What happens when your online accounts are compromised?

Well, the first immediate thing I tried was to call IT helpdesk. Alas, I had no contact number readily available to call them.
When I did find out the contact number via GOOGLE, the Helpdesk was only available during office hours! That took me by surprise. Does it mean that our accounts shouldn’t be compromised after office hours and especially on weekends, else we are at the mercy of hackers? Fortunately, most servers will have their own workable “compromised account detector” and without fail, most compromised accounts will be inactivated.
Now, what about other online accounts such as Facebook and email services? Have we got the solution to a potential problem of having these accounts hacked/hijacked?

• Facebook. If your account is believed to be compromised, be sure that you have internet access. You can go to Report Compromised Account.
• Yahoo account. Go to Yahoo! Password Helper. Then select “My account may have been compromised”. Follow the instructions. Note that Yahoo adopted 2FA and had special security feature for different apps in smart phone.
• Google account. Go to Account recovery form. Then select “I’m having other problems signing in”. Follow the instructions. Google had also adopted 2FA.
• Banks. All have adopted 2FA.
• Paypal. I am not comfortable with lack of 2FA feature here. Anyway, if account is hijacked, go to Can’t log in. Choice the right option and continue. If you prefer call, then the number is +6565104650 (weekday from 8 am to 10 pm while weekends from 9 am to 6 pm). Paypal had not adopted 2FA.
• Online shops. Not so dangerous as payment is normally via credit card or paypal UNLESS you reuse the same password everywhere.
• Twitter. If your account has been hijacked (i.e. password deliberately changed), then request a password reset to retrieve your account. New password will be sent to your email address, unless that information is also altered. See help page. You can go to Support for hacked account. I think Twitter and other service providers will anticipate that sometimes password reset is impossible especially when information pertaining to email and contact could also have been altered by the hackers (a case study). In that case, personally contacting the help support team will be needed but validating your ownership will require competency of the service provider.

Most of the online accounts in Singapore, especially government services are adopting a two-factor authentication (2FA) type of login. This is way better than having to demand users to frequently change passwords every 6 months! Password is way too obsolete because it can be guessed by automated login attempts using differing permutation of characters. The only exception is when login is made extra difficult for supercomputers to figure out, e.g. answer simple question about random archived Google Images that only HUMAN can do, else wait for 10 min before attempting next login. That will surely take ages to figure out.
I dread to think that my company would have a one password to access all staffs’ information. That would be disastrous because personal information, contacts, emails, records and whatnot will be accessible by just one compromised password! I think a good practice should be to segregate services into separate services with sensitive information having a much more difficult requirement to access, e.g. 2FA or via assigned safe IP addresses (well, at least the IP address should be from Singapore and not somewhere in Ghana).
Another way hackers can gain into our accounts is by exploiting the reporting account compromised. It happened when Paypal and GoDaddy played a part in helping a hacker take control of GoDaddy account. First, call Paypal agent to get the last four digits (seems like no harm) of credit card (note that the Paypal agent is human who has access to all your sensitive information; so when he/she errs, that will allow the hacker to gain and you to lose). The hacker called GoDaddy and said that he can only remember the last four digits of the credit card, and voila! instant gain of access to the account. Both Paypal and GoDaddy erred in human factor!
A word of advice would be to shun away email providers that have bad security feature. Don’t keep credit card detail with half-baked service providers that don’t have 2FA feature.

Singapore checking/current accounts

I am not going to talk about interest rate for customers because interest rate nowadays is negligible.
Citibank checking account
This is for personal checking account: Minimum balance is SGD5000; below SGD5000, SGD10 fee per month applies; free checkbook.

OCBC current account (bank opens on Sundays)
This is for personal current account: Minimum balance is SGD3000; below SGD3000, SGD7.50 fee per month applies; checkbook is charge at SGD10 per book.

POSB eCurrent account
This is for personal eCurrent account: No minimum balance required (BUT there is the risk of POSB taking money from your SAVINGS ACCOUNT to pay any outstanding amount in the current account); A monthly fee of SGD 2 applies if SAVING ACCOUNT is below SGD1500; SGD10 per checkbook.

