My son pretended to be me to obtain information

[Inca]

Re: My son pretended to be me to obtain information

At a guess,,OP=Original poster?? and if I'm right I will be gobsmacked lol.
From a complete lay(wo)mans point of view,,the site posed the security questions and the caller passed them so I fail to see where the issue is. At a push the different email address is a tad lax but again,previous security questions were passed. I'd kick my sons butt and,in future,be more careful or ban him from using your laptop

[labman]

Re: My son pretended to be me to obtain information

At a guess,,OP=Original poster?? and if I'm right I will be gobsmacked lol.

Am I allowed to duly smack your gob?

[akania]

Re: My son pretended to be me to obtain information

Thanks everyone. I have severely reprimanded him and I do want to make a complaint to the gaming site even though I know that I should have wiped my history my issues solely lies with the fact that they sent all my deposits and withdrawals over a 3 year period to my sons email without double checking with me at least. I don't want him to get into trouble with the police for impersonating me but I do want to tear a strip off them. If you think that there is no chance that the gaming site will prosecute my son then I will log the complaint?

[labman]

Re: My son pretended to be me to obtain information

IMO they wouldn't, but please wait for others to comment. Given you seem to accept they thought they were speaking with you though, I don't see why they would send you an email to ask if it's OK to send you an email (albeit to another address). However good luck with your complaint - certainly pointing out how lax their security is may serve to protect you and thousands of others in the future.

[Inca]

Re: My son pretended to be me to obtain information

I personally wouldn't take the risk of them investigating my son,chalk it up to bitter experience and find yourself another site. I agree it stinks and has no doubt caused angst but it's treading on dodgy ground just to vent your spleen however justified it is .

[akania]

Re: My son pretended to be me to obtain information

Ok I understand. What about if I said that I don't know who it was that was emailing them but they used my sons email address? I know this because they also sent a copy of the conversation to me, or is that just as dogey?

[MissFM]

Re: My son pretended to be me to obtain information

Gut feeling based on no legal expertise at all FWIW - would take Inca's advice, whatever the legal situation. Your son has clearly learnt his lesson but you have absolutely no guarantee as to the vaguaries of a particular employee and his/her actions should you make any waves beyond a strong suggestion that they tighten their security. They may have no legal foundation to take action against your son but if they (or even the employee at the helm who might happen to be feeling gyp) decided to, they have the money and the clout to make your son's life hell and that is clearly not what you want to happen!

All the very best whatever you decide to do.

[labman]

Re: My son pretended to be me to obtain information

Ok I understand. What about if I said that I don't know who it was that was emailing them but they used my sons email address? I know this because they also sent a copy of the conversation to me, or is that just as dogey?

IMO lying puts you on very dangerous ground. I wouldn't even consider it.

[Hurricane Puffrose]

Re: My son pretended to be me to obtain information

When I worked in a Customer Service Dept, any complaint about security breaches were sent straight to the Fraud Dept (as their are credit/debit card details involved). 99.99999 out of 100, the Fraud Dept would forward this to the Police (card details again) as a matter of course.

If you were to say you didn't know who accessed your account, and this thread came to light, you (IMO) could possibly be charged with perverting the course of justice and possibly wasting police time!

The security measures in place on any website should involve password, DOB, security question (normally picked by customer) and bank details.

For a telephone conversation, you will normally be asked name, DOB a customer picked security question, possibly last transaction, and bank details.. if this is correct and obviously the person is the right sex (No John Smith sounding like Jane allowed) there is no way for the advisor to know who it is they are speaking to. FWIW reading the security questions asked, they seem pretty standard to me.

The new email address thing is a little worrying, but if your son had passed DPA and insisted the details were sent there, the Advisor is in the right to send them, as long as they asked the question ARE YOU THE ACCOUNT HOLDER when the call started!

[labman]

Re: My son pretended to be me to obtain information

Brilliant summary Puff - thank you!

[Hurricane Puffrose]

Re: My son pretended to be me to obtain information

Yvw Labman.. BB will no doubt correct me on the police charge side of things but it is an agreement that companies have with the ICO that any possible breaches/fraud is immediately reported to the relevent people (fraud depts and police).
This safe gaurds you and the company

[wales01man]

Re: My son pretended to be me to obtain information

Three things from this thread i notice.
1, Talk of a security breach what?
they asked the questions got the answers what else could they do?

2, No one asks the question where is the site based no doubt on foreign soil so would they worry to much about a complaint when any legal action may not apply to them.

3,Any info sent to the sons email address was also sent to the OPs email so i for one would think its ok .

Finally if anyone doesnt want another to answer security questions keep it secret

[Hurricane Puffrose]

Re: My son pretended to be me to obtain information

Three things from this thread i notice.
1, Talk of a security breach what?
they asked the questions got the answers what else could they do?
As long as the words Are you the account holder were used, they were in the right to disclose the information. As long as no hints were given for the security questions were given, the company kept their side of the DPA.

2, No one asks the question where is the site based no doubt on foreign soil so would they worry to much about a complaint when any legal action may not apply to them.

3,Any info sent to the sons email address was also sent to the OPs email so i for one would think its ok .
Again, as long as the OP's son was asked Are you the account holder, information can be sent to a different address, some companies ask why but if a reasonable explaination (I lost my passwords.... I use that address for my gaming, this one is for bills etc) there is no reason to doubt them.


Finally if anyone doesnt want another to answer security questions keep it secret

A suggestion to the OP, to prevent this happening again. Call the company and say that your social networking has been hacked or that you have a suspicion someone has put spyware on your computer, and ask to set up individual security. Use something your son won't know,maybe your favourite teacher, or your first crush's mums name.. think obscure!

If I can be of any further help to the OP in this case.. my "expertise" such as it is, are at your disposal.

[wales01man]

Re: My son pretended to be me to obtain information

Thanks Puff its what i would expect security questions are there for a good reason,
i know this might upset some but gaming online really is a fools game what guaramtee do you have its not all a big con i expect in years to come we may well we have a new PPI type claim against these companies

[Hurricane Puffrose]

Re: My son pretended to be me to obtain information

Any business who cannot physically see the person they are dealing with has to have certain guidelines on security.

Ours was as follows

"Please may I take your account number/mobile number"
(where one was set up) May I take your password/security answer? Am I speaking with the account holder

Where no password was set up:
"May I ask the amount of your last bill (within £3) May I ask the tarriff you are on? May I take your sort code/account number from the account you pay the bill from? Lastly may I ask for a number you ring often.. Can I confirm am I speaking with the Account Holder?"

in case of a 3rd party "May I have the password, may I ask your name? Does the account holder know we are having this conversation?"