A trio of industry-first security tools to help stop fraudsters in their tracks 🔐

That’s correct, you’ll need to pass one of your two or three controls in order to pass added security. The reason for multiple controls is as a form of backup so you’re not reliant on a single type.

Requiring two different controls is an interesting idea for very high value transactions - we’ll keep an eye on this once we’re live!

5 Likes

Sorry if I’m being dumb but doesn’t this contradict itself? I read it as

We don’t show your know locations, but if the current location is a know location we’ll show it on the map dot?

I think all is this is an amazing addition by the way

Yes, but that’s not what the screenshot says. It explicitly says ‘You’re in one of your known locations’ and if the map view above shows your current location (which is also a known location) it exposes it

1 Like

But they aren’t (hopefully) being mugged at home; they’re in the street elsewhere or another city. So this wouldn’t show a map of your home with the blue dot (being you), it would show the map of the area you are in currently, as you as the blue dot.

Meaning if you’re in other street/city, it wouldn’t tell you you’re in your safe location, it would say the opposite, therefore refuse the transaction, or prompt another method.

You’ve used Apple Maps before, right?

Those images you’ve referred to, image 2 you can ignore; it’s not overly relevant (unless it changes based on the country you’re in).

Image 3 will just show a map with a blue dot of where your device physically is, which will indicate if you are; or not, in your safe location you preset, to authorise the payment.

You’re assuming that people are that switched on to set just their home as the known location. I appreciate I am absolutely in the ‘what-about-ary’ land but I maintain there is a risk that by doing this, Monzo will inadvertently disclose known locations which may be elsewhere.

Granted, you have to have more than one method and that’s where I think it really comes into it’s own. I still think there is a risk that locations will be inadvertently revealed - I personally prefer apples approach where it either lets you do it, or says you are not in a known location and there is no map view at all.

Where else is the safest place to make large transfers?

I don’t think it’s difficult to understand, and feel you’ve either overlooked it all or not read it all properly to understand what it’s saying.

Really don’t know how else any of this could be clearer. It’s clear as day as it stands.

You’re overthinking the map.

The map just shows you as a blue dot and your vacinity.

It may be helpful in the instance you are at home, but some reason the GPS isn’t performing accurately therefore you need to move about a bit to make blue dot show you in your safe location.

It doesn’t tell anyone anything other than the person looking at that part of the process, to see you are pinpointed here, and this is why you can/can’t make the payment.

It’s not saying nope, no can do, but head to 123 Monzo Terrace, X1 1XX and you can make that payment no probs.

4 Likes

Car Showrooms, Buying items via bank transfer on ebay, at your place of work which the public might have access to…

Not really, I read it all in detail. In fact, you’ll see I even agreed that it’s a great step and it’s actually really easy to understand the process and what Monzo are trying to do here. I am in agreement.

This is all I was trying to say, just that I personally don’t see the point of the map as this approach could allow an individual to identify a known location, which might if seen be used against them in the future.

I was simply questioning the fact it showed the location on a map and could be used in this way, that was all.

Which is the same way of saying letting me put a pin in on screen which I know anyway is no risk of someone stealing my phone and then using it.

Look - I get it, this is me simply moving into edge cases and I didn’t intend this to go as a far as it has in terms of a debate. I’m not saying I’m right or things should change.

I was simply pointing out that showing a map on screen does in fact introduce a threat vector which apple have avoided by not doing. I’m not saying either is right here!

Anyway, as I have repeatedly said, I like the fact that you have to use multiple controls and this is a really positive step forward.

1 Like

Use the second method you choose?

That can be saved for home, or again, the alt method.

You’re nit picking and not really thinking about it broadly, you can choose more than 1 method; you’re not stuck without choice.

1 Like

The map is showing the same as what you would see by opening the native Apple Maps app?

Monzo is showing some text that indicates whether your current location is within one of your known locations

Unless a mugger walks the whole of the UK with the map open this is not an attack vector

That said, they will quickly find your home address from the thousands of copies on your phone and therefore this security method will likely just give a victim time to contact Monzo and lock down their account. I wouldn’t doubt someone who’s motivated enough to shouldersurf and snatch your phone would mind driving past your house momentarily

1 Like

A bit of realism would be nice

99% are going to store the QR code on their phone and use their Home as the known location, and even then that will probably cut down on a huge majority of this issue

1 Like

Respectfully, you are presenting a strawman argument, i.e coming back at a wholly different point than the one I was trying to make.

I am not and never was criticising the choice of options or that this would cause more friction than its worth. It’s a great tool.

I was, as said, noting that by displaying the location and saying if it was a known location, you could or not inadvertently therefore reveal where that location was. That was the only line of debate I ever put out.

I’m done with this thread now. I simply raised a point that this might be used as an attack vector but probably not. That was it. It had nothing do to with a lack of understanding of what Monzo are trying to do, or how it worked. I understand it, and I think it’s great.

It was only ever a more broader security thread and a genuine question around the need for the map to show location which I think is purely a UI thing - which is fine, it’s their choice to do it this way.

1 Like

Yeah, that screen tells you whether you’ve passed the location test, whether the map is there or not, I can’t quite get my head around how some UI fluff is making it less secure but maybe I’m missing something :sweat_smile:

2 Likes

Location based security isn’t a new thing. It’s been on revolut cards for a few year. Nothing stopping them flipping the switch to align to transfers too.

2 Likes

My cards have caught me out a few times, annoyingly if the payment systems are registered elsewhere ie London and I’m in Hartlepool. Will never forget that at Vue cinema :joy:

1 Like

Wdym? Monzo has also had location based security as in I opt in via the app and presumably they compare it when I make a transaction, didn’t know Revolut had it though

Admittedly it’s never declined even when the payment terminal was registered in a different country

Just physical card not Apple Pay, you can’t technically be somewhere else with Apple Pay unless your device has been stolen.

Used to get a decline and in app would say cuz location.

Purchasing a ticket on a train handheld device.

3 Likes

Hi all, really liking these features, I hope they have been tested with accessibility in mind? Myself, I am totally blind and use voiceover on an Iphone to read the screen, and talkback on a google pixel, so I hope these have all been tried and tested with a screen reader? :slight_smile:

3 Likes

I think this would defeat the object of the security if its possible to send it out to just anyone!

the thief would have to be AT your home location in order to carry out the transaction - the point of this is that it will only work for you at home or at work - it doesn’t matter who knows where you live - if they’re not actually physically there to undertake the transaction it won’t work - I think you are over thinking it

I like the look of these features :+1:

Although I’ve been using Monzo for my main current account and short term savings for several years, I’ve avoiding using it (or any financial app I install on my phone) to hold larger sums of money (long term savings/investments). I’ve been concerned about the possibility of loss of this money via phone theft or mugging. I wouldn’t be surprised if a lot of other people have similar concerns. These new security features may well be enough for me to consider using Monzo with larger savings and investments.

3 Likes