The third party pays the fund security worry

It Times reporter Pan Shaoying

Many people will be their mobile phone number and fund account bundle, through the message to inform the function, users can immediately grasp their own account changes information. However, is also because of this, mobile phone may also be a "time bomb" inadvertently will reveal the owner of the "secret", suffered property losses.

Third party payment: Mobile phone number can modify information

This January, a high surname man in the acquisition of a Alipay account owner's ID number and bank card number, call the customer service phone to modify the password, and then the other side of the account of the 260,000 yuan away, such incidents revealed the third party to pay security worries.

Now most third party users will be bound by the mobile phone number, and will feel that third-party payment is a safe and reliable trading tool, but the reporter found that only a mobile phone number registered on the relevant site, the user's third party payment information can be easily tampered with. Once the cell phone is lost, the owner loses the phone, and there may be a pre-existing balance in the Third-party payment account.

Reporters to their own tenpay account to do the experiment, in the input of mobile phone number, click "Forget Password", at this time the page will appear several ways to retrieve the password, such as through the QQ number, mobile phone number, email can be retrieved. The reporter chose to retrieve the password through the mobile phone number, according to the website "Enter the mobile phone number to obtain authentication code" prompts, the reporter entered his mobile phone number again, soon received a verification code, entered the code and set a new login password, the site will show "New login password set successfully." Not only the login password through the mobile phone number can be changed, the payment password can also be received through the phone to verify the way to modify the code, after the modification, you will receive a change to pay the password to inform the message.

Reporter found that, in addition to Tenpay, Alipay can also only through the phone number to accept authentication code to reset the login password and payment password, can also change the binding mobile phone number, and after the modification, the reporter did not receive SMS notification.

Bank: Mobile phone number cannot be the only voucher for modifying information

Compared to the third party to pay the enterprise personal information modification "simple", some banks security measures are relatively in place.

The reporter looked at ICBC, CCB, postal Savings Bank and other websites, found that only a mobile phone number can not be operated on the bank's web site, almost all banks in the log on to fill in the account number, user name or identification numbers, and not only a mobile phone number can be logged in.

ICBC customer service staff told reporters that if you do not open a mobile phone bank, the loss of mobile phone generally will not bring risks to the bank card, even if the call to customer service, there is no bank card account and need to check some of the relevant information, and can not modify the personal data, unless the owner of some bank card information in the phone.

Is it safe to open a mobile bank? CCB's customer service said that the mobile bank has password protection, even if others pick up the lost mobile phone, without knowing the password, also can not use the mobile banking business.

Many banks also have "forgotten password" when the operation prompts, such as CCB, forget the password after the user needs to fill in the name, ID number, accounts, withdrawals account and many other information.

Experts: Enhanced authentication and security technology

People in the Shanghai Information Security Industry Association said a mobile phone number can tamper with personal information, the personal identity certification in this link do not enough, "for example, users need to use the phone to retrieve the password, in addition to the phone to send the verification code, can be set up a little other secret security issues, The general user will fill in the secret security issue when registering, thus can be more accurate to the personal authentication. ”

In addition, the password technology can be used to encrypt personal information, privacy files and so on. "A mobile phone number login account, account information glance, if the combination of password technology, even if they log in to the account, can not see the contents." such as the bank's safe, the customer placed in the thing to encrypt, if stolen, others can only get this safe, but can not get the inside things. The personage told the reporter.

Related reading
The platform effect of third-party payment mechanism drives the rapid development of mobile payment
Third party payments open up small business
Third party payment faces "money way" puzzled bank and enterprise compete for profit