Go Back  FlyerTalk Forums > Miles&Points > Credit, Debit and Prepaid Card Programs > Capital One | Rewards Miles
Reload this Page >

Capital One "security" changes makes international account access difficult

Community
Wiki Posts
Search

Capital One "security" changes makes international account access difficult

Thread Tools
 
Search this Thread
 
Old Feb 16, 2019, 3:48 pm
  #16  
 
Join Date: Sep 2008
Posts: 7,875
Originally Posted by rrgg
Can you try a google voice number? Then you can make it show up in email or hangouts using data only.
As far as I know google voice cannot do text (you mean attaching a google voice number to another number, not getting google fi sim I presume).
If I'm wrong let me know! as I'd love to do that
s0ssos is offline  
Old Feb 16, 2019, 3:50 pm
  #17  
 
Join Date: Sep 2008
Posts: 7,875
Originally Posted by tmiw
How does eliminating an option reduce complaints?

Also, I feel like email is easier to hack than SMS. At least with the latter you theoretically need a valid SIM linked to the phone number on the account (even if it's simple for attackers to social engineer their way to getting your number onto their phone).
Nope
https://motherboard.vice.com/en_us/a...2fa-is-screwed
s0ssos is offline  
Old Feb 16, 2019, 3:52 pm
  #18  
 
Join Date: Sep 2008
Posts: 7,875
Originally Posted by cestmoi123
2FA with SMS is wildly more secure than just userid and password. An authenticator app or a key is better still, but 2FA with SMS is a huge improvement, particularly for people who (as a lot of people do) reuse passwords. For someone who does reuse passwords, 2FA via email is a LOT less secure than 2FA via SMS.
I don't know about that. Email is becoming more secure, in certain cases. Requiring more authentication to get in to gmail, for example
s0ssos is offline  
Old Feb 16, 2019, 7:34 pm
  #19  
 
Join Date: Jul 2006
Location: NYC
Programs: DL PM, Marriott Gold, Hertz PC, National Exec
Posts: 6,736
Originally Posted by s0ssos
I don't know about that. Email is becoming more secure, in certain cases. Requiring more authentication to get in to gmail, for example
Yes, if you have 2FA for your gmail, then maybe that's better, but if someone can compromise your 2FA for gmail, they can also presumably compromise the 2FA for whatever account you're having 2FA emails sent to gmail.
cestmoi123 is offline  
Old Feb 16, 2019, 7:35 pm
  #20  
 
Join Date: Jul 2006
Location: NYC
Programs: DL PM, Marriott Gold, Hertz PC, National Exec
Posts: 6,736
Originally Posted by EasternTraveler
Wildly?
Rabidly, insanely, ludicrously, mind-bogglingly, etc.

Yeah, maybe I should have just used "much."
EmailKid likes this.
cestmoi123 is offline  
Old Feb 16, 2019, 9:01 pm
  #21  
 
Join Date: Sep 2008
Posts: 7,875
Originally Posted by cestmoi123
Yes, if you have 2FA for your gmail, then maybe that's better, but if someone can compromise your 2FA for gmail, they can also presumably compromise the 2FA for whatever account you're having 2FA emails sent to gmail.
Actually, google does a little bit more than that. If they suspect something suspicious they'll ask you to confirm via another method before they let you in. I don't have any 2FA setup for google.
s0ssos is offline  
Old Feb 20, 2019, 6:32 pm
  #22  
 
Join Date: May 2009
Location: South Park, CO
Programs: Tegridy Elite
Posts: 5,678
Originally Posted by randysea
This was annoying but doable when they would email me the code. Starting a few weeks ago, they dropped the email option. Now the only way to get the code is by phone or a text message. The problem for a frequent traveler like me is that I use a different phone in different countries. Today I am in the US, so I can access Cap One. Next week I'm in Canada. A few weeks later I'll be in France. In each country my phone numbers will be different. I will not be able to get the code.