UOB current account
For personal current account: Minimum balance at SGD3000; SGD7.50 per month applies if deposit is below SGD3000; SGD10 per checkbook.

Standard Chartered “Cheque & Save” (current) account
For personal account: Minimum balance of SGD5000; monthly fee of SGD2 applies; additional SGD7.50 per month applies if deposit is below SGD5000, thus, if deposit is SGD4999, you pay SGD 9.50 (compared to SGD10 per month for Citibank with same condition); free checkbook

CIMB current account
Note that I don’t like complicated product choices (which CIMB is doing).
For StarSaver account: Minimum initial deposit of SGD5000; there is no minimum balance required (BUT interest to customers is applied when balance is at SGD5000 or above); SGD1 per month applies; Balance below SGD5000 is not charged any additional fee; checkbook cost not mentioned.
For Shariah type, refer to CIMB StarSaver-i account.

HSBC Current account
For personal account: Minimum balance of SGD3000; below that, SGD7.50 per month fee applies; free checkbook

Comparison and my thoughts

• Minimum balance requirement should be less than SGD5000. SGD3000 seems to be the standard (except POSB which tap into SAVINGS ACCOUNT, which is risky in my opinion because SAVINGS & CURRENT SHOULDN’T BE MIXED!).
• Not interested in any interest on deposit to customers because the number is negligible nowadays. I would prefer to use the SGD2000 for other investment purposes rather than park it in CURRENT ACCOUNT (which charges 2.5% fee if the balance drops below SGD5000 [Citibank]).
• I am not interested in FREE checkbook. I haven’t even used up 10% of the 50 pages checkbook given by Citibank! Why would I be bothered with SGD10 per book then? FREE books don’t interest me. Reasonable monthly fee is more enticing.
• Low to no monthly fee for CURRENT account with requirement for low balance in current/checking account. I prefer to keep SGD3000 in the current rather than park additional SGD2000 for the minimum SGD5000 current account. The extra SGD2000 could have been used in other investments.
• CURRENT and SAVINGS account should be SEPARATED! Banks that tap into SAVINGS to pay off CURRENT accounts are risky business unless that SAVING is not the only and main savings basket to the customer.

Customers with checking accounts in Singapore should be aware of T&C and bank service fees

What irks me and probably many others is that banks don't work in the best interest of customers. When banks advertise next time, they should just say the truth, "WE WORK ONLY FOR YOUR MONEY & CUSTOMERS ARE JUST NUMBERS".

I have just realized that Citibank checking account had updated their terms and conditions (T&C). It used to be that we have to keep a minimum of $2000 in the account to have the service fee waived. I was surprised to notice that that minimum amount had been revised to $5000. If customers have less than $5000 in their checking accounts, a monthly fee of $10 per month applies. I am charged $50 for 5 months.

What does it mean?

Citibank is earning at least 2.4% pa of interest if my deposit is $4999 (above $5000 for waiver). Or at least 12% pa if my deposit is $1000. Also, if I have $100 in the account, it will only take 10 months for Citibank to wipe it clean.

Now, what upsets me is that Citibank did not contact me to inform about the service fee charges. There is no courtesy call to talk to customers and advice them to top up the deposit so that Citibank will not keep on savaging customers' hard-earned deposits (without them knowing about it; akin to a silent killer, e.g. cancer). If there should be any service charges, we as customers should be made aware of first before Citibank (or any other banks) starts deducting deposits! Furthermore, Citibank should charge us via bills and not by automatic deduction from our accounts! At least with bills, customers are made aware of impending fees or bills to be paid. By surreptitiously deducting our deposit is unfair (especially when some customers don't regularly check online statements) or might be oversea on months' assignment.

Why Citibank bother to get customers' contact details if Citibank will not use that to talk to customers when there is a REAL NEED? To me, the only use of my contact detail to Citibank is to SPAM call me about additional credit cards, more loans, insurance etc. That is not for my best of interest. That to me is a nuisance. It irks me more especially when Citibank failed to call me when they decided to charge me service fees. If Citibank had billed me instead of deducting from my deposit, I would have been less upset. Parking my money with Citibank is not safe anymore after this incident and especially considering that Citibank could at their whims decide to deduct something from my checking account (without notifying account holders). I am deciding to look for alternatives real soon.

