he doesn’t quite seem to get the full implications of his experience, since it might just be shoulder surfing. Which he acknowledges. I do think it’s enlightening as to what a relatively average person might be thinking, but the part that really engages the brain: the comments afterward. Almost all are calling for banks and other FIs to be held responsible – legally – for his account getting cleaned out. I’m personally appalled at the lack of response from law enforcement and glad that he got his money back, but it has scary implications if people feel they can absolve themselves of responsibility.

Of course, if the banks (et al) want consumers to use online systems, then they should be finding ways to further security. Guess I’m going to end up shouting about it more at work… but better me shouting than packs of lawyers.