Stop pushing Face ID as an auth method for payment

Feedback & Ideas
21

The only way is to use your Monzo card PIN which they absolutely must have had. Was it stored on the phone somewhere?

1 Like
22

No I dont store the pin ! It might be video recording of my face on their device whie engaging me in a convo!

23

You’re going to need a much better lie than that.

4 Likes
24

That won’t work for Face ID.

You posted this in a discussion referencing Face ID, so we’re assuming you have an iPhone. Is that not the case? Face ID works by also creating a depth map of your face, so a 2D video would not bypass it.

The attacker either knew your pin, or it was easily guessable.

5 Likes
25

Theres 100s of cases happening in london and if you find the video where the gang leader is interviewing , he says they just want to snatch an unlocked phone thats it!

26

There are zero cases of what you are describing, because it’s impossible.

2 Likes
27

So was it snatched or were you interviewed?

Someone can only take money from your account with your device if they have your PIN. Your phone pin and Monzo pin should be different, if they aren’t, they could have seen you enter it, but you’re sure that didn’t happen, but think it’s more likely they got a face recording and used that?

If they phone didn’t lock itself then they had your Monzo pin. No other way.

Monzo will know exactly how the payments were authorised btw.

2 Likes
28

How you so sure about this? Are you conducting it or researching on it ?

Thousands of phone being randomly snatched from street without knowing the passcodes and somehow the they are opening they phones, can be so bypass method!

29

No, but hundreds of qualified security experts have done research on it - including bounties offered by Apple etc, to entice people to break these things, where they’ll get paid thousands if not hundreds of thousands for doing it.

Can you explain a bit more about what phone you were using, what happened etc. So that perhaps people could … y’know … believe your story?

3 Likes
30

Ok so from latest research on internet, they using some wax and infrared to read the four digits on Lock screen, then some permutation combination tool to get few combinations of passcodes and finally using a tool that throws the best possible pasekeys based on western writing standard (from top left to top right) they are opening the phones.

2 Likes
31

Your Monzo PIN should be different to whatever passcode opens your phone.

1 Like
32

If the FBI can’t easily access locked iPhones, I highly doubt random yobs on bikes can trivially do it by the thousand.

7 Likes
33

You’ve been reading Reddit, haven’t you? That level of drama has Reddit all over it.

I find you to be most unconvincing, I have to say. No offence intended, of course.

In any case, good luck.

34

Just be careful before you tell as these lies to Monzo.

Be truthful and you’ll be fine. If someone watched you enter your pin, then stole your phone, then took money, then this is a crime you need to report to Monzo and the police.

Monzo will know where your phone was, how the payment was authorised, which account it was sent to and if that was a new payee and what that account name was, amongst many other things.

So if you think that you can send yourself all your own money and then claim theft, just be careful because that’s how you get a fraud marker.

1 Like
35

Hungry people are smarter

1 Like
36

Maybe the FBI agents should skip lunch then and they’d be able to get into people’s phones easier.

1 Like
37

I have got my fund back, thanks to monzo and team. But there is no reason for you getting furious unless you are one of those guys in soho getting cuts for each phone thef!

1 Like
38

Sorry, you started saying that Face ID wasn’t safe - in a thread about Face ID not being safe - and have moved on to passkeys being read by wax on a phone? :exploding_head:

This is just not a feasible thing - I love the internet.

Please cite legitimate sources where this is proven as a thing that people are doing.

3 Likes
39

some tools like these exists as well:

check this:
https://www.imyfone.com/unlock-iphone-passcode/?media=googleppc&gad_source=1&gclid=CjwKCAiAudG5BhAREiwAWMlSjNOjqq8buxjI4pVmpzVWTdfnzTSzUbLGsh7tFJ9AEv9ZkXoINVUY8xoCoqsQAvD_BwE

As I am a victim, I am trying to understand how it worked, not trying to challenge you, ok bye

40

And we are telling you… they had your Monzo PIN number, there’s no other possibility.

You are still confused about the difference between opening the phone and sending money with Monzo. To send with Monzo you need to use either faceID or your Monzo PIN. FaceID cannot be spoofed, which means they used your Monzo PIN.

2 Likes