Note that I have severed any link/business with Maybank Singapore. The reason: I was upset by the way Maybank handled my online money transfer oversea. I was charged two types of fees to transfer the money, i.e. transfer fee and exchange fee in Singapore for a sum of money that I wanted transferred to someone in Malaysia.

I was shocked to get a call from the recipient saying that the amount I transferred was insufficient. It seemed that Maybank Malaysia decided to charge me a transfer/deposit fee as well (and deducted the sum from the money transferred without notifying me!). That was a big embarrassment to me especially when the exact sum transferred was to pay off an EXACT debt! Nowadays, whenever I see solicitors from Maybank credit cards/services, I simply tell them that I hate the bank they represent and walk off.

I am contemplating of doing the same for CITIBANK.


Sorry, I just needed to vent out my frustration. That was my two cents thought.


Related complaints about fees for checking accounts in other banks

• Standard Chartered Bank complaints - monthly fee for checking account

Read also
Singapore Checking/current accounts

Re: Indonesia's Vice-President Jusuf Kalla criticises neighbours for grumbling about haze

I just couldn’t resist responding to this article about some Indonesian politicians’ unsophisticated reply to Indonesian neighbours’ (mainly Singapore and Malaysia) concern about the haze. Read the article here.

"For 11 months, they enjoyed nice air from Indonesia and they never thanked us. They have suffered because of the haze for one month and they get upset" – Indonesian Vice-President Jusuf Kalla.

My analogy to the statement above is like this,

“For 364 days, I have given you painless and carefree days, and you have not thanked me. I just give you one day of senseless slapping to your face and you start to get upset”

Do you think that make sense to us Singapore (and Malaysia)?

Just a thought.

Are we by default leasing our home to domestic helpers?

I have a colleague who was shocked when she saw via real-time recording of her home CCTV that an unidentified man went into her house. That man was led in by her helper (without consent from the employer). That man came into the house when my colleague's 2 years old girl was asleep.
-
That man knew his way into the house and which room to go to. He went directly to the helper's bedroom. The thing about real time CCTV is that there is no playback. You can press a record button (when you need to record) but the rest of the footage is not saved (unless you opt for pricier hardware that can accommodate recording for several days before it overwrite).
-
Panic struck my friend and she had to leave work to rush home. Several calls were made and neighbour was alerted. My colleague's main concern was for the child. The neighbour was instructed to go into the house and retrieve the baby. Reluctantly, the helper let the neighbour into the house and told the neighbour that she had guest. The guest was let off and most importantly, the baby was safe.
-
My friend decided to terminate the helper's contract. The agency advised my friend against reporting to the police because that will delay the replacement. To a family with working parents, my friend had no choice but to comply. The helper was sent home with high probability of returning to Singapore to work. That would be a disaster to the next household.
-
After some thoughts, my friend decided to report to the police. After much deliberation, the police decided that there is no case against the helper and the "intruder". The police said that since the helper invited the unidentified man to the house, there is no criminal element to it. My friend insisted that the helper "invited" the man without their consent. To that, the police said that since the helper is staying in my friend's house, she has the right to invite people over.
-
All in all, it would suggest that if a household hire a domestic helper, it is by default that the said household is leasing their home to the helper and thus, the helper has the rights to invite people over.
-
I was shocked to know this!
-
An advice to parents/employers who have to leave their babies at home with domestic helpers (especially without any other family members such as grandparents at home): -
-
The next time you renew your helpers' contract, please include a term in the contract that forbids helpers from inviting people over to your houses (esp. without your consent). Having it written in legally binding contract will protect you from having to go through what my friend went through. I guess that would make the "invitation" illegal then.
-
For now, the helper is already back to Singapore waiting for the next assignment.
-
Just to share.

