I just got an alert from my bank, Wells Fargo (it was a real alert, not a stupid phishing attempt) and in the alert it referred to an account of mine thusly:
You’ve reached your pre-set balance threshold of $x,xxx.xx for Acct. XXX-XXX6666.
As far as I can figure out up until August this year these alerts looked like:
You’ve reached your pre-set balance threshold of $x,xxx.xx for Acct. 123-456xxxx.
Why does this matter? Because the old scheme was no good for customers with multiple accounts because the first string of digits would all be the same so you’d have no idea which account they were referring to.
But the new scheme is lousy security risk. The message comes from Wells Fargo and the last four digits are the account number. Do they really think a determined hacker who get ahold of the message couldn’t find the correct sort code? Am I missing something?
