Too many log on attempts, not by me!

[Hvr]

Just tried to log onto my QFF account and was denied because of too many failed attempts.

I haven't logged on since Thursday. No idea who has my number, I am very careful with BPs etc.
I use a VPN whenever I do anything sensitive on my computer.

Was able to reset the PIN. All points still there.

Time to get 2FA installed on my account.

Time to take even more care with my details.

 

[RAM]

Just tried to log onto my QFF account and was denied because of too many failed attempts.

I haven't logged on since Thursday. No idea who has my number, I am very careful with BPs etc.
I use a VPN whenever I do anything sensitive on my computer.

Was able to reset the PIN. All points still there.

Time to get 2FA installed on my account.

Time to take even more care with my details.

So you probably don't use publicly available wifi when you're out and about?

If they do not have their security set just so then anything you enter using the public wifi can be intercepted. There have been a number of cases over the years with shopping centres and airports where all was not what it should have been.

My rule of thumb is not to use wifi for any account with a value to it. So I never do get to comment on AFF when I'm travelling!

 

[Hvr]

I never use public wi-fi. I have data on my phone which I use as a hot spot for my VPN protected tablet/laptop.

 

[Daver6]

So you probably don't use publicly available wifi when you're out and about?

If they do not have their security set just so then anything you enter using the public wifi can be intercepted. There have been a number of cases over the years with shopping centres and airports where all was not what it should have been.

My rule of thumb is not to use wifi for any account with a value to it. So I never do get to comment on AFF when I'm travelling!

Intercept doesn't mean decrypt. Your web browser communication with the qantas server is via https. Ie, encrypted.

 

[Haplo]

I had the same issue with that a week ago. I think having your QFF printed on your boarding pass is just asking people to try to login to your account.

 

[eminere]

I had the same issue with that a week ago. I think having your QFF printed on your boarding pass is just asking people to try to login to your account.

Hence don't leave used boarding passes behind but dispose of them in the trash at home.

 

[craven morehead]

Same thing happened to me last week and : reset PIN was odd.

 

[RAM]

Intercept doesn't mean decrypt. Your web browser communication with the qantas server is via https. Ie, encrypted.

True but there is no guarantee with the encryption anymore unfortunately.

 

[Katy]

I had the same thing, but it was due to an error in the QF system - just prior I was logging in but it was redirecting to the "not logged in page" while still logging me in and showing as such at the top right of the page.

 

[JohnK]

Is it possible a person with a similar QFF number has been entering your number and their password which caused your account to be locked? I know it has happened to me a few times where I've typed in my QFF number wrong.

 

[Jack_OC]

Hence don't leave used boarding passes behind but dispose of them in the trash at home.

If you're worried about this, don't just throw them in the bin either - shred them.

 

[serfty]

I had a similar experience today but may have been due to a temporary bad internet.

When trying to access my account I received a couple of proxy (!?) error messages and then when it finally came back I had to go through a pin reset process.

 

[BenSQ380]

Is it possible a person with a similar QFF number has been entering your number and their password which caused your account to be locked? I know it has happened to me a few times where I've typed in my QFF number wrong.

The fact the member numbers are sequential makes it quite easy for this to happen. I assume that a legitimate number and random names and PINs would still lock the account in the same way a legit number and name and bogus PIN would after multiple attempts.

 

[moa999]

Intercept doesn't mean decrypt. Your web browser communication with the qantas server is via https. Ie, encrypted.

As are most websites these days, particularly financial, email and travel

 

[ozbeachbabe]

I can log into my QF frequent flyer account but when I try to check availability for a Classic Award it asks me to log in again then tells me the details are incorrect. I reset the password and it still tells me the same thing. Haven't got 2FA set up just yet.

 

[Duffa]

Same for me. Another website enhancement balls-up!

 

[RickyT84]

I can log into my QF frequent flyer account but when I try to check availability for a Classic Award it asks me to log in again then tells me the details are incorrect. I reset the password and it still tells me the same thing. Haven't got 2FA set up just yet.

Had the same issue when I tried to log in last night but the issue has now been fixed as I can login as usual this morning.

 

[Hvr]

And it happened again tonight. Not sure why but I was able to reset my PIN.

Now I have to remember it.

 

[OATEK]

And it happened again tonight. Not sure why but I was able to reset my PIN.

Now I have to remember it.

Feel like there is a target on your back?

 

[MEL_Traveller]

I had the same thing, but it was due to an error in the QF system - just prior I was logging in but it was redirecting to the "not logged in page" while still logging me in and showing as such at the top right of the page.

Me too. I didn't read anything in to it other than it was a system glitch. (There was no way anyone else would have my number anyway.)