7 ms·
In Europe there are legitimate and extremely established services that require you to input your bank login details into something other than your bank's websit
by syllogism 1y ago
In Europe there are legitimate and extremely established services that require you to input your bank login details into something other than your bank's website. It's madness.
- BlindEyeHalo 1y agoI find this hard to believe and have never seen that ever.
- jeltz 1y agoIt used to be common 5 years ago before PSD2.
- brettermeier 1y agoDon't understand the downvotes, i never saw that too, and i am shopping online very often.
- consp 1y agoIf you used the first gen "pay later" services they'd scrape you for "compliance checking" or simply mask it as a transaction which is actually just personal information scraping. Most of the times you did not see it, as it's obfuscated as a part of the transaction. They are also the companies complaining a lot about the "failure" of the PSD standards since it limits how much and how obfuscated they can scrape everything (and there are records).
- bombcar 1y agoMultiple US hospitals and insurance companies use genuine links like doctor-services-for-u.biz - infuriating.
- dtech 1y agoThere's no legitimate case for that since PSD2 (mandatory since 2020). Are you not confused by that? PSD2 doesn't share your credentials. I'm an European and have never needed to use nor encountered those services.
- siva7 1y agoPSD2 is just MFA, it doesn't prevent shady companies still asking your login credentials, even if you must authorize that login from your official banking app. Klarna is one of many examples - they ask me for my bank credentials on their own website so they can crawl all my finance data .
- bradfa 1y agoPlaid and Finicity do this in the USA for some linking of banking to other financial products. Feels SO insecure. Connecting my credit union checking account through Plaid even ironically brought me to a login page which explicitly states I should never give my banking password to any other entity. If I need to link my accounts and these services are the only choice then I change my banking passwords immediately after.
- chrisweekly 1y agoI thought Plaid used OAuth2. Hmm.
- cpburns2009 1y agoPlaid asks for your raw bank credentials so that it can scrape up data. That's why I've always refused to use it.
- WOTERMEON 1y agoI really hope to never be in the position where I have to use it
- karel-3d 1y agoPlaid whole business model is that it uses OAuth2 on banks that support it and export the data through APIs; and for the banks that don't, they ask for name/password and scrape it through "fake" web browser that mimick user behavior on the backend. (I worked for a Plaid competitor. The long-term goal for all similar companies is of course to use OAuth and APIs, because it breaks less often; but since the banks don't offer that, scraping it is!)
- fancyfredbot 1y agoCare to mention what these legitimate and established services are?
- deleted 1y ago[deleted]
- JLCarveth 1y agoPlaid is used by a lot of the major Canadian banks.
- raudette 1y agoFlinks is also an often-used aggregator in Canada. "Connecting" savings accounts from EQ Bank or Wealthsimple to an account at TD Bank requires providing TD credentials to Flinks.
- joshuaissac 1y agoSofort used to do this. I don't know if they still do.
- FinnKuhn 1y agoPaypal, Klarna
- BrandoElFollito 1y agoAre you talking about the possibility to pay via your bank account directly on a checkout page? If so this is the bank page you are using. Can you give some examples?
- PeterStuer 1y agoAre you sure? Never seen any such thing.
- didsomeonesay 1y agoName and shame: Klarna did this. Not sure if they still do because i stay well clear of them.