Smoker taxi driver should be made easily identifiable

There should be a tag or sticker to identify taxi whereby the drivers smoke. Taxi made easily identifiable would be useful to passengers who are asthmatic, allergic to chemicals derived from cigarettes, pregnant ladies who are health conscious, families traveling with babies (and concerned about the thousands of chemicals in cigarettes), and people who would prefer "fresh air" in the air-conditioned taxi. It is really unbearable to be confined in an air-con vehicle with strong scent of cigarette smoke. Worst are those taxi drivers who smoke inside the car, thus leaving an unbearable cigarette smell.
-
Why am I writing about this?

-

For parents with children who are car sick, having them endure a trip in a cigarette-smoke choked taxi is a torture. Worst is when the smoker taxi driver was unwilling to let passengers to unwind the car window. I have came across this taxi driver and when we told him that our kid is car sick and requested to unwind the window, his reply was this,  "No. You can use plastic bag instead". With that response, we quickly requested that he stop his car. We opted to get out of his car this time rather than have our kid endure his inconsiderate attitude and smell.
-
Sometimes I think that the Transport authority or Health authority should ban taxi drivers from smoking inside their cars. This is crucial for passengers who are sensitive, asthmatic, allergic, and also those who travel with babies. If it could be helped, I wouldn't want taxis with strong cigarette odor to stop by maternity hospitals to take passengers. Sorry, it is just too unacceptable to let my baby endure the lingering cigarette smoke during our travel.
-
Having said that, I am still appreciative of taxi drivers who let passengers like me to unwind their car windows when requested. Their thoughts make our baby's journey comfortable without risk of puking (or sneezing). 

-

Just a thought.

Roy Ngerng again

This is the last time his name will appear here I hope.

First, he is not the one who “pressurized” the government to revise the CPF matter.

Note that the opposition parties have been at it for many years before Roy’s first blog about CPF. He was merely a “surfer” above “big waves” (analogous to work done by oppositions to pressurize government to take into consideration things/matters that can be revised under CPF). Take a look at the 2006 manifesto by WP (which indicates that CPF issue had been on WP mind even before 2006 drafting of the manifesto). The government revised some CPF issues after the poor performance in the previous general election (also not because of Roy). Roy is a non-factor.

Roy is a “surfer” who tried daring stunts while trying to show-off but he crashed (when a someone highlighted to PM Lee about Roy’s defamatory blog. If that someone didn’t do that, Roy would have been a nobody and the CPF would still have been revised). Roy crashed because he paid little attention to what stunt he should and shouldn’t do. Criticising a person is one thing, accusing/defame a person is another. I agree that he got foolish enough to be USED by certain quarter to drag on this issue (esp. when he backpedalled on his apologies to PM Lee and dared to take the issue to court) but that is his choice. It is yet to be determined if his choice was foolish or genius because if he gets more attention and support, he wins. He could even get more crowd-funding for the damage claim (or NOT).

In this news, PM tackles questions on S'pore system, freedom of speech at IPS conference (4th Jul 2015; Today), I read with interest the following statement:

“Look at what people call Barack Obama on the Internet. It would have made your blood curdle.” – Dr. Zakaria advises PM Lee about whether it was a right choice to sue Roy.

To me, I’m thinking, “should we emulate the West over this”. Is it okay to damage someone’s reputation just because we are given the freedom to do so (without responsibility, repercussion, and liability)? People tend to trust gossips and bogus news and 1969 race riot set as our reminder. How about the rumours that spread after the Little India riot in 2013? E.g. Man fined $5,000 for false Little India Riot posting on Facebook.

Now, the US is facing lots of tension over police brutality/lethality over blacks. Imagine the implication if someone was to misuse expression-freedom-without-responsibility to fan hatred. I cringe just to imagine the aftermath.

For now, Roy deserve his punishment for his foolishness. Feigning ignorance over term used such as “misappropriation” is a futile attempt when evidence from his posts suggest otherwise.

Last, Roy is a non-factor for CPF changes. Also, changes to CPF is not attributed to PM Lee alone but also the people working behind CPF (if not opposition who highlighted people’s plight).

Just a thought.