QF trialling two-factor authentication for QFF accounts

[opusman]

Although this is off-topic it's worth noting that the old trick of diverting calls to voicemail before leaving Australia no longer protects you from roaming fees, at least with Telstra. They will charge you roaming costs every time someone calls, even though the call goes straight to voicemail :evil:

 

[burmans]

Although this is off-topic it's worth noting that the old trick of diverting calls to voicemail before leaving Australia no longer protects you from roaming fees, at least with Telstra. They will charge you roaming costs every time someone calls, even though the call goes straight to voicemail :evil:

There are other carriers!

 

[Barks]

Well, so much for dual factor authentication!!! My partner has recently had 590K points stolen via a 'family transfer' and she was part of the DF trial. It 'coincidentally' happened the night before we leaving for the US so we can't get the stat dec signed until we get home

 

[mviy]

Ouch. Hope that gets sorted quickly on your return.

 

[Pleb Status]

There are other carriers!

Correct. Other carriers* do not require this 'sledgehammer to crack a nut' TFA process just to log into their FF account.

Plus, if the post above is correct, it has not stopped the theft of points anyway. So the system is still flawed.



* I know you were talking about telecommunications carriers

 

[exceladdict]

Via ozb: 2000 points for checking your details: https://www.qantaspoints.com/check-your-details

 

[AisleSeat]

Via ozb: 2000 points for checking your details: https://www.qantaspoints.com/check-your-details

Thanks for that. Just loaded everyone up.

 

[Himeno]

Via ozb: 2000 points for checking your details: https://www.qantaspoints.com/check-your-details

Went to that page, and no where to note (or even see), anywhere I can find on the site, this

* Mother's maiden name (you would've provided that when you originally signed up, even if it was a long time ago and you don't remember doing so)

 

[grussellt]

I just received a message that my account had been locked. I have now sent the following message to QF:
"When I tried to login to my QFF account at 9.30am I received a message (in the login box) that my account was locked as there had been too many failed attempts to login. I had made no attempts to login but I followed the advice and changed my pin. Is this standard procedure or has somebody be trying to access my account illegally?"

It could be that QF is pushing me in the way of two-step verification or may be an attempted break-in. Any thoughts?

 

[Pleb Status]

I just received a message that my account had been locked. I have now sent the following message to QF:
"When I tried to login to my QFF account at 9.30am I received a message (in the login box) that my account was locked as there had been too many failed attempts to login. I had made no attempts to login but I followed the advice and changed my pin. Is this standard procedure or has somebody be trying to access my account illegally?"

It could be that QF is pushing me in the way of two-step verification or may be an attempted break-in. Any thoughts?

Most likely someone else was using your FF number by mistake. My mother recently locked someone else out of their online banking account as she was using the wrong banking ID number that she thought was her number.

 

[Jet L]

Most likely someone else was using your FF number by mistake. My mother recently locked someone else out of their online banking account as she was using the wrong banking ID number that she thought was her number.

Yes but I would think that the number and lastname would need to be together to trigger the account to lock.

 

[Pushka]

I know I locked someone’s bank account once

 

[zig]

Digging up this old thread as I couldn't find anything more recent.

I have received quite a few sms notifications from Qantas with a verification code at times when I haven't been accessing my account. The most recent was at 3.50am this morning. Are others receiving these? Is this likely just another QF technical issue? After each sms I have checked my account and all is in order, no changes noted etc.

 

[RooFlyer]

Report it to Qantas just in case it is someone attempting to access your account.

 

[Must...Fly!]

Digging up this old thread as I couldn't find anything more recent.

I have received quite a few sms notifications from Qantas with a verification code at times when I haven't been accessing my account. The most recent was at 3.50am this morning. Are others receiving these? Is this likely just another QF technical issue? After each sms I have checked my account and all is in order, no changes noted etc.

I would be changing your password/PIN ASAP as clearly someone has it.

 

[zig]

Thanks RooFlyer and Must...Fly. I have changed my PIN and will phone Qantas when I have time.

 

[JinbaIttai]

* Mobile number
* Mother's maiden name (you would've provided that when you originally signed up, even if it was a long time ago and you don't remember doing so)

I haven't flown Qantas for a while, but have a bunch of flights coming up so installed the app on my mobile phone again, only to be prompted by the new "security" questions.

It kept telling me the details were wrong, and that I had X number of attempts remaining (3, then 2)

Trying to view my profile on the website resulted in "your profile is incomplete, please phone us"

Turns out they did not have my mother's maiden name or my mobile number on file.
I signed up in 2014.

P.S. I put "security" in quotes because in the era of facebook figuring out someone's mother's maiden name (look for maternal uncles) date of birth and postcode can be trivial... (One of the many reasons I don't use facebook)

 

[Sdtravel]

So i was browsing around my QFF today when i went in to see my personal details.
It said i needed to enter an SMS code before proceeding. I waited a minute and no SMS arrived with the counter counting down from 10 minutes.
I looked closer and the number it sent to is +610xx_xx_xx1. Realised why im never going to get into that section.

I guess if i am really interested in seeing it i have to call them.

 

[sudoer]

Digging up this old thread as I couldn't find anything more recent.

I have received quite a few sms notifications from Qantas with a verification code at times when I haven't been accessing my account. The most recent was at 3.50am this morning. Are others receiving these? Is this likely just another QF technical issue? After each sms I have checked my account and all is in order, no changes noted etc.

Have you signed up for any 3rd party services like Award Wallet? This will trigger the SMSes each time it tries to login.

 

[zig]

Have you signed up for any 3rd party services like Award Wallet? This will trigger the SMSes each time it tries to login.

Interesting , hadn't considered this. I do have Award Wallet membership, so perhaps this is it?