Bank Of America / Trusteer

I tried to get into my BOA credit card online account today and got a message saying that online banking is not available to me at this time. I call BOA and the first person who answers tells me there’s a fraud alert on my account so I have to call a different number. I call that number and I’m told that BOA detected malware on my computer and given instructions about downloading Trusteer and running a virus scan.

The phone numbers are legit and so is the Trusteer Rapport - but is it really possible for BOA to detect malware on my computer? It’s entirely possible that the person on the phone really doesn’t understand what happened - but that’s what he told me and it just seems strange to me.

Sounds highly suspicious to me. Where did you get the number you originally called?

I doubt they detected malware on the computer, that was probably the bank employee speculating. But Trusteer Rapport is a legit software whose purpose is to better authentify the client computer (or phone, etc.) and to ensure that you’re connecting to the real bank’s site. And Bank of America apparently supports it. So it’s possible that the bank would require it for a particular account if there’s been some weird activity on the account.

From the actual BOA website and I Googled it and the results say it’s legit and the person I spoke to was able to reset the userid. I’m confident the number wasn’t a scammer.

This is more or less what I thought

Yeah, I can’t imagine a website running malware detection on your computer, but it could detect if the settings in a cookie or configuration file had been changed in an unexpected way and that sets off the online access restriction. Just a guess, though.

Are you using a VPN? I could imagine some sensitive sites, especially banks, being unhappy with clients coming from an address that indicates they are hiding their actual address. (Netflix is another site that dislikes VPNs).

That must be what it is - after reading your reply, I looked around and it seems that BOA blocks VPNs. Thanks!

I was thinking userID , password being entered too soon and too fast for a human.

And what’s “too soon and too fast” for web browser autofill?

No idea, It was speculation.