POLi
Dec 18, 2012, 10:42 am
#31
Join Date: Jun 2010
Location: AKL
Programs: NZ*S & Koru, QF, VA, Accor, Marriot
Posts: 314
ASB and Bank Direct are now warning their customers not to use POLi because of the security risk.
https://www.asb.co.nz/story24389.aspx
https://www.asb.co.nz/story24389.aspx
Dec 18, 2012, 11:49 am
#32
Join Date: Oct 2006
Location: Christchurch, New Zealand
Programs: NZ Elite; QF Platinum; CZ Gold; MU Platinum; Marriott Titanium; Accor Platinum
Posts: 1,467
Thanks. Can I ask how you came across that story? While the link works it does not appear on the ASB search, so I wonder if it is an old warning. Weirdly, it is not dated.
Surely all those companies would not use the system if not safe?
Surely all those companies would not use the system if not safe?
Dec 18, 2012, 12:43 pm
#33
Join Date: Jun 2010
Location: AKL
Programs: NZ*S & Koru, QF, VA, Accor, Marriot
Posts: 314
https://www.asb.co.nz/
I'm sure they are just covering their proverbials, but what it tells me is that if I ever had fraudulent activity on my account and I had recently used POLi, I would potentially be in trouble as the bank could point the finger at that. Rightly or wrongly...
Dec 18, 2012, 3:18 pm
#34
Join Date: May 2005
Location: SJC
Programs: NZ*G, QF NB, UA 1K, AA ExecPlat, IHG PlatAmb, HHonors Gold, SPG Gold, Marriott Gold, ZE1 PC
Posts: 2,636
ASB and Bank Direct are now warning their customers not to use POLi because of the security risk.
https://www.asb.co.nz/story24389.aspx
https://www.asb.co.nz/story24389.aspx
Hopefully this will place pressure on the airline to review their asinine card fees.
Dec 18, 2012, 4:28 pm
#36
Join Date: Aug 2009
Location: AKL
Programs: NZ Silver
Posts: 1,817
I booked a seat only fare and paid by POLI a few months back. I had to upgrade to purchase a bag and the only method of payment was CC; to my surprise there was no CC fee for this, which is great, but seems inconsistent given their stance.
Dec 18, 2012, 4:38 pm
#37
Join Date: Jan 2002
Location: New Zealand
Programs: NZ, IHG, Hilton, Accor, Hertz, FoundersCard
Posts: 298
Surely it's not too far fetched an idea for banks to offer their own API hooks to large merchants like Air NZ? No more stupid screen scrapers. Too much to ask? 
justakiwi
justakiwi
Dec 18, 2012, 5:16 pm
#38
Join Date: Sep 2011
Location: New Zealand
Programs: NZ*S plus various hotel programs
Posts: 945
Not quite that simple as how does the bank know that "Joe Bloggs" from the Air NZ website is the same "Joe Bloggs" associated with a bank account at their bank? Going directly to the bank website they know this from the correct username / password being entered. However if going via the Air NZ website then unless this is requested by Air NZ (security risk unless audited by the bank) there is no way that they can get this confirmation unless Air NZ assumes the risk (which I doubt would happen).
Dec 18, 2012, 5:33 pm
#39
Join Date: Sep 2011
Location: New Zealand
Programs: NZ*S plus various hotel programs
Posts: 945
This story is now on Stuff - http://www.stuff.co.nz/business/mone...-of-POLi-spoof
Dec 18, 2012, 5:39 pm
#40
Join Date: May 2006
Location: Wellington
Programs: QFWP (LTSG), NZ (Jade), TG ROP (Forgotten), OZ (Silver), AA (Cardboard), EK (Lowest of the Low)
Posts: 4,669
Interesting as I too thoguht POLi was a joint service venture by the banks.
Not only is there a security risk I bet POLi through the use a fake screen has breached copyright over ASB property rights.
I think this POLi service will end very soon.
Not only is there a security risk I bet POLi through the use a fake screen has breached copyright over ASB property rights.
I think this POLi service will end very soon.
Dec 18, 2012, 10:23 pm
#42
Join Date: Jun 2010
Location: AKL
Programs: NZ*S & Koru, QF, VA, Accor, Marriot
Posts: 314
Interesting. ASB have posted an update saying POLi have reverted to using a previous version of the system to stop "spoofing/mirroring" their internet banking site. However they still say that using POLi is in breach of internet banking T&Cs (IMHO they should have said this a long time ago if they had concerns).
So it was a new version of POLi, which explains why this just came up yesterday. On further investigation, it is the new version of POLi that was designed to enable use on Macs and tablets/smartphones.
Response from POLi:
http://www.polipayments.com/assets/d...-12-12v1.0.pdf
So it was a new version of POLi, which explains why this just came up yesterday. On further investigation, it is the new version of POLi that was designed to enable use on Macs and tablets/smartphones.
Response from POLi:
http://www.polipayments.com/assets/d...-12-12v1.0.pdf
Dec 20, 2012, 1:12 pm
#43
Join Date: Dec 2010
Location: Wellington
Programs: Airpoints, Qantas, KrisFlyer, Mileage Plus
Posts: 88
Thank you for your enquiry about making payments using POLI.
Ian, I can confirm that using POLI from the Air New Zealand and Interislander website is not in breach of the Terms and Conditions for BNZ Internet Banking.
If you have any questions or if I can help further, please reply to this message or contact us on the details listed below.
Thank you for contacting BNZ.
Dec 20, 2012, 1:58 pm
#44
Join Date: May 2005
Location: SJC
Programs: NZ*G, QF NB, UA 1K, AA ExecPlat, IHG PlatAmb, HHonors Gold, SPG Gold, Marriott Gold, ZE1 PC
Posts: 2,636
Asked my bank [BNZ] via secure msg and their response is good enough for me to continue using POLI, especially now available for right minded [Apple] OS users.
Thank you for your enquiry about making payments using POLI.
Ian, I can confirm that using POLI from the Air New Zealand and Interislander website is not in breach of the Terms and Conditions for BNZ Internet Banking.
If you have any questions or if I can help further, please reply to this message or contact us on the details listed below.
Thank you for contacting BNZ.
Thank you for your enquiry about making payments using POLI.
Ian, I can confirm that using POLI from the Air New Zealand and Interislander website is not in breach of the Terms and Conditions for BNZ Internet Banking.
If you have any questions or if I can help further, please reply to this message or contact us on the details listed below.
Thank you for contacting BNZ.
Dec 20, 2012, 6:15 pm
#45
Join Date: Jun 2012
Programs: NZ G, QF Bronze
Posts: 326
Premium POLi
Maybe AirNZ can start charging $10 for premium access to POLi that gives special access to a premium website for payment.
If you are G or GE, and you try to pay using POLi within 48 hours you can do it for free (subject to availability and operational requirements).
But don't worry, the same benefits as before will be available to you. Since it sounds like POLi had lots of existing problems, you will continue to enjoy these problems after the introduction of Premium POLi.
Everyone who selects "exit" after their payment will have to pay an additional $25.
If you are G or GE, and you try to pay using POLi within 48 hours you can do it for free (subject to availability and operational requirements).
But don't worry, the same benefits as before will be available to you. Since it sounds like POLi had lots of existing problems, you will continue to enjoy these problems after the introduction of Premium POLi.
Everyone who selects "exit" after their payment will have to pay an additional $25.