TLDR
In 2024, a UK financial institution blocked a legitimate customer's account simply because their device detected a different WiFi network while traveling. Even with GPS disabled and mobile data off, the bank's risk engine flagged the transaction as fraudulent based on BSSID discrepancies.
The Incident
In 2024, a financial institution in the United Kingdom blocked the account of a legitimate customer who had traveled to a different city for a conference. The user had not used a VPN, had not altered their device settings, and had not visited any known malicious sites. Despite the fact that their GPS was disabled and their mobile data was off, the bank's risk engine flagged the transaction as fraudulent. The system detected a discrepancy between the user's declared home network and the active network they were connected to.
What is BSSID Collection?
BSSID stands for Basic Service Set Identifier. It is the unique MAC address of a WiFi access point. While users often focus on IP addresses for location tracking, banks are increasingly utilizing BSSID collection to map your home WiFi environment. This allows them to verify your physical location with high precision, even when standard location services are turned off.
Why This Matters
This incident highlights a significant shift in how financial institutions handle KYC (Know Your Customer) protocols. By mapping your home WiFi, banks can determine if you are physically present at your registered address or if you are traveling. As mentioned in the source article, this technology allows for real-time fraud detection but also raises serious privacy concerns regarding the surveillance of everyday home networks.
Conclusion
The ability of banks to map your home WiFi via BSSID collection represents a new frontier in digital surveillance and security. While intended to protect users from fraud, it demonstrates the extent to which financial data can be leveraged to monitor personal habits. For more details on this specific incident and the implications for user privacy, please refer to the original article.
