A Security Measure?

I went to my bank the other day to deposit a check. (Have I mentioned that I hate physical checks?).  I don't know my account number because, well, it's not really the type of thing you need to know these days. Besides, it's just a detail and they can look that up.... :)

Recently, they've started asked for picture identification when you don't give them your account number.  I thought this was a fairly curious practice - after all, I was depositing a check made out to Timothy Marman in an account of the same name, and I've given you my banking card.

So as I was handing over my license, I asked her exactly why. “It's a security measure, sir, since you didn't know your account number.”

I confirmed this by depositing another check earlier today but making sure I had my account number. Sure enough, no identification necessary.

I might have bought it if she told me it was standard practice whenever dealing with checks. Or if I were trying to cash the check. Or if I were trying to withdraw money from the account. Or if I asked for a copy of the account number.

But, really, I was just trying to put Tim Marman's money in Tim Marman's account.

(Really, ask yourself - does it really even matter whether I was Tim Marman in this case?)

Obviously this is at most a minor inconvenience to customers and costs the bank a few seconds of teller time. Not a big deal. It's the reasoning behind the measure that really bugs me. It seem that, at best, this is being done to make people say “oh, look, they asked for id - my bank must be serious about security.”  In reality, this so-called security measure doesn't (appear to) address any real security risk.

(If I'm wrong, and there is a valid reason on why they do this, please share).

In other words, would we be at any more risk should the bank not ask me for identification in this situation?

As I walked away, I joked with her that - for future reference - if anyone else wanted to deposit money in my account, she should let them and not ask for identification....

[ Syndicated from http://blogs.slashstar.com/tim/archive/2004/05/19/532.aspx ]

Published Wednesday, May 19, 2004 3:03 PM by Tim Marman

Comments

# re: A Security Measure?

Wednesday, May 19, 2004 3:26 PM by Shannon J Hager
Did you get a reciept for the deposit? Did that reciept have the account number on it? If so, there is your answer. Simply depositing $ into an account would enable you to get that person's account number.

I am still trying to figure out why you don't know your account number. I thought that was something everyone had memorized these days, along with ATM number, Credit Card number, SS number.

# re: A Security Measure?

Wednesday, May 19, 2004 3:29 PM by Phil Scott
My bank only really cares if I'm depositing a check, and want $100 bucks back. That could be a problem.

# re: A Security Measure?

Wednesday, May 19, 2004 3:36 PM by Tim Marman
Interesting point, I didn't think about that.

It doesn't look like the receipt has the account number printed on it - it is only in the written portion.

On this particular receipt, she didn't write it in, so no account number.

But I will check if I have any old receipts, because I could definitely see this being written in by other tellers.

And if that's the case, I guess it does address a risk :)

# re: A Security Measure?

Wednesday, May 19, 2004 3:38 PM by Tim Marman
Shannon - also, I very rarely need my account number. I send and receive most payments electronically.

Of course, I know my Amex and banking card numbers (plus the security codes and expirations) because I use them regularly.

Otherwise, it's just a meaningless detail that takes up space :)

# re: A Security Measure?

Wednesday, May 19, 2004 4:28 PM by Blair
At my bank we generally use Debit Cards. This has a pin number. So we just swipe the card and enter the pin number before any transaction. Seems to work really well and you only have to remember your pin number.

This is hooked into the CRM and loads your details. This means any outstanding issues can be sorted out while you are there.

# re: A Security Measure?

Wednesday, May 19, 2004 5:51 PM by steven vore
my credit union does the same thing, like others have suggested, because of the receipts. if I don't have my ID, they take the deposit but won't give me the receipt, they insist on mailing it home. same thing if I deposit money in someone else's account (which I have done, to pay them for something for example)

# re: A Security Measure?

Thursday, May 20, 2004 1:25 AM by AT
They have to get your IDs for a lot of reasons.

1. In case if clerk will make any errors with digging up your account number - you can ask them to return your money back.
Photo IDs make him sure about correct spelling as name typically printed or written clearly.
Banking computer systems take account number in effect - not a name.

2. How about making check fraud and trying to deposit bad check on person account you know well - but not his account number. A few bad checks and your "friend" can appear in jail ;o)

3. It's better to instruct clerk to ask for as much as possible identification for non-regular operations (digging up an account number is one of them) instead of listing exceptional cases then Ids not needed.
This way you will be unable to claim that one day ago another cashier has not asked you for photo id for similar operation. Cashier will follow simple rule - anything non-regular must result in security check.
It's will perfect if all operations result in security check - but this will be big overhead and bank simply allow to not check most common operations.

BTW, I always have my IDs and it's not a big concept for me to show them to clerk.

# re: A Security Measure?

Saturday, May 22, 2004 4:48 PM by John Cavnar-Johnson
Actually, there are a number of situations in which the question of whether or not the individual in question deposited the check would be of legal, political, or social consequence. For example, a check deposited into the bank account of a judge by a party with a case before his or her court would be a serious matter.

The bank is trying prevent repudiation (the ability to take some action and deny responsibility). Since the act of accepting a deposit may have legal implications, they require authentication. You prove your identity either by supplying a shared secret (your account number) or by supplying credentials from a trusted authority. They've clearly done their threat modeling.

# re: A Security Measure?

Saturday, May 22, 2004 4:53 PM by Tim Marman
Not really, though - knowing an account number is not valid authentication.

# re: A Security Measure?

Thursday, May 27, 2004 10:37 PM by Chris Vance
As Steven Vore suggested, a bank with which I previously had an account would let my parents deposit money into my account, but would mail the receipt home.

Leave a Comment

(required) 
(required) 
(optional)
(required)