ubank Suspended Account, Require a Selfie Video

So I was getting an error message when attempting to transfer a small amount of money out of my UBank account this morning.

The error simply says that something has gone wrong. Please try again. So after multiple attempts, I made contact with UBank support.

They advised me that the account is on hold, and that I need to record a security video of myself, and send it to them before the account can be unlocked.

I have never heard of anything like this before. It almost sounds like some sort of a scam. I asked if this is something they do for everyone, and they said yes.

Any comments from others that have experienced this?

Related Stores

ubank
ubank

Comments

  • +25

    They are a bank. They have your money.
    They think they can do what the hell they want

    • +21

      They think they can do what the hell they want

      They don't think, they know they can.

    • +1

      the fact that people think this is ok is the reason they continue to do this crap
      you're held hostage by a private company which in turn should be illegal
      this is why we need a decentralized system asap, wish more business would adopt bitcoin
      no one can tell you who owns what. you control your own money

  • +19

    I think its the more intimate version of Know your Customer, They are trying to make sure you are you.

    • +61

      why not invite me for candle light dinner at 5 star hotel.. that is the most intimate

      • +3

        Dinner and cavity search.

        • +1

          the cavity, that is when you get your rent / interest rate increase letter.
          bend over and take it happily

      • If you contribute like1% + plus of their net profit margin, you can have dinner of any size , anywhere and anyone from Ubank :)

      • +1

        Probably because they know you can't afford the 5 star hotel dinner

  • +8

    Contact the Ombudsman.

    • +11

      Ombudsman AFCA

      • +4

        I doubt they'd do anything. It sounds like OP's account was flagged as suspicious and the bank is doing some additional checks to confirm the account holder is who they say they are.

        There's no way for us to know why it was flagged. Certainly not accusing the OP of doing anything dodgy but if they were they obviously would withhold that fact.

      • Ombudsman AFCA ACA

        That’s sure to make them fear you! (not)

        • If that toothless tiger AFCA doesn't do the job, then you go running to ACA with your sob story.
          Whatever happened to that ACA lady Tracy Grimshaw?

  • +54

    Hey OP! It's an anti-fraud feature. You could ask about why you were flagged, but they may not tell you. Right now, they need to complete KYC/AML processes, and in this case they believe purely sending them codes or ID documentation isn't enough. This means your account has been flagged as high risk.

    There's so many reasons why this happens, sometimes it's a crappy process the bank has put in place without thinking about it. Sometimes an external company they partner with has flagged your transaction or login/usage data, these are black boxes and current legislation doesn't require the banks to explain why they're denying you access - also those external companies will refuse to offer that information, as it's part of their "proprietary information" (and tbh, sometimes they don't know, because they've thrown all your data against a ML model and for whatever reason it's matched previous "fraudulent" patterns. Other times it's an error.

    If you don't like it, contact their executives (LinkedIn, email), your MP's and the media. Talk about how much it's affected you.

    • +4

      current legislation doesn't require the banks to explain why they're denying you access

      Not just this, but in some circumstances, the bank isn't allowed to tell you why they're denying you access

      • +3

        If they tell people the exact reason, then those ID thief can quickly find another workaround.

      • It's not that they're not allowed to, they just believe "security through obscurity" works when it comes to fraud. When in reality, it simply lowers the barrier and makes fraud artificially lower for smaller banks and economies. There isn't any explicit rule, it's usually an internal policy that prevents employees for discussing these measures. No compliance, standard or regulatory body requires a bank not be transparent.

        When in reality, we're allowing very large institutions to survive on incredibly dangerous, and from a security perspective - unprofessional - business practices, purely for the sake of reducing cost and increasing profit. It's cheaper not to build security features. It's more profitable to have less guardrails.

        At least, until we're allowed to sue the companies that knowingly cause this.

        Writes your MP's on the Privacy Act changes.

    • and in this case they believe purely sending them codes or ID documentation isn't enough

      Kind of ludicrous since you don't require this for opening the account in the first place.

      • It's part of making the onboarding experience/customer acquisition easier. It's how tech, and finance companies lure customers in by lowing barriers to signup, and then put any regulatory/compliance requirements on them once they start using the product so they feel like they're "sunk cost", and are more likely to complete those checks.

        Same reason CommBank, as a foreigner, will accept your documents before you arrive - but they won't bother doing anything until you visit them in branch. So you'll technically have an account, a login, and you can transfer money in.. But you can't do anything until you visit them.

  • +4

    Define small amount.

    Why not use an ATM to withdraw all your balance and close the account?

    • +2

      The small amount was just the qualifier to get bonus interest. External to U Bank, then take it back out.

      • -5

        If I were ubank AI that would look suspicious to me.

        • +5

          I do that every month. We have the same $200 pingponging between accounts to qualify for the bonus interest. I do it with an automatic transfer to ensure I always qualify.

          • +3

            @try2bhelpful: Same, been doing it for years and not heard boo from the bank.

