Cardless Cashpoints

My mobile banking app, showing me a special six digit code.
The mobile app presents you with a special six-digit code that is used to withdraw the cash.

RBS Group this week rolled out a service to all of its customers, allowing them to withdraw cash from an ATM without using their bank card. The service is based upon the same technologies that’s used to provide emergency access to cash by people who’ve had their cards stolen, but integrates directly into the mobile banking apps of the group’s constituent banks. I decided to give it a go.

The first step is to use the mobile app to request a withdrawal. There’s an icon for this, but it’s a bit of a mystery that it’s there unless you already know what you’re looking for. You can’t make a request from online banking without using the mobile app, which seems to be an oversight (in case you can’t think of a reason that you’d want to do this, read on: there’s one at the end). I opted to withdraw £50.

Next, it’s off to find a cash machine. I struck out, without my wallet, to try to find the nearest Royal Bank of Scotland, NatWest, or Tesco cashpoint. The mobile app features a GPS tool to help you find these, although it didn’t seem to think that my local Tesco cashpoint existed, walking me on to a branch of NatWest.

Cash machine: "Do you wish to carry out a Get Cash or Emergency Cash transaction? [No] [Yes]"
The readout of the cash machine demonstrates that the roots of the “Get Cash” system lie in the older “Emergency Cash” feature: the two are functionally the same thing.
As instructed by the app, I pressed the Enter key on the keypad of the cash machine. This bypasses the usual “Insert card” prompt and asks, “Do you wish to carry out a Get Cash or Emergency Cash transaction?” I pressed Yes.
Entering a 6-digit code from a mobile phone into a cash machine.
The number displayed upon the screen is entered into the cash machine.

The ATM asked for the PIN I’d been given by the mobile app: a 6-digit code. Each code is only valid for a window of 3 hours and can only be used once.

A cashpoint asking for the PIN a second time, and then asking for the amount of money to withdraw.
The cash machine asks for the PIN a second time, and then asks for the sum of money to be withdrawn.

I’m not sure why, but the ATM asks that the PIN is confirmed by being entered a second time. This doesn’t make a lot of sense to me – if it was mistyped, it’d surely fail anyway (unless I happened to guess another valid code, within its window), and I’d simply be able to try again. And if I were an attacker, trying to guess numbers, then there’s no difficulty in typing the same number twice.

It’s possible that this is an attempt at human-tarpitting, but that wouldn’t be the best way to do it. If the aim is to stop a hacker from attempting many codes in quick succession, simply imposing a delay would be far more effective (this is commonplace with cash machines anyway: ever notice that you can’t put a card in right after the last transaction has finished?). Strange.

Finally, the ATM asks what value of cash was agreed to be withdrawn. I haven’t tried putting in an incorrect value, but I assume that it would refuse to dispense any cash if the wrong number was entered – this is presumably a final check that you really are who you claim to be.

Cash machine: "Please take your cash and your receipt."
It feels strange taking money and a receipt from a cashpoint without first having to retrieve my card. I spent a few minutes after the experience with a feeling that I’d forgotten something.

It worked. I got my money. The mobile app quickly updated to reflect the change to my balance and invalidated the code: the system was a success.

The banks claim that this will be useful for times that you’ve not got your card with you. Personally, I don’t think I ever take my phone outdoors without also taking my wallet with me, so the chance of that it pretty slim. If my card were stolen, I’d be phoning the bank to cancel the card anyway, so it wouldn’t save me a call, either, if I needed emergency cash. But there are a couple of situations in which I’d consider using this neat little feature:

  • If I was suspicious of a possible card-skimming device on a cash machine, but I needed to withdraw money and there wasn’t an un-tampered ATM in the vicinity. It’d be nice to know that you can avoid having your card scanned by some kid with a skimmer just by using your phone to do the authentication rather than a valuable piece of plastic.
  • To send money to somebody else. Using this tool is cheaper than a money order and faster than a bank transfer: it’s an instantaneous way to get small sums of cash directly into the hands of a distant friend. “Sure, I’ll lend you £50: just go to a cash machine and type in this code.” I’m not sure whether or not this is a legitimate use of the service, but I can almost guarantee that it’ll be the most-popular. It’ll probably be reassuring to parents of teenagers, for example, who know that they can help their offspring get a taxi home when they’ve got themselves stranded somewhere.

What do you think? If you’re with RBS, NatWest or Tesco, have you tried this new mobile banking feature? Do you think there’s mileage in it as an idea, or is it a solution in need of a problem?

× × × × ×

The Student Loans Company Are Wankers

[this post was damaged during a server failure on Sunday 11th July 2004, and it has not been possible to recover it]

[this post was partially recovered on 12 October 2018]

Well, they give me money, so I can’t complain too much, but regardless…

My student loan should have been credited to my account on Monday (12th). Paul got his on Sunday! But when mine hadn’t come through by this morning, I got a little concerned. So I phoned them up on the enquires number listed on their web site.

“You have called the Student Loans Company. For enquiries regarding your student loan, press 1. To change your bank account details, press 2. For any other enquires, press 3.”
I press 1.
“If you are calling on behalf of a third party, we must advise you that they must cal personally owing to customer confidentiality. If you have any general enquiries, please visit our web site at www.slc.co.uk. Thank you.” <click>
WTF?

