CCB Asia's abuse of HKID numbers
26 November 2013
Hong Kong Identity Numbers (HKIDs) are identifiers, not authenticators. Your ID number is not a secret and is not a password. Below is a classic example of a bank asking someone for their HKID number to verify their identity - like asking her for her name, or her birthday (often to be found on social media). Fortunately, the user has already logged in with a secure password, and the transfer is only between the user's accounts, not a transfer to an external bank, so the verification is really unnecessary. But China Construction Bank (Asia) Corp Ltd should drop this practice.
We'll post more examples as we find them.
© Webb-site.com, 2013
Organisations in this story
Topics in this story
Sign up for our free newsletter
Recommend Webb-site to a friend
Copyright & disclaimer, Privacy policy