2017-12-15

I really am starting to lose my rag with @Barclays

I still do personal and business banking with Barclays, but have several other accounts now "just in case".

Tip: I recommend people have spare accounts and cards, and companies like Monzo and Starling are excellent ways to do this. Put £100 or so in there for safe keeping just in case your own bank screws up.

This may be seen as slightly 1st world problems, but it is just getting so frustrating.

Last week I decided to give all the kids some money for Christmas. Generous dad that I am. They all have shiny new Monzo current accounts so I could simply do a fast payment from my Barclays on-line banking to them.

I take security seriously, and one thing I did was make absolutely sure I had the correct account details. Copy and paste is your friend here. The Monzo app can share bank details over iMessage at the click of a button and no re-typing. I can copy/paste that to set up new payees. I sent £1 to each and confirmed it arrived, and at the right child. I say child, the youngest is 22 this year!

Tip: Send a test payment to new accounts / payees to ensure no typing errors.

Four payments worked, the fifth is blocked! I get a text saying they will send me a text ?!? Then a text saying reply (to a 5 digit code). Sadly, I know my comms are special, but I cannot text a 5 digit code. I was hoping they would call - they have done in the past - with an automation that asks a couple of silly questions using DTMF replies. I could have coped with that. But nothing.

At this point I have 4 kids saying "thanks dad" on the group chat and one saying "WTF? Why not me?". Explaining the bank issue still makes them wonder, I think. So not happy. So I called Barclays.

It took over 70 minutes to sort, and only because I ended up saying "look, either you believe I am me and so approve this, or you don't and I go find a real bank from tomorrow!". So sorted, money transferred, yay! I made him stay on call until I confirmed it had arrived.

Next day, call from anonymous number saying they need to talk to me about the transaction. Well, I spent 70 minutes on the phone to Barclays fraud already, and I told them so. I was not doing it again. So they blocked my on-line banking. WTF? By the way, if you call from an anonymous number, I reserve the right to SHOUT AT YOU! Take note, Barclays. I may even swear.

Thankfully we have quite a good business banking team, and as this meant I could not get to business accounts either, so they sorted it. Very annoying.

So we come to yesterday...

I am planning to make a moderately expensive purchase, on a card. I won't go in to details, but suffice to say I am really confident Barclays would block it. That, in itself, is a sad state of affairs. So a new plan...

I have a Starling Bank account now. They confirm they have no limit on card spending and it would be fine. So I try to transfer the money to Starling. I had previously set up the beneficiary and sent a test payment and checked it was all correct. Same copy/paste trick. The payment comes up saying:-


OK, pain in the arse. Does not say contact fraud team. Does not say much, but does say scheduled for 14th, so good. Just delayed. No text. No call. No message. Nothing.

This morning nothing. No record of the transaction. Not showing as rejected on the tracker. Nothing. So I move the money out of that account and send a message on on-line banking explaining what I had done and asking for an explanation. No reply yet.

Pissed off.

Barclays: You need to show "pending" or "delayed" transactions and a status. It is totally broken for them to not show anywhere on your system! If there was fraud, the real account holder could not see there were pending fraudulent payments and query them. It could also easily lead to people duplicating payments (I have done that in the past when I did not see the "delayed" message). Really, fix this now.

Anyway, what next, well suddenly on-line banking is not working. WTF?

Again, I contacted the business team. I was not amused. The account manager put me on a conference call with the on-line team. They faffed about a lot - even though she validated that she identified me (and that was a lot of faff, for good security reasons) they then wanted to further identify me with pin sentry crap, which I did. The account manager was not amused with that - she had done her job and they messed about for no reason.

They ask about the transaction and if it was genuine? I explain it was, and how annoyed I am that it did not happen. And that they can cancel it now, as I'll transfer by other means (BACS direct submission, takes 2 days but just works). So good, all identified and confirmed.

She says I now have to speak to their fraud team to re-enable on-line banking. WTF?

I just confirmed NO FRAUD, it was not FRAUD. IT WAS ME! So WTF would I have to speak to a fraud team? No, they were not budging. The account manager is still on the call!

At this point I lose my rag (how unlike me?), rattle off how many hundreds of thousands are sat in the business account and say I want that in cash at the branch tomorrow morning. i.e. I have had it with Barclays. I have paid my mortgage off now, and can easily break all ties with Barclays at the drop of a hat if I have to, both myself and the business. The "account switching" stuff means that even those few people paying us (A&A) by BACS will not be inconvenienced if we start banking elsewhere as the payments get redirected.

