Friday, June 11, 2010

Online Banking with ICICI (PART 1)

I can't help it, but I keep having continuous problems with using the on-line banking website of ICICI.
I think I'm entitled to call myself an experienced computer user, but despite all my endless efforts and my nights of studying the on-line banking system of ICICI bank, all these efforts have been in vain till now.
I had to apply 6 times (this is not an exaggeration from my side!) for new login credentials before somebody at ICICI found out that their website is not supporting Mozilla Firefox ! It took 4 months before I finally could log in.
I found out afterwards that it IS supporting Firefox after the first login however.

Since then my experiences with ICICI on-line banking have been worrisome. I try constantly to pay my bills electronically, like the lease every month. Let's follow the first step in this process: logging in.

I go to www.icicibank.com. The result is this impressive screen:

Forced by my never-ending quest for money, first thing that catches my eye is the 5000rs cash back offer. For a short moment my mind already dreams about offering my wife a good meal-with-meat in one of the many hot spots in Gurgaon. I will make quite an impression on her if I will pay the bill from my own pocket. So I start to read. Damn, again I need to spend much more money first before getting the 5k. Based on experimental evidence I decide to not ask my wife for that money. I'll have to find other ways to impress her.

After reading all the options in the screen and doubting a bit which button will open the Gates of Eden, I realise suddenly what I was about to do: paying a bill asap.
So I press the "Personal" button under "Login" at the left side of the screen, as I don't consider myself in a corporate state today.
What would you expect? Right: a login screen where you can input your credentials.

Not at ICICI bank though. This is the page that shows up:

"Important alert" the message screams into my face. I read it cautiously since it's important. Wow, I got to hurry myself if I want to pay my landowner. ICICI will finally upgrade their on-line banking system. Huh ? Upgrade ? No: only maintenance they will do. And they need 18 hours for it ! Tomorrow already ! So I really need to hurry up. My deadline starts to count before I even got started... Even finishing this blog will be impossible, as I have so much to say about the ICICI banking system.

Then there's the safety notice. Hmmm, what to think about thàt? Do they have safety issues perhaps ? It seems so. Is it dangerous to enter this site ?

I don't know what kind of personality you, reader, have, but I myself don't like to have to click twice on a "login" button. To me, this is like I want to enter a restaurant where the guard holds you, tells you that tomorrow they're closed but that you'll be safe with them, and then asks you if you still want to enter the restaurant now that you know that they do everything they can to ensure your safety. I would spontaneously think then that something must be wrong entering that place.

"Tony, keep your nerves. You were going to pay somebody and you'll be able to do it in a safe way. Even if you refuse the 5000rs we would like to give you". So I press "Continue to login".

A separate pop-up appears.
"WHAT ? A POP-UP ? Is this safe ?"

Again an important Security Notice from ICICI. I need to check 3 security controls.
The first step asks me to check the URL. Seems to be OK. The URL in my browser shows exactly what is described, but what security check is this ? Any pirated popup could tell you: "Ensure the following before logging in: 1. URL address begins with http://...." after which they fish for your credentials. The security-aware reader will have noticed that I deleted the "s" from "https://"

I'm becoming very worried now ... what kind of security advice is this?

"Let's be brave, Tony. You've come to India to live here and you cannot succeed without trusting the Indian ways of doing the things. So, don't hesitate and go to the second security check."

"2. DO NOT ENTER login or other sensitive information IN ANY POP UP WINDOW."
WHAT ? This login-pop-up is telling me NOT TO ENTER my credentials in any pop up window ? They must be kidding, right ?

As I'm dead sure now that some Russians are waiting for me at their side of the cable to enter my login and other sensitive information into this pop-up, I quickly press the QUIT button.

I think I'll write a cheque.

(blog to be continued when I feel ready to climb further this Himalayan website)