Dodgy transactions on Qantas Frequent Flyer account

Status
Not open for further replies.
From an earlier threat perhaps QANTAS should stop printing FF #'s on boarding tickets. I must admit that when taking my seat and with boarding pass in hand I often stow the pass in the seat pocket and dont always pick it up. I will be more concious of doing this in the future.

I once sat next to a guy whose hobby seemed to be collecting boarding passes. He was quite pleased when he found someone elses boarding pass in the seat pocket. He even asked for mine, but i declined his offer.
 
From an earlier threat perhaps QANTAS should stop printing FF #'s on boarding tickets. I must admit that when taking my seat and with boarding pass in hand I often stow the pass in the seat pocket and dont always pick it up. I will be more concious of doing this in the future.
I never really understood why people put boarding passes, phones, wallets etc in the seat pocket.

Boarding pass stays in my pocket and I do not feel at all uncomforable with phone and wallet on my person at all times.
 
The Frequent Flyer Concierge team takes the hard work out of finding reward seat availability. Using their expert knowledge and specialised tools, they'll help you book a great trip that maximises the value for your points.

AFF Supporters can remove this and all advertisements

Boarding pass stays in my pocket and I do not feel at all uncomforable with phone and wallet on my person at all times.

I clearly have too many cards in my wallet, because I take it out of my pocket whenever I can.
 
Sponsored Post

Struggling to use your Frequent Flyer Points?

Frequent Flyer Concierge takes the hard work out of finding award availability and redeeming your frequent flyer or credit card points for flights.

Using their expert knowledge and specialised tools, the Frequent Flyer Concierge team at Frequent Flyer Concierge will help you book a great trip that maximises the value for your points.

The most irratating about on line secuirty, or security in general is the difference in passwords, some are alphanumeric, some 4 digits, others 6 etc. Trying to remember which password for which agency is painful, especially if only use the system once a year or so. I also have to have passwords for work for computer access, which is more passwords. Work I have written down as they change but others I try to keep different, so if obtained, any person can only access the one site or agency.

On the other hand today I had to call a phone retailer for only second time since first call to join approx 12 months ago. They asked for password, which I knew/guessed half, they then asked other questons to verify my id, but the questions in hindsight were pretty straight forward. I didn't neeed to change any critical information, but all went smoothly, but it would have been a problem if they insisted i know the entire password correctly, but worrying that with basic informaton known, accounts could be accessed.

Having passwords remembered in a computer is problematic, same as recorded in mobile phone, or even written down, some criminals are not stupid.

On a side note, the new paypass on mastercard is prime example, no pin or anything, the criminals will quickly know the limits each retailer has before pins required and as soon as wallet stolen, they will shop til card stopped. Where a baseball cap etc, very difficult to id from cctv, which is always high up in stores.
 
I clearly have too many cards in my wallet, because I take it out of my pocket whenever I can.

Yeah, my wallet is a bit like "George Costanza's" need to get that baby out of my pocket whenever I can.
 
They did tell me that in July this year someone made a password enquiry and were provided with my pin, presumably because they were able to quote my DOB and QFF ID number. It wasn't me!

Would be interested to know how the PIN is provided, it's not available to staff, however this points to the fraudsters having access to your email account at some stage.
 
I clearly have too many cards in my wallet, because I take it out of my pocket whenever I can.
I have many cards as well but I do not feel comfortable if I cannot feel my wallet on my person.
 
As I posted on another thread my laptop is doing a JohnK at the moment and is stopping me accessing various websites-eg cant access SMH but the Age is OK.Hotmail is out,yahoo comes and goes but Gmail not affected.
So on Monday booked an AA award.Changed my email address to Gmail just in case.got an email from AA to my Yahoo account saying someone had changed email address.
My E-ticket came through late Wednesday and this morning there was an email saying someone had used my miles to get an award-if it was you dont have to do anything.
This to me would get over this problem by alerting the OP that the email address had been changed.
 
The solution is simple, stay anonymous online. Download TOR and you will have no problems. Google TOR project
Sure the speed is a little slower but at least you'll be alot safer. Don't forget to act as a relay every so often to help out the network.

Taken from their website:

Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.

The problem here is just as likely someone hopping on a computer that hasn't been logged out...or watching over someone's shoulder. TOR won't help there.
 
The solution is simple, stay anonymous online. Download TOR and you will have no problems. Google TOR project
Sure the speed is a little slower but at least you'll be alot safer. Don't forget to act as a relay every so often to help out the network.

Taken from their website:

Tor is free software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.

And how exactly will TOR prevent such things? As has been mentioned, QF received a phone call from someone pretending to be someone else, no amount of internet security will save you if the person at the other end can be duped into handing over details. This comment reminds me a little of this - xkcd: Security

Some of the best things you can do to prevent such things from happening is to vary the passwords which you use, how many people use the same password for AFF as they do their internet banking? Whilst I'm sure Admin is an honest person, how do you really know that Admin isn't harvesting passwords, especially as every so often someone slips and gives out a little too much detail in their posts?