          • @try2bhelpful: What’s the deal on pingponging abt? Care to share? Thanks

            • +1

              @spedohero: You do automatic transfers between the same two accounts to make sure you always have a deposit to meet the requirement.

              • @try2bhelpful: I am with st george incentive saver, the minimum amount to increase is $50 to be eligible for the special interest.

                • @spedohero: That is painful. Maybe look for alternatives. Ubank has similar interest and this would work with the ping pong.

  • +1

    oh hell yeah
    anyone seen Twisted Metal
    video yourself
    SMASHING A WATERMELON

  • +23

    How does a selfie video prove anything ? That sounds like an idiotic thing to ask for. How is that even a security measure.

    • +1

      This. It's useless without any photo ID, and 100 points of ID including a photo ID should be more than enough.
      Wow. I'd be leaving them ASAP.

      • +9

        OP didn't go into specifics, but I'd expect they'd want a video of yourself holding a drivers license or a passport.

        GoGet (carsharing) does that for their signups, iirc.

        Sure, it's not watertight and you could fake the document, but it's probably good enough to filter out a lot of chaff and uBank doesn't have a PWM arm.

        • +3

          Check instructions of the selfie video, if it involves nudity, assume it as fake? otherwise make it entertaining and get creative!

          • @MMM: Apparently thumbprints are not secure enough, but there are other areas with unique patterns ;-)

      • +1

        The bank should already have a photocopy of the ID, they are trying to verify the person on the other end is matching the banks photo ID record.

    • +1

      I think that is more my issue. They should organise a zoom meeting, or equivalent, and talk to the person directly. That way they can ask some random questions and avoid any AI type generation. This sounds like some security guy playing Australia has talent. Do the best and most original win a piggy bank?

      • Send a selfie video of a AI avatar and see if they notice

        • +2

          I used to work for one of the four big banks. I had a friend who stuck a picture of a teddy bear over his actual picture on his pass and it was there for years. They were proximity readers and security never checked them.

    • The first assumption is that deep fakes are still not used en masse. The selfie video is cross referenced with your ID in the system. It's the same system used at immigration.

  • OP is a drug mule?

  • +9

    We used to go into banks or post offices to prove things. Explains their efforts to get rid of them. Holgate was making post offices sustainable and profitable, with bank at post, but Morrison a banker boy made sure that didn’t happen.

  • +2

    So how are they going to verify whether the video is of yourself?

    • +1

      AI to match photo ID against person's face (if fully automated).

      Revolut does the same thing.

      • +3

        Cannot recall needing to provide a photo ID when I opened my account?

        • Didn’t provide a drivers license number?

  • Since banks have been fined $100s of millions (eg CBA was $700m), bank are more conservative with KYC and if you fall into a pattern then you are busted.

  • +1

    Sounds fake. Have you tried logging in on the website. If it asks you to provide the selfie video there then I would be more inclined to say it was real.

    However, if you are just sending a video to a random link, then that's definitely a scam and you probably installed the fake ubank app which was floating around a while back.

    As far as I'm aware there is no feature on the Ubank app to access the camera; so it's almost 100% fake.

    Furthermore, never had an issue with sending in and out money within seconds of each other… *Especially of the same amount…

    • +1

      The app isnt asking him to do it. He called ubank and they asked him to do it.

  • wow first time i've heard about this if this is true…

    usually its just a face ID scan on your phone.

  • +1

    Sigh, would you rather they not implement security measures and make it easier for anyone with a photo of you to commit identity theft and steal all of your money?

    • +3

      Why not speak to someone in person. With official ID documents? What good is a photo or video?

      • Why not speak to someone in person.

        That's what they are doing - you submit your ID documents, and then a video which is difficult to forge, then an actual person will go through and determine whether you are the person you say you are.

        • +1

          But your info is on a database, not stored locally

      • It's a digital only bank, there are no people to speak to in person.

        • -1

          We used to use post offices in these circumstances. There is no justification for digital id verification

          • @grasstown: Sure there is - why waste my time going somewhere if I can just send it to them?

    • +2

      Funny, maybe that's a reason NOT to close more branches?

      • +1

        Ubank has never got a physical branch in my recollection.

      • Online only bank.

    • I'd like them to implement inform processes so that ppl aren't unsure or confused about whether or not they're being scammed. But hey, maybe that's a big ask.

  • +2

    It almost sounds like some sort of a scam

    Why? you're talking with ubank, right?

    It's called Know Your Customer.

    You've obviously done SOMETHING that has triggered your account to be put on hold. Do you log into it via different VPNs and do weird transfers or something?

    The alternative is that they don't implement these measures, and you get your identity stolen. Can't have your cake and eat it too.

    • Do you log into it via different VPNs and do weird transfers or something?

      What does that have to do with it?

      • +3

        because websites, especially banks use many signals to determine if you are a bad actor and one of them is likely to be where you login from

        • where you login from

          They don't know where I am logging in from

          • @jv: They have your IP

            • @Ade99: You can spoof the IP

              • @jv: you can, but not when you need to get responses from the bank app. I don't know any bank apps that are purely unidirectional. Your IP address gives them a lot of information and VPN's etc can trigger impossible travel alerts raising the risk level of your account.