Surprisingly (ha!) the account manager steps in rather sharpish at that point and suggests that I can hang up and she will sort it all. Well done to her, 10 minutes later, she has.

Who are they protecting?

As you may know I get very frustrated by this crap, and I had this on the call I had with the fraud dept, that they say they are protecting me! They even had the cheek to say "you had a lot of fraud last year". No, Barclays had one big fraud last year accepting a card holder not present, no address check, old, replaced, card number in a foreign auction house without questions, and gave me hassle over it. I had no fraud!

Also, from news stories, if I did have fraud - if someone convinced me to send money to a bogus account, the bank would not protect me. They would say they did what I asked, and tough.

If any of this actually protected me and not the bank I would be a lot happier about it. It does not.

Who are Monzo and Starling?

Monzo and Starling are some new banks. Both are now proper banks, and very similar way of working. Both embrace mobile banking apps as the primary way to interact with customers. Both tie to a card (MasterCard debit) as well. Both allow instant blocking of the card, and use on-line chat from the app to resolve issues. Both seem to work.

Monzo have aimed mainly at consumers, and have only just sorted their full banking licence. Starling seem a tad ahead of the game and have some things Monzo do not. Both have APIs and web hooks. Monzo web hooks seem better so far, as Starling not sending payer account details.

We are looking at a business account with Starling as soon as they start doing them - the payment services API looks good, and do have the data we need. It will allow some new A&A services I am sure.

In some ways I found Starling a tad more slick, but then I started with Monzo when it was just out of alpha, and experimental and not even a full bank yet. So maybe unfair to Monzo. I actually liked the anonymous card from Monzo - they should allow a card with any name on it, or none.

With Starling I got the app from the apple app store, and went through the steps. All very simple and easy. Like Monzo a photo of ID and short video recording. They were slightly slicker in some of that than Monzo, but very close.

Unlike Monzo, at that point, I had an account number and a simple click through to add to Apple Pay. Within minutes of downloading the app I had a working Apple Pay on my phone and even an overdraft limit (which I have no plans to use). That was impressive!

The card arrived today, a couple of days after applying, and even that was slick...


Pull the tab and you get the card...


Very nice. I may have to look in to how they do that for A&A router cards :-)

I have not had a simpler bank account opening since I was a student in a university branch, and in those days the slick thing was handing you a temporary cheque book (un-named) on your new account, on the spot.

I have given the Barclays team the challenge of providing a decent API for inbound fast payments. We'll see. If they do, maybe I stay using them.

Right now, it is really close, and one more stupidity from Barclays and we leave them...

18 comments:

  1. Been using Monzo current account preview since early-on (Before it was even generally available), pretty nice although starling is a bit slicker in places and does current account switch which Monzo doesn't do yet.

    Starlings interface for Direct Debts seems better, but I'm sure Monzo will get there.

    I think one of the more important things to do is as you've suggested have more than one bank account with different banks just in case one of them Does indeed screw up.

    ReplyDelete
  2. It's interesting how times change. When I first had a bank account I chose a bank that had a branch in the town where I lived. Time moved on and I opened an account with First Direct. At the time the idea of banking with an entity that you couldn't visit took some getting used to. But the idea that you could do whatever you needed to do over the phone without having to visit a branch was superb.

    Move forwards 15 years and how do we want to interact with a bank and what do we want from a bank? Well really, we don't want to deal with people. We want robust systems that we can access using a device of our choosing, at a time of our choosing. And I'd suggest that most of us actually want a very limited set of banking 'features': a debit card, the ability to make and receive electronic payments (faster, BACS, DD) and maybe cheques still. Overdrafts, other linked accounts, insurance, perks, foreign designated accounts, forex and branches abroad are all unnecessary. Can banks as we know them provide this still, or is there a niche for the challenger banks?

    BTW, I've held multiple current accounts for 15 years because I simply won't be held to ransom by a bank.

    ReplyDelete
  3. Sod Barclays. You need a serious bank. I have zero trouble nor hassle of any kind with Svenska Handelsbanken. Do talk to their little team in Reading. It's worth it.

    ReplyDelete
  4. Barclays will be launching an API you can get income payments from on 13th January 2018, courtesy of the competitions & markets authority's OpenBanking solution. Unfortunately you'll have to poll rather than payments being pushed to you. (You'll also have to register with the FCA to get access to the API.) The information returned by the API should be as up to date as the data show in internet banking.

    Unfortunately the security design of the Starling (and Monzo) APIs is not ideal. For instance they rely on "secrets" (instead of public key cryptography) in a number of places where it is not desirable to do so. From this point of view, the OpenBanking APIs are better designed. The OpenBanking APIs are also standardised so you'll get the same API across the 9 largest UK banks and a number of other banks that have also signed up.

