Online banking issues

Lawrence Jackson4 said:My bad, I wasn't being super clear earlier—that's totally on me. I don't actually have a digital token; I'm talking about that physical smart card reader and the actual card. And I guess I should mention I'm looking at the business side of the banking portal, if there’s even a functional difference there... I remember when I first "installed" this setup on my old PC, I had to use a disk sent by the bank, and it installed things like card utilities, smartcard administration, and a bunch of other techy stuff I can't quite recall...
So now I'm wondering if I have to go through that whole process again on a different computer? Like, is that even possible, or am I going to have to call someone at the bank to get a new certificate approved or something...🤷

Majo, just call their customer service line and they'll walk you through it step by step.
You’re going to need to register and add the certificate. It was in your instructions, but honestly, just call them and they'll get it sorted...

lonetiger52 said:Which bank offers the cheapest online banking fees? And more importantly, where can I actually get a standard paper list of codes instead of being forced to use those clunky hardware tokens or some complicated mobile app thing?

I’ve been using the old-school PIN/TAN system for years while living abroad, and honestly, it’s worked perfectly fine for me.

Bank of America

Is anyone else having a nightmare with Wells Fargo's online banking since they did that database "update" two weeks ago?

It used to be that I could only get their online banking to work in Internet Explorer, but Firefox was a no-go. Now, suddenly, Firefox works fine, but IE and Chrome have completely broken on me. 😕
It wouldn't even be such a huge headache if the system were actually functional, but now I can't even perform basic tasks—like, say, transferring money into a BlackRock money market fund. Every single time, the app just throws an error at me. So, I tried to do it the old-fashioned way via a manual transfer, but then I got an email saying I had to submit a formal purchase request along with copies of my ID and my debit card. 🙄
I tried calling them to see if they actually plan on fixing this mess or if I should just go buy some duct tape and move my money to a different, more competent bank, but their customer service line won't even accept calls from mobile phones. 🙄
And don't even get me started on the "new" database. It’s somehow twice as bad as the old one, which was already a total disaster. Honestly, it feels like the IT department is being run by the CEO's nephew who just graduated middle school.

So... does anyone have any inside info? Are they planning to fix this, or is this just the permanent state of their online banking?

All wrapped up today 👍
It looks like those folks over at BlackRock gave them the final push they needed 🙂

Has anyone else run into issues with this NEW (just updated yesterday) Bank of America online banking interface?

Last night around 10 PM, my balance was sitting at $6.25, but when I logged in at 5 AM this morning, the site shows $44 in the PayPal 😲 (mind you, this is a checking account—one where I can't even go into overdraft, let alone spend anything since yesterday... 🙄 — honestly, unbelievable!)

I swear, if their new system is so poorly built that someone managed to snag my login credentials during my very first attempt to use it last night—just me, the first person online after the update—😠
I'll lose it.

And frankly, I don't get why they changed the system at all—it worked perfectly fine before (not to mention the design was better; they actually made the 👎 worse). I guess they just have too much extra cash to burn 🤷

man, honestly, I think that whole TAN thing is a complete waste of time. I mean, anyone could just clone your card info from those 40 digits and...

Something is definitely going on with Bank of America, yeah.
Out of nowhere, right after that update, I can't even log in with my own credentials... it just keeps saying they're invalid. I already filed a report about it, so now we just wait and see.

Patrick Thompson77 said:man, honestly, I think that whole TAN thing is a complete waste of time. I mean, anyone could just clone your card info from those 40 digits and...

...and?

You still have the username you provided at the branch, plus that PIN they mailed straight to your house. 🤷

edit: They fixed it! Everything is back to normal now.
Terry Clark8, give them a call at 1-800-210-021

Pasmater, I am $160 in the red on PayPal, and get this—I had $200 in my account yesterday without making a single transaction since then! 😲 😲

So I'm calling them again. Because apparently, that's just how things work now, right?

edit: 😬
Okay, okay, let's not panic just yet. 😁
Turns out they're having some system issues, and they told me everything should be squared away by tonight. They're apologizing and all that. 😁

Logging into my online banking was actually fine—no issues getting past the login screen at all.
The only hiccup was when they completely took the app offline for a while. Apparently, they realized it was glitching out and were scrambling to fix it.

Anyway, I swung by the Chase branch around noon today to figure out why my balance suddenly dropped to $50. Just to be clear: last night at 10 PM, I had $6.25 in there, and the app confirmed it. Then, suddenly at 5 AM this morning, it shows $44... on an account that isn't even allowed to go negative or hit $0.33 in the first place. And no, I definitely didn't buy anything overnight.

They apologized and admitted they were aware of it—clearly, I’m just one of many people dealing with this mess if they already knew about the issue by the time I walked in. They promised the money would be back in my account within two or three days. Supposedly, I could have sped things up by heading to a specific department to file a formal request for an immediate refund, but I really wasn't in the mood to deal with that headache. I just wanted confirmation that the money would actually show up in a few days so I wouldn't have to go back there and start an argument.
I know exactly how much money has been moving in and out of my account over the last week
. Even though there have been dozens of small transactions—mostly buying and selling stuff on various forums—I track everything meticulously. They won't be able to gaslight me even for $0.33.

edit: Just logged back in to check my balance... it says I have $53 now... BUT I still can't pay for an item on eBay that costs $23... Honestly, what a complete disaster they've made of this! 🙄

Why even bother dragging yourself down to the local DMV just to waste an afternoon when you could have just called one of those free help lines? 😁
Honestly, I was just having some ridiculous headache with my login credentials or something—it doesn’t even matter now...

But hey, at least I came out on top this time. 👍

So, did you try seeing if you could actually do anything with that money?