I call again, and this time press 3. Some confusing buttons later, I get through to a nice Scottish woman called Alison. It turns out that they had the incorrect sort code for me (and they had known this for several months [sort code had come up invalid upon entry] – but hadn’t bothered to phone or write to me). How had they gotten the sort code wrong? Well; they’d read one of my …

Thursday Afternoon

Good progress at work today, easily catching up on the things I didn’t get done yesterday on account of having been at the Royal Welsh Show.

AbNib is proving itself popular, but I’m still not happy with it: there are a load of really cool features I’d like to add, yet. But that’s a job for another day. I’ll be up in Lancashire this weekend for Andy‘s party and to visit my folks, so I can’t do it then, either.

Claire’s gotten herself temporarily sterilized with a fantastic hyperdermic full of progesterone and with the aid of the nice people at Aberystwyth Family Planning Clinic. Woo and indeed hoo. She’s (theoretically) a lot less likely to forget to have an injection every three months than she is to forget to take the pill: something she’s demonstrated herself to be very proficient at.

I’ve been excessivley stressed for the last 48 or so hours. I think it’s mostly a result of having no money and my paycheque still being a week away, and having to live off my credit card in the meantime (which I don’t like doing). Also that my crisp-wound in my mouth from the other day has developed into a spot which would probably heal faster and hurt less if I could stop playing with it, but I can’t. And that I’m not making nearly as much coding progress on Three Rings as I should be.

I have a strange urge to go for a long walk in the rain this evening. I hope it rains.

Late

Running late for work. Was supposed to get up and take laptop to Daton as part of an insurance scam, but I’m still at home after having woken up late. Still, Claire’ll be at work until about 1am today… in Newtown… so there’s no benefit to me coming home early. I’ll work late.

Updated Troma Night at long last – this web site chronicles the things I get up to on termtime Saturday nights.

Suppose I oughta go get this laptop sorted and put my paycheque into the bank, then get my lazy layabout arse to work.

Chasing The Paycheck

What with unavailable accountants and worse, I’ve not been able to get my paycheque until today – a week later than expected. I have £2.50, half a loaf of bread, a tin of beans, and a packet of super noodles to live on until my cheque is cashed. I don’t think that Sainsbury’s Recipe Finder quite understood me when I explained my situation, on account of it suggesting the following:

Cowboy Baked Beans
Prep and cook time: 30 mins to 1 hour
Serves: 6-8
Ingredients: 25g butter, 1 large onion, chopped finely, 1 clove garlic (optional), crushed, 2.5cm piece fresh root ginger, crushed, 1 each green and red pepper, cored, seeded, and chopped, 2 carrots, diced, 30ml vinegar, 60ml clear honey, 5ml Worcestershire sauce, 900g baked beans (hah! I only have a 450g can of baked beans anyway), 125g streaky bacon, sliced.

If you want the full recipe, go visit Sainsbury’s Recipe Finder.

In the end, Kit and I celebrated my paycheck by buying a heap of interesting looking ingredients from Somerfield, and made ourselves some cheesy garlic bread, a smokey-mince and pork tomato sauce with pasta-thingy, and some cheesecake. Then ate most of it. Fab.

It’s amazing what a little money will do for you. Last night we ate corned beef on toast.

Cool Thing Of The Day

Cool And Interesting Thing Of The Day To Do At The University Of Wales, Aberystwyth, #42:

Count your 20p piece collection (see “Cool Thing” #25). Realise you have exactly £6 (that’s 30) of them. Do your laundry

The ‘cool and interesting things’ were originally published to a location at which my “friends back home” could read them, during the first few months of my time at the University of Wales, Aberystwyth, which I started in September 1999. It proved to be particularly popular, and so now it is immortalised through the medium of my weblog.

Cool Thing Of The Day

Cool And Interesting Thing Of The Day To Do At The University Of Wales, Aberystwyth, #25:

Start a collection of 20p pieces, for use in the laundry. My wallet’s side pocket now contains 16 20p peices. Combined with a few pound coins, that’ll keep me laundered (ooh-err) for at least two weeks. =o)

The ‘cool and interesting things’ were originally published to a location at which my “friends back home” could read them, during the first few months of my time at the University of Wales, Aberystwyth, which I started in September 1999. It proved to be particularly popular, and so now it is immortalised through the medium of my weblog.

Cool Thing Of The Day

Cool And Interesting Thing Of The Day To Do At The University Of Wales, Aberystwyth, #23:

Leave a club, and, in a drunken stupor, decide that it’s a sound and logical idea to take £120 out ot a cash machine, because it’ll save you from having to do it later. Realise this tommorow morning, and replace the money. Decide that taking your card out when you’re going to get pissed isn’t such a smart idea, after all.

The ‘cool and interesting things’ were originally published to a location at which my “friends back home” could read them, during the first few months of my time at the University of Wales, Aberystwyth, which I started in September 1999. It proved to be particularly popular, and so now it is immortalised through the medium of my weblog.