              • @jv: My account (with another bank) was put on hold because I was logging in from Bali.

          • +4

            @jv: The IP address you're logging into gives an approximation of your location.

            Presumably if

            • The country isn't Australia, or
            • the locality keeps changing

            they may consider you dodgy

    • It often isn't "obvious" though. Sometimes using Firefox will flag your account. Or if you pay for Apple's iCloud+ plan, using the Apple-provided VPN will flag you.

  • +6

    I hope you are currently learning some sort of TikTok dance so you can do it in the selfie video you send back to them.

    • TikTok dance

      🤣

  • +11

    …I need to record a security video of myself,

    Did they specify whether you should be clothed or not?

  • During Covid we had to do the same, also holding your license for a home loan requirement

    • Was this sent through an unencrypted channel such as email?

      This will help with further investigations and possible levying of fines.

      Furthermore, the reference to covid is irrelevant for a digital bank. If these are the same procedures still being deployed that is a serious problem…

      • Not irrelevant, the rules around certification of documents for AML/CTF purposes changed to allow for virtual sighting of the originals due to the pandemic and lockdowns.

        And nice try on your attempt to catch them out, but I’m pretty sure the video call wasn’t conducted over email.

    • +3

      You are talking about Trump not Biden.

      • -2

        Are you smoking the same crack as Hunter Biden? It's definitely Biden.

        • +1

          You are the one with the moniker puffdragon. I wouldn’t accuse me of smoking anything when you are, practically, screaming you do.

  • +1

    Complain to ombudsman. Close the account. Lesson time for the bank.

    • +1

      not sure what complaining to the ombudsman is supposed to do. They have triggered the KYC processes, they are legally obligated to verify your identity.

      • -1

        The bank is choosing to ask for a privacy invading way to do it that is going too far. Going to AFCA would help teach the bank that people aren't comfortable with such requests and that the bank should choose more commonly accepted ways of verifying your identity.

        But communication is king - firstly tell the bank that you aren't comfortable with their request and give them an opportunity to give you a more reasonable way to verify your identity such as a form that you can take to the post office. For your situation, if it's really about multiple country IP addresses, asking you questions over the phone would be a more reasonable solution - in which case they would work out the problem is that you are using a VPN.

        • +1

          be a tough ask since the selfie approach is recommended by Austrac. People may not be comfortable with it, but that doesn't make them legally wrong.

          • @gromit: You are taking their advice out of context. Their guidance clearly is about alternative options during the COVID pandemic. Two important points:
            (1) Their guidance mentions: AUSTRAC intends to repeal these amendments to Part 4.15 following the conclusion of the COVID-19 pandemic
            (2) Their guidance mentions that there should be alternative options for customers with no access to technology.

            • +1

              @onceupon8: He is dealing with an ONLINE ONLY bank. As of yet those provisions haven't been repealed and regardless they remain the only way for an online bank to face to face verification, only real options are video selfie or video call as you can't ask someone to come into a branch that doesn't exist.

              • @gromit: Macquarie refused to update my mobile number without taking a selfie, which I’m completely uncomfortable with. They have a branch in Brisbane so I asked if I could just go in there and sort it out and they still told me I couldn’t update it without a selfie.

                There were no access restrictions and I could login fine they just wouldn’t update my number without a selfie even after I authenticated myself and gave them a number of transactions from that day. Ended up just transferring my funds out and abandoned the accounts.

                So it’s not just online only banks there must be some value in selfies beyond verification purposes.

        • Great idea, then the banks will start imposing a processing fee in such instances to cover the costs of people who don’t understand how the system works going to AFCA.

  • +2

    This KYC crap is getting out of hand.

    On another note, while I love the convenience of paying with tap and go I'm not unaware that when we are fully cashless we are all going to be screwed.

  • +3

    I got a mail that my account was locked due to suspicious activity soon after getting a notification via the ubank app confirming an inwards funds transfer that I had instigated. The domains in the mail links were a red flag to me and my account is still good in the app. I'm classing it as a phish attempt.

    • +1

      Never click on ANY link from email/text. Open a new browser and go to bank website.

  • +1

    Just a selfie or a nude selfie?

    • Exactly this. Make sure you make it a little cheeky. Like just show the tip and be like oops.

      • Freudian slip dick pic will be nice.

      • There are easier ways to ensure your account is closed that don’t involve putting your nudes on the internet (for free).

  • +4

    They are doing it to protect your account. So many people here against kyc, and yet we also have many people that like to blame the banks when people get their funds stolen and how banks need to be held accountable.

    • +3

      People against centralised security methods are welcome to use Bitcoin and be responsible for their own losses with no recourse.

    • Well people are scared at data leaks. Remember the one that happened to Optus? Imagine if that happened to one of the big four banks.

Login or Join to leave a comment