also update their domain servers’ Sender Policy Framework (SPF) records.

SPF is a policy framework used to protect against spam by detecting email spoofing.

A domain will declare attributes that describe their emails and declare them as an SPF record that is published to the domain name system. An SPF client program queries the SPF record to confirm the email has come from an authorised source. Google, Microsoft and other major email providers all recognise SPF.

Fluent's founding director Jonathan Gilpin, also a Reg reader, said his records indicate the IP addresses on NatWest servers changed on December 15, from 194.150.182.32 to 194.150.182.18. He discovered the change on January 2 and contacted NatWest’s customer support to warn them they hadn't updated their SPF records.

Gilpin said he was transferred to a DNS team who logged the problem.

On January 10 he received an email response from NatWest’s GIS Technology Services saying they could not act on the DNS problem because he’s an outsider. According to their email, seen by The Reg, the problem could only be fixed if he contacted the business and they would then escalate it. “Once this goes through the channels they have suggested we will be able to resolve this,” he was told.

The Reg contacted NatWest to find out the cause of the glitch, why it had taken so long to fix and whether it would take any steps to overhaul its procedures.

NatWest, though, was unable to respond beyond saying it does not use SPF.

Our reader has now urged fellow NatWest customers to check they received their credit card reminder emails for December and early January.

“If they didn't receive the reminder emails during this time, they should double-check that they are receiving them now,” he said.

“The fee itself was a comparatively minor annoyance, but irritating nonetheless as I normally pay off my credit card shortly after receiving the reminder from the online banking system. The real annoyance was NatWest's refusal to deal with the problem.” ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Google+ goes TITSUP. But WHO knew? How long? Anyone ... Hello ...
Wobbly Gmail, Contacts, Calendar on the other hand ...
Preview redux: Microsoft ships new Windows 10 build with 7,000 changes
Latest bleeding-edge bits borrow Action Center from Windows Phone
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
Google opens Inbox – email for people too thick to handle email
Print this article out and give it to someone tech-y if you get stuck
UNIX greybeards threaten Debian fork over systemd plan
'Veteran Unix Admins' fear desktop emphasis is betraying open source
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Redmond top man Satya Nadella: 'Microsoft LOVES Linux'
Open-source 'love' fairly runneth over at cloud event
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.