Telstra: Difference between revisions

Rapid50 (talk | contribs)
Added new controversy about Telstra not implementing MFA to high-risk customer actions.
Rapid50 (talk | contribs)
m fixed grammer from previous edit
Line 24: Line 24:


===Putting customers under risk of being scammed/defrauded===
===Putting customers under risk of being scammed/defrauded===
In 2024 Telstra was found by the ACMA to have not authenticating customer IDs between August 2022 and April 2023 during 168,000 high-risk interactions such as password resets or SIM card swaps and has been fined $1.5 Million.<ref>ABC - ACMA found Telstra didn't have MFA for high-risk customer activities such as changing password after new rules were implemented in 2022 - https://www.abc.net.au/news/2024-07-17/telstra-fined-1-5m-for-leaving-customers-vulnerable-to-scams/104107146</ref>
In 2024 Telstra was found by the ACMA to have not been authenticating customer IDs between August 2022 and April 2023 during 168,000 high-risk interactions such as password resets or SIM card swaps and has been fined $1.5 Million.<ref>ABC - ACMA found Telstra didn't have MFA for high-risk customer activities such as changing password after new rules were implemented in 2022 - https://www.abc.net.au/news/2024-07-17/telstra-fined-1-5m-for-leaving-customers-vulnerable-to-scams/104107146</ref>


Under ACMA rules that were introduced in 2022 required that all telcos in Australia to have implemented Multi-Factor ID authentication such as OTP to email/current phone number on file for high-risk changes to accounts.
Under ACMA rules that were introduced in 2022 required that all telcos in Australia to have implemented Multi-Factor ID authentication such as OTP to email/current phone number on file for high-risk changes to accounts.