Starling top, Tesco Bank flounders in Which? online banking security survey

An online banking security survey has revealed bank failings.

January 7, 2021
Starling top, Tesco Bank flounders in Which? online banking security survey
Ian Lewis

Written By

Ian Lewis

 
CompareBanks is reader-supported. When you click through some links on our site, we may earn an affiliate commission. Learn more

Starling Bank has come top of a Which? survey into the security of online banks, with major names such as Tesco Bank, TSB and Santander at the bottom.

The study carried out by the consumer website, in conjunction with research group 6point6, looked at how safe the online banking measures were for customers, including a number of tests such as how secure the login process was, whether multiple users could access an account at the same time and whether the service was automatically logged out when users visited other websites.

…a number of tests [were looked at] such as how secure the login process was, whether multiple users could access an account at the same time and whether the service was automatically logged out when users visited other websites.

The study was primarily focused on web versions of online banking, but apps were also scrutinized as part of the process. The tests carried out on mobile banking apps were done to see whether they would run on emulated or rooted devices, which are more prone to security issues.

Tesco Bank was the worst rated, specifically for not logging customers out when they left the site before returning, and for allowing two computers on completely different networks to access the account at the same time.

Tesco Bank told Which?: “The security of our customers' accounts is always our top priority. Customers can be assured we have robust security measures in place to protect them and their money.”

“Not all of these controls are obvious or visible to customers, but each of them serves to protect customers and all are in line with industry standards. We use the latest technology to protect and manage the security of online banking and our mobile banking app and all our controls are constantly reviewed to ensure they remain fit for purpose, giving customers peace of mind they can bank safely and securely with us.”

We use the latest technology to protect and manage the security of online banking and our mobile banking app and all our controls are constantly reviewed

Tesco Bank spokesperson

TSB’s flaws were around the failure of the bank to adhere to regulations on Strong Customer Authentication (SCA) that were introduced in March 2020. While these regulations require a second stage for banking logins, such as a code sent to a user’s phone, TSB has not yet rolled this out to their desktop site.

Santander were third-from-bottom, with issues around those authentication checks when a customer logs in — it was found that they could be bypassed in certain scenarios, potentially allowing fraudsters to access accounts with limited information.

Santander defended its position and explained that only “customer-facing elements of security” were covered by the study, while they have many more measures in place that customers don’t see.

Behind Starling Bank in first place, which scored 85% in the tests, Barclays, First Direct and HSBC were tied for second place, passing 78% of the requirements. At the bottom of the table, Tesco Bank only scored 46% in the tests.

In order, the banks placed as follows: Starling (85%), Barclays, First Direct, HSBC (all 78%), Natwest/RBS (76%), Nationwide (74%), Metro Bank (71%), Virgin Money (68%), Lloyds/Halifax/Bank of Scotland (67%), The Co-operative Bank (65%), Santander (62%), TSB (51%) and Tesco Bank (46%).

In the mobile banking app world, Monzo, Nationwide and TSB all worked when run on emulated or rooted devices, although Monzo disagreed with the findings, arguing that other banks’ emulator detection was unreliable and did not work consistently and that it wasn’t a security issue anyway due to the login requirements.

Related Articles

Will Energy Prices Go Down?
Will Energy Prices Go Down?
Energy prices have been on a wild ride over the last few years, after remaining...
April 12, 2024
What's going on at Metro Bank?
What's going on at Metro Bank?
It launched in 2010 to much fanfare with vibrant bank branches and a “chief canine...
November 30, 2023
How The Latest UK Tax Cuts Impact You
How The Latest UK Tax Cuts Impact You
After weeks of speculation on what the UK chancellor Jeremy Hunt was going to announce...
November 27, 2023
UK bank closures: Who's shutting the most branches?
UK bank closures: Who's shutting the most branches?
Across the UK, once-bustling high streets are pockmarked with closed ba...
November 21, 2023

Mentioned Banks

About Santander Santander UK is a British bank. Though it is a British company and autonomously managed, it is entirely owned by the Spanish Santander Group. Santander is one...
Learn More
Which? Banking Brand of the Year 2023 - The Winner Winning Britain's Best Bank from 2018 until 2021, and Best Current Account Provider from 2018 until the most recent in 2022,...
Learn More
About Bank of Scotland Bank of Scotland is a commercial clearing bank based in Edinburgh. Not to be confused with Royal Bank of Scotland, it was established in 1695 and is one...
Learn More
About Barclays Bank Barclays is a British multinational investment bank and financial services company. It was founded in 1690 and is headquartered in London. Barclays originated...
Learn More
About The Co-operative Bank Based in Manchester, United Kingdom, the Co-operative Bank is a large retail and commercial bank. It is the seventh biggest lender in Britain and the majority...
Learn More
About HSBC Bank HSBC is a British banking and financial services company. It is the largest bank in Europe and the seventh largest bank in the world. The bank originated in Hong Kong...
Learn More
About Lloyds Bank Lloyds Bank is a British retail and commercial bank. One of the ‘Big Four’ clearing banks, it was founded in Birmingham in 1765. It is the largest retail bank...
Learn More
About Metro Bank Metro Bank is a retail bank based in the United Kingdom. Founded in 2010 by Vernon Hill and Anthony Thomson, it is the first new high street bank to open in the...
Learn More
Part of one of the world’s biggest supermarket chains, Tesco Finance was launched back in 1997. The Head Office is based in Edinburgh, and although there were bricks and mortar branches...
Learn More
About TSB TSB is a UK-based retail and commercial bank. It is a subsidiary of the Sabadell Group. The TSB we know today came to be in 2013, formed from Lloyds TSB Scotland PLC...
Learn More
About Virgin Money Virgin Money is a bank and financial services company based in the UK. Originally launched as Virgin Direct Personal Financial Services in 1995, its second incarnation...
Learn More
About First Direct First Direct is a retail bank based in the United Kingdom, headquartered in Leeds. It is a telephone and internet-based bank, with no physical branches, and...
Learn More
About Halifax Formerly known as Halifax Building Society, Halifax is a British bank. It is named after the town in West Yorkshire where it was founded in 1853 as a building...
Learn More
About Nationwide Nationwide is a British building society and mutual financial institution. Headquartered in Swindon, it has additional offices in Glasgow, Bournemouth, Northampton...
Learn More