newyorklondon

I'm not sure if this is related to the recent security breach or not. If so, this post might better be moved to a different thread.

In order to access my BAEC account I'm being asked to validate my identity via two-step authentication (after submitting correct log-in information, a one-time unique verification code is sent via text message or e-mail, which needs to be entered to complete the log-in procedure).

The two channels for authentication appear correct (mobile number and e-mail address), but the verification code is never delivered by either channel, thus I am denied access to my account. Yes, I've checked my spam folder.

Does anyone on here have any ideas on how to get this resolved, or is anyone else in a similar situation?

Thanks!

Amygdala28

Phishing attack!
BAEC has no 2 factor authentication.

newyorklondon

That was my first thought, but I'm pretty certain it isn't. Unless the website is masked cleverly, it begins: https://www.britishairways.com/travel/loginr/public

Here's a screenshot:

omk298

barneyb

I had this last week and the code just would not come though. Ended up phoning a few times, wasted a few days with useless people telling me to try latter / different PC / clear cookies etc.

Eventually got an agent that could understand the problem. To unlock the account they had to raise an audit request, and then about 24 hours latter I got an email from audit asking some security stuff and then they eventually unlocked my account.

All strange and very annoying and time wasting... The other half got the same two factor authentication, but their code came through first time via text.

newyorklondon

Thanks, I'll do that and report back. I wonder if it's a new security feature which has not been implemented correctly.

Amygdala28

I get a different, that is the normal log in screen on that link. No two-factor authentication for me.
???
BA IT!

newyorklondon

Yes, that bit of the address links to the standard log-in screen. I only supplied the beginning of the address, in case the long alphanumeric code which completes it contains sensitive information.

GBobon

maybe some sort of a/b testing is happening there

UKtravelbear

'd prefer some proper authentication rather than the ridiculous 'select all XXX from the images' they make you do at times.

kaka

thats just to make sure you're not a bot to kill off their system.

fruitcage

This is not new. I had exactly this over a year ago. Not at all clear what triggers it.

I also had a few days of faffing about before a code actually arrived.

UKtravelbear

Egoldstein

I once had 24 different sets of images to go through, not just one or two.

Tobias-UK

I have had the 2-step authentication, it is not required for every login - when I was selected the SMS message was sent immediately and I was logged in in a matter of seconds. SInce this was introduced I have not been required to beat the CAPTCHA challenge - thank goodness.