This morning I had reason to query some payments from my bank account and ended up having to call the fraud team.
When they answered they took me through security, but not by using the account or online passwords or codes I normally use. Instead they asked me detailed questions like: my full name and date of birth. Not very secret at all.
Then when we had discussed the details of the possible fraud I was asked to answer a series of pro-forma questions. One of them was: have you given your account details to anyone?
When I asked what “account details” meant I was told that it was my account number and sort code.
With that account information on every cheque that I write, it is potentially a very long list of people who know my details or, as I suspect, a remarkably stupid question!