It says $55 (which means $44—exactly what I figured I should have by now, especially after that eBay refund hit my account $11))
BUT—get this—I tried buying an item for $23 on eBay and it kicked me out, acting like I don't even have enough funds in my account... I mean, what's the point of displaying a balance like that if they won't let me touch (my own!) cash? 😠

I’m ready for anything right now.

Same here—I finally managed to get the payment through around 10:00 PM. When I tried earlier, around 8:20 PM, it was rejected due to "insufficient funds." Apparently, they had to sort out the backend issues first...

Let’s just hope we don't run into any more hiccups.

So, Federal Reserve[/B] has officially lost my trust. I used to be a believer, but honestly, all these financial institutions are cut from the same cloth.
Just a few days ago, my online banking was completely down. When I finally managed to log in, it just told me my data wasn't available. I reached out to them to ask what was going on, since there hadn't been any notice on their site—usually they send an alert. They had the nerve to reply with some canned apology about "technical difficulties" for those few days, blah, blah, blah.
The kicker? At the start of the month, they didn't miss a beat when it came to charging me those monthly service and online banking fees. What a joke. The Federal Reserve is basically charging us for services we can't even access. They clearly don't give a 😕

01/01/2011 01/01/2011 $9.00 Monthly Account Maintenance Fee
01/04/2011 01/04/2011 $5.00 Online Banking Balance Inquiry Fee
01/04/2011 01/04/2011 $7.00 Online Banking Service Charge

absolute thieves... 🙂

I have a token from JPMorgan Chase, and when I last checked my balance, there was an entry for a Web Transfer Fee—$0.67. This hasn't been charged once in the two years since I've had this account active.

Why is it that I can't seem to edit or even delete my own posts? — regarding those $0.67 fees they hit me with—that was actually just because they transferred funds from my prepaid web card over to my checking account, not some nonsense about a security token.

Hi everyone.

I wanted to share a bit of a disgrace with you all. I’ve reached out to most of the major media outlets about this, though I have my doubts they'll bother reporting it, given how preoccupied they are with churning out tabloid clickbait.

Essentially, I was poking around the online banking portal for JPMorgan Chase, and I discovered that right there on the landing page:
there is JavaScript being downloaded that contains the code for login and validation, among other things.
In other words, there is code available that—by any standard of corporate security (and especially banking security)—should be executed on the server side rather than the client side. Let me walk you through what I found:
First, navigate to the personal online banking section:

Once there, just right-click on the white space next to the text and select 'View page source'.
A new window will open displaying the page's code. You'll want to click on the link within:
<frame src="/ebank/gradjani/InnerLogin.jsp?AppIdentifikator=0&KioskVersion=0" name="Login" id="Login" title="Login" />.

After clicking that link, you'll see a new block of code, the most interesting part of which is located under this link:

<script type='text/javascript' src='/ebank/gradjani/JavaScript/Utils.js?v=1-15.25'></script>

Within that script, the login algorithm is fully accessible, and you can even spot commented-out sections of code, such as "We commented this out until we find the bug," and similar remarks.

To my mind, this is simply nonsensical. For a bank with this kind of reputation to hand customers such half-baked products while charging such hefty fees for their services is absurd.

To be clear, this isn't about some paranoid fear that someone is going to hack the app and make off with my meager $92 (whatever little I actually have in my account); it’s about the fact that we are being charged for a service that falls well below acceptable standards...

Please, do correct me if I'm wrong.

Look, let me set you straight. Everything in that JavaScript snippet consists of standard, public functions. There’s nothing there worth hiding, and they certainly can't be used to hijack your $92.

To be honest, I couldn't even find the comment you're talking about. It makes me wonder how they missed those bugs in the first place—that's quite an undertaking given the sheer number of different standards and browsers they have to support.

Also, what exactly makes you think this is some half-baked product?

I put in the work and followed his directions to find everything 😁 (you have to click the last link; he didn't explicitly state that)

Does anyone know if seeing this kind of content on websites is standard practice?

Jose Evans48 said:Hi everyone.

I wanted to share a bit of a disgrace with you all. I’ve reached out to most of the major media outlets about this, though I have my doubts they'll bother reporting it, given how preoccupied they are with churning out tabloid clickbait.

Essentially, I was poking around the online banking portal for JPMorgan Chase, and I discovered that right there on the landing page:
there is JavaScript being downloaded that contains the code for login and validation, among other things.
In other words, there is code available that—by any standard of corporate security (and especially banking security)—should be executed on the server side rather than the client side. Let me walk you through what I found:
First, navigate to the personal online banking section:

Once there, just right-click on the white space next to the text and select 'View page source'.
A new window will open displaying the page's code. You'll want to click on the link within:
<frame src="/ebank/gradjani/InnerLogin.jsp?AppIdentifikator=0&KioskVersion=0" name="Login" id="Login" title="Login" />.

After clicking that link, you'll see a new block of code, the most interesting part of which is located under this link:

<script type='text/javascript' src='/ebank/gradjani/JavaScript/Utils.js?v=1-15.25'></script>

Within that script, the login algorithm is fully accessible, and you can even spot commented-out sections of code, such as "We commented this out until we find the bug," and similar remarks.

To my mind, this is simply nonsensical. For a bank with this kind of reputation to hand customers such half-baked products while charging such hefty fees for their services is absurd.

To be clear, this isn't about some paranoid fear that someone is going to hack the app and make off with my meager $92 (whatever little I actually have in my account); it’s about the fact that we are being charged for a service that falls well below acceptable standards...

Please, do correct me if I'm wrong.

Grievance, I think you might be misinterpreting things here.🤣

The specified utils.js file actually only contains validators—essentially parsers—for user input... its sole purpose is to flag any potential entry errors immediately on the client side, preventing the user from having to wait for a response from the server...