A Cap One customer service person said if I was willing to do online banking from my phone, I would still need a 6 digit code but then I could get it by email. (Seems odd, but that's what she said.) I do not want to do any online banking from my phone.
I think you're in a very tiny minority where your cell phone number is different at every location, so there isn't probably much that C1 is going to do about it. I do find it odd that if C1 thinks emailing the code is less secure, that they would still keep that as an option for mobile banking. Anyway, speaking of which, I use mobile banking for my primary banks and in many travel locations it would be a hassle to have to find a regular computer to do it. Might want to reconsider, is all I'm saying.

Originally Posted by randysea
I quoted the "unrecognized computer or device" line because it is sort of a joke in my experience with Capital One. If I log off and immediately log back on again, or even switch between Cap One accounts while I am logged on, I get that message.
When my wife and I still had a Capital One 360 savings account and an investment account (that we had from back in the good old ING Direct days) and my wife briefly had a C1 credit card, the above was indeed beyond annoying. Never had the same problem with any other online service - bank or otherwise.
84fiero is offline  
Old Jul 16, 2020, 9:04 am
  #23  
 
Join Date: Jul 2020
Posts: 1
So mad. I don't want 2 step verification

So angry. I accidentally pushed something on my cell phone last night and now I have to enter a texted pin code every time I want to use the capital one app. I have fingerprint security already set up. Really hate this 2nd step verification. I called and they can't remove it. ........!!! So angry.

Last edited by EmailKid; Jul 16, 2020 at 9:54 am Reason: Not a good start on FT to have first post edited due to language
Aubrey Campbell is offline  
Old Sep 3, 2020, 9:40 pm
  #24  
 
Join Date: Sep 2020
Posts: 1
No longer recommending CapitalOne to travelers. It's a major hassle. They force you to use the app (must be confirmed with US phone number) and confirm purchases (with a text to a US phone number registered in your name). When I talk to customer service, they act like there's no one left alive who doesn't have a smartphone or a US phone number. Try to explain that I'm living abroad, I'm given the cold shoulder.

This used to be one of the best banks for travelers (just a few years ago). No more.

Curious, can anyone recommend a good bank for travelers that DOESN'T require an app or US tn?
SPN Lifer likes this.
indisPC is offline  
Old Sep 3, 2020, 9:59 pm
  #25  
Original Poster
 
Join Date: Nov 2009
Posts: 80
If you can qualify, USAA is a great bank, as well as a top insurance company. I have had no problem using their credit and ATM cards and logging in when traveling. I think they may have asked for an additional security check, but they still will do it by email.

I also use Amex Delta when traveling, and even occasionally Amex Blue Cash Preferred. No problems from outside the US, but you have to pay for their credit cards.

The indifference of Capitol One and other credit card issuers to people who travel (or used to!) seems amazing. They advertise that they don't have foreign transaction fees.

What is also amazing is that none of the credit card review sites I've looked at even mention this issue. They do talk about whether there are foreign transaction fees.
randysea is offline  
Old Sep 3, 2020, 11:08 pm
  #26  
 
Join Date: Aug 2007
Posts: 263
Unhappy

Originally Posted by indisPC
(with a text to a US phone number registered in your name). When I talk to customer service, they act like there's no one left alive who doesn't have a smartphone or a US phone number.
This bit I've bolded is also becoming more prevalent but also more easy to trip over with the rise of prepaid mobile phone services. (I don't mean things like Google Voice or TextNow, which are VoIP numbers and are also, falsely, seen as "more fraudulent," I mean buying proper mobile phone service but from a reseller such as Ting or Cricket or the like.) Many prepaid carriers simply do not care what name you put in when you register a service and some don't ask at all. Very few generate a "bill" with an address on it.

Capital One and Chase have both started insisting that my mobile number is not "mine" and refusing to use it. I have also been told by a credit union that if I am not on a "normal service with a normal carrier" then their validation system flatly won't work. The IRS' "verification" system is similar. My spouse, who has not had a mobile number under their name or billing responsibility in many years (we've been on family / joint plans with each other, usually in my name, for as long as we've been married) has been in the same boat for longer.

