Is online banking safe using proxy/vpn?

[AbeSurd]

I've checked the help sections of the websites of 3 major UK banks re online security. None of them warn against using proxy or vpn services to bank online. In fact they don't even mention proxy or vpn services.

So am I safe to assume it's safe to use proxy or vpn services with online banking?

Thanks.

[KhunBENQ]

As the online banking will always be going via a secured connection (hhtps) there is no special risk involved when using a VPN.

The traffic from you to the VPN server will be kind of "double encrypted" (encrypted https data is encrypted once more according to the VPN servers security mechanism).

At the VPN server the datastream will be decrypted to its original https encrypted version and forwarded to the banks server.

So the VPN server will not be able to see any unencrypted traffic between you and the bank.

There is no obvious extra security added by using a VPN for https data as far as I can see.

The general quality of the https encryption depends on what your bank server uses.

You would have to tell which banks you use to get a statement on that.

Or enter the URL here:

https://www.ssllabs.com/ssltest/

The final judgement on what is still secure or not could only be given by very few people at the NSA. Top secret

Proxy: basically the same. Its just one other network component/server (of typically 15 or more) that your encrypted data goes through.

Edited April 25, 2015 by KhunBENQ

[AbeSurd]

As the online banking will always be going via a secured connection (hhtps) there is no special risk involved when using a VPN.

The traffic from you to the VPN server will be kind of "double encrypted" (encrypted https data is encrypted once more according to the VPN servers security mechanism).

At the VPN server the datastream will be decrypted to its original https encrypted version and forwarded to the banks server.

So the VPN server will not be able to see any unencrypted traffic between you and the bank.

There is no obvious extra security added by using a VPN for https data as far as I can see.

The general quality of the https encryption depends on what your bank server uses.

You would have to tell which banks you use to get a statement on that.

Or enter the URL here:

https://www.ssllabs.com/ssltest/

The final judgement on what is still secure or not could only be given by very few people at the NSA. Top secret

Proxy: basically the same. Its just one other network component/server (of typically 15 or more) that your encrypted data goes through.

Thank you.

If I understand you correctly you're saying a vpn or proxy connection from my laptop in Thailand to my UK bank's online banking system shouldn't cause me any security worries. That's good to know. I was worried that the proxy or vpn service could somehow steal my bank account username, password etc.

Incidentally, I'm not looking for 'extra security'. My reason for possibly wanting to use such a proxy/vpn connection is only in order to fool my bank into thinking I'm in the UK.

Are both proxy and vpn equally effective for that?

Thanks again.

[KhunBENQ]

Hard question. Also depends on how hard the bank server tries to find out.

Proxy:

There are different types of proxies.

http://whatismyipaddress.com/proxy-server

Most free proxies are easily recognizable.

Connect via proxy and open this:

http://whatismyipaddress.com/proxy-check

VPN: not that easy to recognize, but not impossible.

A method to check,

connect via VPN and then open:

http://whatismyipaddress.com

In the list under "General IP information" there is an entry "Services".

If there is anything different from "None" then it could likely be recognized as a proxy or VPN.

If you see "Network sharing device" then it is obviously not a private internet connection (address).

Edited April 25, 2015 by KhunBENQ

[GinBoy2]

Just outta curiosity, why do you think the bank cares where you are, and why do you need to 'fool' them? Many of us have bank accounts in different countries and live in Thailand.

VPN, unless the bank is actively scrutinizing IP address to see possible VPN's, all they will see is a UK IP address.

Soooo, unless you're in some money laundering scheme or tax fraud, I can't actually think why you are worried about this.

[ukrules]

I access my UK bank account (Lloyds) from a Thai IP address all the time and have been doing so for years and I've never had any issue at all.

I've been back to the UK only once in the last 5 years and that was only for a few days.

[AbeSurd]

Just outta curiosity, why do you think the bank cares where you are, and why do you need to 'fool' them? Many of us have bank accounts in different countries and live in Thailand.

VPN, unless the bank is actively scrutinizing IP address to see possible VPN's, all they will see is a UK IP address.

Soooo, unless you're in some money laundering scheme or tax fraud, I can't actually think why you are worried about this.

Because one of my UK banks has suddenly got very anxious to talk to me about 'security' - and I can think of no other reason. The account has run smoothly since inception. I'll know more when I have a phone call with their 'special team' in a week's time.

Another reason I want to know more about proxies and vpns is that a lot of UK accounts require you to be a UK resident. If they're detecting that, year after year, I'm spending most of the year in Thailand (which is the case) they may want to question my eligibility for the account.

Having said that I agree with you in that I've done online banking to the UK from Thailand for a number of years now with no proxy, no vpn and no problem.

[AbeSurd]

I access my UK bank account (Lloyds) from a Thai IP address all the time and have been doing so for years and I've never had any issue at all.

I've been back to the UK only once in the last 5 years and that was only for a few days.

Do Lloyds have a UK postal address or a Thai postal address for you?

Is your Lloyds account 'for UK residents only'?

In my case it's HSBC who are hassling me.

Thanks.

[MJKT2014]

Nat West allows me to use a Thai address as my main address since moving here.

[Pib]

Just use https connection/encryption....that's what the banks automatically provide when you connect to them...if the banks are happy with https security you should be also....no need for a connection via proxy/VPN unless you want to display a different IP address to your bank.

[bendejo]

Sometimes when using a VPN, a website may block me, with a notification that my "IP address has a bad reputation."

When trying to access some financial institutions and their server notices you are trying to log in from a location no where near where you usually log in, some sort of alarm may go off that will require a second level of authentication, perhaps even a telephone call. This may be a pain in the arse but if it blocks a log in attempt from Nigeria...

Just because you are not within the physical confines of the UK does not mean you you are not a resident, you can be working abroad or on extended holiday If you have a legit UK address there's no reason for them to scrutinize.

[AbeSurd]

Nat West allows me to use a Thai address as my main address since moving here.

Yes, in the past I've read other TV members saying the same about their UK accounts.

But it may depend on what account you have? The 4 Nat West current accounts in the link below all specify "You need to be aged 18 or over, and UK resident to apply":

http://personal.natwest.com/personal/current-accounts/compare-current-accounts.html

There again, those last 2 words "to apply" would seem not necessarily to preclude an account holder from moving abroad subsequently after account opening.

[KhunBENQ]

There again, those last 2 words "to apply" would seem not necessarily to preclude an account holder from moving abroad subsequently after account opening.

Can not speak for UK, but comparing with Germany.

I have two German bank accounts.

Both have no problem specifying a Thai adress as contact.

Also never encountered a problem accessing online banking from Thailand.

BUT!

It is completely impossible to open a new account while being in Thailand.

Some ridicolous rules about money laundring or whatever led to the situation, that even the notary service at the embassy is not allowed to notarize your ID for opening an account.

So one of the important points before moving to Thailand is caring about your account(s) in the home country.

[KhunBENQ]

What is the situation when trying to open a UK bank account while residing in Thailand?

Anyone knows?

There is one interesting development for identification that I read about.

Kind of a video session (Skype like), answer some questions and hold your passport to the camera.

Edited April 26, 2015 by KhunBENQ