    Sadly to the best of my knowledge neither Starling nor Monzo will be adopting the standard & more secure APIs, though I would love to be proved wrong. (Starling talk about they're at the forefront of 'Open Banking' in rather confusing ways, but they're referring to 'banking that is open', rather than the UK's OpenBanking initiative.)

    ReplyDelete
    Replies
    1. I saw that and it seems crazy that customers cannot get access to the api for their own accounts directly. Mad. I have read some of the Starling api for payment services which does in fact use keys, so seems they are moving that way.

      Delete
    2. I wasn't aware of Starling uses keys in payment - that is indeed a good start. I'd much rather see a commitment that they'll move to the openbanking APIs over time.

      There is to the best of my knowledge nothing to stop the banks giving people API access to their data - although due to the security and other requirements it's a bit more involved to talk to these APIs than the Starling ones. (Some of the complication comes from the fact that you prove your identity once to openbanking who sign your private keys etc, and that automatically gives you access to all the banks who have signed up to openbanking). That all stems from one of the requirements the CMA had that the banks themselves should have almost no control over who can access their APIs, to stop further abuse of the market by the big 9 banks (they're pretty much only allowed to prevent API access if they have evidence of fraud...).

      It seems unlikely any banks will be offering customers direct access to the APIs on the 13th Jan - simply because it is a challenge just to implement the legally required minimum in the time scales. Slightly strangely the FCA may well authorise a third party to set up an API that gives customers access to their own data.

      From what I understand the FCA's approach to granting access to the APIs has a relatively low bar. I keep on meaning to try and go through the process.

      Delete
  5. It could be worse. Much worse.

    The Sofort payment portal, which is popular in Germany, works by you giving them your ebanking username and password and they log in to your bank is you and remove money from your account.

    ReplyDelete
    Replies
    1. Most crazily, some of the people in the EU making decisions about how bank/finance APIs should work think that the customer sharing their username and password with a third party is actually an preferable way of doing things (compared to an oauth/openid connect based method where the customer logins into their account normally and then grants the third party access).

      Delete
  6. I love my Starling card, it was so useful when I was traveling in the USA. The rates for foreign exchange are competitive and the immediate pop up to tell you when the card was used and how much the conversion was became really useful. I had one query over a double payment from a retailer, I was able to to chat with the customer service team via the app and they fixed it within minutes. The old banks should be concerned, this modern ways of banking are just getting better and better.

    ReplyDelete
  7. https://www.tide.co/home-v5/ are a business bank with the same investors as Monzo, but they're quite new. Have you considered them?

    ReplyDelete
    Replies
    1. I would recommend against Tide - last time I checked their app was awful (one of these cross-platform "web" apps using Apache Cordova/PhoneGap), and their tech stack is just something bought out of the box, compared to Starling which built their own from scratch (so they have all the technical know-how on-site).

      Delete
  8. The fancy packaging is likely a Burgopak Slider: burgopak.com/en/tailored

    ReplyDelete
  9. I completely get where you are coming from, and the frustrations you are feeling.

    But I think many of your issues here were caused by not jumping through Barclay's arbitrary hoops, and being "different". They have no capacity to comprehend that you can't text a shortcode for example.

    You're ranting at an immovable object and expecting change. I'm not saying that we should all just lay down and do as we are told, but you won't have a good time with them if you don't.

    I do think challenger banks like Monzo are good, but they have had a few weekends of random downtime, which would have been very annoying for me if they were my only/main bank.

    ReplyDelete
    Replies
    1. Legacy rust has downtime as well. My Nationwide online banking is routinely unavailable every Sunday night for "scheduled maintenance" - what the fuck is that? So far with the Monzo current account (not prepaid - that one was powered by a less-reliable third-party) I have yet to get a transaction declined because of their fault.

      Delete
  10. AFAIK the downtime has been with the card processor they use (GPS), having both Monzo (who now do this) and Starling should be pretty safe. I don't recall hearing faster payments being down for either

    ReplyDelete
    Replies
    1. Starling still uses GPS as far as I know, so this is why I personally stopped recommending them for personal current accounts, however this does not affect BACS/Direct Debits so if you're a business and couldn't care less about the card it's definitely a good option.

      Delete

Comments are moderated purely to filter out obvious spam, but it means they may not show immediately.

Missing unix/linux/posix file open option

What I would like is a file open option for "create replacement file". The idea is that this makes a new inode in the same mount p...