I'm becoming quite frustrated with the idea that a mobile number is a unique identifier and all of the assumptions made to get to that point, especially when those assumptions aren't communicated in advance and even worse when the policy--as here with Capital One--is changed out from underneath me with no warning in advance.
SPN Lifer and _kurt like this.
wesmills is offline  
Old Sep 5, 2020, 9:16 pm
  #27  
FlyerTalk Evangelist
 
Join Date: Jan 2005
Location: home = LAX
Posts: 25,933
Originally Posted by 84fiero
I think you're in a very tiny minority where your cell phone number is different at every location
It's not a very tiny minority if you think about what it's an effect of. Many people either don't use their phone (except perhaps over WiFi) overseas, or buy local SIM cards, because either their US-based carrier doesn't support calls overseas (some discount carriers don't), or their carrier (or plan) has high "roaming" fees making it much cheaper to buy a local SIM card (which gives the phone a new number, right?) than to use "roaming".

But apparently Cap One is assuming everyone either doesn't travel overseas, or travels for short times and doesn't need to access their bank account while there, or pays for "roaming" fees overseas.

Cap One is famous for not really understanding travel (dating back to their infamous mess of a "status match" promo, where they thought you could get a one-page statement from your airline of just the miles you earned from your credit card that year), so it makes sense that they would be the ones to do something like this while claiming to know about "travel".
SPN Lifer and Nagasaki Joe like this.
sdsearch is offline  
Old Nov 26, 2021, 7:04 pm
  #28  
 
Join Date: Nov 2021
Programs: IHG, Marriot, Emirates
Posts: 121
Originally Posted by Nagasaki Joe
Any American expats here who have received the Venture X card and found a way to use the card overseas? If you live abroad and don't subscribe to a US mobile phone service or have a US phone number to receive text messages (SMS) for 2FA you seem to be out of luck. I was able to set up my account by clicking on a link that says I don't currently have access to a mobile phone but to reenter my account they ask for a number and the format of their request does not allow foreign phone numbers. This is my first account with Capital One, so I didn't know they won't let you use your email address to be used for 2FA. I've never had a problem with this with Amex or Chase. I found a thread on FT discussing the difficulty of US citizens just traveling abroad on vacation being able to access their account overseas and that Cap 1 customer service cannot help them. Most online SMS and virtual phone services cannot receive SMSs from financial institutions and banks but I hear that there are a few services that can receive "shortcodes" used by Cap 1 that work but I haven't found them yet. Has anyone else found a solution?
I use my google voice number with no issues. It’s free and can be used overseas. I have no issues whatsoever accessing my Cap 1 account with it.
Moh20 is offline  
Old Nov 26, 2021, 7:21 pm
  #29  
Four Seasons Contributor BadgeMarriott Contributor Badge
 
Join Date: Jan 2017
Location: NGS
Programs: UA Silver, ANA MC, HH Diamond, Hyatt Discoverist, Bonvoy Plat, IHG Plat, Shangri-La GC, Hertz PC
Posts: 1,233
Originally Posted by Moh20
I use my google voice number with no issues. It’s free and can be used overseas. I have no issues whatsoever accessing my Cap 1 account with it.
You need a US phone number to set up Google Voice, which I don't have. This is the message you get when you try to set up Google Voice:

"You must have an existing US-based mobile or landline phone number to qualify."

Do you live overseas? Does Google Voice receive text messages (SMS) without problem from Cap 1? Almost everything I've read online says that Google Voice cannot receive SMS from banks and financial institutions.

Last edited by Nagasaki Joe; Nov 26, 2021 at 7:30 pm
Nagasaki Joe is offline  
Old Nov 26, 2021, 7:28 pm
  #30  
 
Join Date: Nov 2021
Programs: IHG, Marriot, Emirates
Posts: 121
Originally Posted by Nagasaki Joe
You need a US phone number to set up Google Voice, which I don't have. Do you live overseas? Does Google Voice receive text messages (SMS) without problem from Cap 1? Almost everything I've read online says that Google Voice cannot receive SMS from banks and financial institutions.
I do live overseas. It’s true that google voice does not receive sms from banks but for some reason it works with Cap 1 and Discover.

Also, some banks allow the verification to be done through a phone call.
Moh20 is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.