Second be very careful about using public computers for accessing private things. Even after you click log out, a person may be able to click the back button or view the cache (A copy of all your internet activities and associated files) and get information about you that way, even if they can't actually do anything to your account.

Third, be "alert but not alarmed", not every person on the internet, or sitting at a hotel lobby or standing behind the counter at a shop is out to get you. Be vigilant (eg if they take you credit card "out the back"), but if you suspect everyone you'll miss the important signs that tell you when someone really shouldn't be trusted.
 
Would be interested to know how the PIN is provided, it's not available to staff, however this points to the fraudsters having access to your email account at some stage.

What do you mean? Every time I call QFF they ask for my pin to verify my identity. They even called me once out of the blue and asked me for my pin to verify they were talking to the right person, at which point I asked them how I would know if they were legitimate... So they asked me to call the QFF number back. So I would suggest that staff do have access to your pin (and I think they should change this practice to improve security.
 
What do you mean? Every time I call QFF they ask for my pin to verify my identity. They even called me once out of the blue and asked me for my pin to verify they were talking to the right person, at which point I asked them how I would know if they were legitimate... So they asked me to call the QFF number back. So I would suggest that staff do have access to your pin (and I think they should change this practice to improve security.

I too have been asked for my FF number. I'd just changed it, and quoted the incorrect one, to which they responded that it was incorrect. I then realised and gave the correct number, which they accepted.

The Member number I can understand someone getting easily enough, of a boarding pass, but the password, is more difficult. I rarely use any computer other than my own to access my bank - too risky even if I can clear the history, cache etc.

I used to use EasyNet in London on a regular basis - once your cash ran out, or you logged off, the computer restarted and when it did, history, cache etc had all been cleared. (I remember checking once, because I had to recharge and chose the same computer - I was worried that my history could still be accessed.)

Now I'm not a tech-head by any means, and I guess if a dodgy Internet Cafe wanted to have a keystroke logger installed they probably could, but I have used public internet in cafes, hotels and even libraries, where the person before hadn't logged out. Think 9/10 this would be the cause of most peoples problems. (Of course I could be wrong. . . . . ;))
 
I too have been asked for my FF number. I'd just changed it, and quoted the incorrect one, to which they responded that it was incorrect. I then realised and gave the correct number, which they accepted.


It could be someone sitting on the QFF website typing your PIN into a browser, that would tell them quick smart if the PIN is correct or not...
Yeah I don't trust people just calling me up out of the blue and asking for sensitive details (eg name \ age \ birthday \ address \ passwords \ pins), as far as I'm concerned if they've called me, they should already know who they are talking too. I'll usually try and get a return phone number or better still get a return phone number from an alternate source (eg yellow pages \ website) if they are calling from a company I do business with.
 
What do you mean? Every time I call QFF they ask for my pin to verify my identity. They even called me once out of the blue and asked me for my pin to verify they were talking to the right person, at which point I asked them how I would know if they were legitimate... So they asked me to call the QFF number back. So I would suggest that staff do have access to your pin (and I think they should change this practice to improve security.

It's funny how companies ring wanting to verify who you are, but not really giving a way for you to positively identify who they are.

As for the PIN, they may or may not have access. It could be that they have to input it to see if it comes back as correct or not.

Having said that, if it is a path they want to use, then I would suggest that they should have a different phone PIN and web PIN. (I also think the PIN should be longer than 4 digits!)
 
It could be someone sitting on the QFF website typing your PIN into a browser, that would tell them quick smart if the PIN is correct or not...
Yeah I don't trust people just calling me up out of the blue and asking for sensitive details (eg name \ age \ birthday \ address \ passwords \ pins), as far as I'm concerned if they've called me, they should already know who they are talking too. I'll usually try and get a return phone number or better still get a return phone number from an alternate source (eg yellow pages \ website) if they are calling from a company I do business with.

Sorry, forgot to say, I called them, not them calling me. :mrgreen: No way I'd be giving out those details to any random caller; like Jobu, I'd have been suspicious and would tell them so as well.

In a way, I've often wondered why I bother keying in my PIN when they always seem to ask for it when I finally get someone to talk with. Isn't that the whole idea of using the keypad on your phone???
 
It's funny how companies ring wanting to verify who you are, but not really giving a way for you to positively identify who they are.

As for the PIN, they may or may not have access. It could be that they have to input it to see if it comes back as correct or not.

Having said that, if it is a path they want to use, then I would suggest that they should have a different phone PIN and web PIN. (I also think the PIN should be longer than 4 digits!)

I agree - maybe using a word rather than a number. That would be more difficult to work out. From memory, I have to do this with ANZ or AMEX - the ask for my password for verification. I use a PIN to access, but the word helps them actually verify that Archphoto is actually Archphoto. :cool:
 
Status
Not open for further replies.

Become an AFF member!

Join Australian Frequent Flyer (AFF) for free and enjoy a better viewing experience, as well as full participation on our community forums.

AFF members can also access our Frequent Flyer Training courses, and upgrade to enjoy lots of other benefits and discounts!

AFF forum abbreviations

Wondering about Y, J or any of the other abbreviations used on our forum?

Check out our guide to common AFF acronyms & abbreviations.
Back
Top