etrade-to-offer-zero-liability-accounts

Posted by:

admin 15 years, 3 months ago

Kudos to ETrade for offering a "zero liability" account. I suspect this is an attempt to foil my prediction that brokerage accounts will be increasingly targeted by phishers. (Though, to be honest, they were getting off to a good start in Q4.)

Brokerage accounts are tempting. Most people (if they have brokerage accounts) have more in their stock accounts than in their bank account or savings. It's probably harder to determine if a payment leaving the account is fraudulent. With bank accounts, phishers target a larger number of users for smaller dollars amounts. With brokerage accounts, phishers aim for bigger dollars. From the BusinessWeek article:

Arriving home from a five-week trip to Belgium and India on Aug. 14, a jet-lagged Korukonda L. Murty picked up his mail -- and got the shock of his life. Two monthly statements from online brokerage E*Trade Financial (ET) showed that securities worth $174,000 -- the bulk of his and his wife's savings -- had vanished.

It probably won't be long before the other online brokers (which, like banking is everyone) follow suit. Here's a clip from ETrade's disclosures:

2 Fraud Coverage: You should regularly check your Smart Alerts and monthly statements for accuracy. We may impose greater liability if we determine that an unauthorized transaction was caused by your fraudulent action or gross negligence - which may include any delay in reporting unauthorized transactions to us.

Related Party Fraud: We will not be responsible for withdrawn funds if you provide your User ID or password to anyone else.

Repeat Account Compromise: We may notify you that your personal computer systems have been compromised and require corrective actions such as hard drive clean-up, the need to change your User ID and password, or to install up-to-date anti-virus software. If you fail to take these corrective actions and your E*TRADE Securities or E*TRADE Bank accounts are compromised within one year of our notice, then E*TRADE Securities or E*TRADE Bank will not be responsible for any losses you sustain as a result of any subsequent identity theft or fraud.

So, the consumers have to take responsibility for their own computers and passwords and have to keep an eye on their balances. Emergent Chaos wonders if this will entice users a preference for weak passwords. Could be. I can't find any information about ETrade's password requirements. Collusion is also a possibility. It would be easy to set up a fake MITE attack and be able to prove that your computer was not compromised.

Because of the large dollar amounts and the infrequency of transactions, brokerages should investigate transaction authentication.

• Tags:
• Mutual Authentication,
• Phishing and Fraud

• ← 24-questions-from-hhs
• Eyeing risks while cutting spending →