An anonymous reader writes: Recently Citibank has "upgraded" their phone banking system. I learned this when I called citibank from my work phone to check my account balance and entered my social security number as usual it told me "our system records match your telephone number" and it let me straight into my account without asking me for my passcode. From my work phone! So anyone knowing my social security number can walk over to my cubical and use my phone to access my account. I've called citibank 4 times yesterday trying to get this feature removed. Every time I call they put me through a series of questions to "validate" who I am. Yet, they are allowing anyone who knows my social security number to access my account from my phone. Three out of the four times I called they told me I had to "change" my passcode. So I did, it still didn't fix the problem. The fourth time they told me they had to remove the phone numbers from my account. So they did, it still didn't fix the problem. Finally, I went down to the branch. They had no clue what I was talking about but said I could "change" my passcode via the ATM machine. So I did, it still didn't fix the problem. Does anyone else find this unacceptable? What IT guru thought that it is a good idea to bypass the passcode?
