Telstra: Difference between revisions
Added new controversy about Telstra not implementing MFA to high-risk customer actions. |
m fixed grammer from previous edit |
||
Line 24: | Line 24: | ||
===Putting customers under risk of being scammed/defrauded=== | ===Putting customers under risk of being scammed/defrauded=== | ||
In 2024 Telstra was found by the ACMA to have not authenticating customer IDs between August 2022 and April 2023 during 168,000 high-risk interactions such as password resets or SIM card swaps and has been fined $1.5 Million.<ref>ABC - ACMA found Telstra didn't have MFA for high-risk customer activities such as changing password after new rules were implemented in 2022 - https://www.abc.net.au/news/2024-07-17/telstra-fined-1-5m-for-leaving-customers-vulnerable-to-scams/104107146</ref> | In 2024 Telstra was found by the ACMA to have not been authenticating customer IDs between August 2022 and April 2023 during 168,000 high-risk interactions such as password resets or SIM card swaps and has been fined $1.5 Million.<ref>ABC - ACMA found Telstra didn't have MFA for high-risk customer activities such as changing password after new rules were implemented in 2022 - https://www.abc.net.au/news/2024-07-17/telstra-fined-1-5m-for-leaving-customers-vulnerable-to-scams/104107146</ref> | ||
Under ACMA rules that were introduced in 2022 required that all telcos in Australia to have implemented Multi-Factor ID authentication such as OTP to email/current phone number on file for high-risk changes to accounts. | Under ACMA rules that were introduced in 2022 required that all telcos in Australia to have implemented Multi-Factor ID authentication such as OTP to email/current phone number on file for high-risk changes to accounts. |