They want to see my personal life before being my client

[Mr E]

Mandat said:

Presumably because at that level of vetting, they get the info from the bank directly?

Yes. At DV I don’t think you supply. They just look.

[anonymous-user]

It wouldn’t really bother me to be honest.

Previously I’ve had to provide bank statements for an estate agent to photocopy and then no doubt leave lying around their office, so this has got to be better than that?

I’m not particularly concerned with the issue of getting robbed/scammed as a result of someone seeing my bank statement (maybe I should be?)

And with regards to someone seeing the personal/private aspect of my bank statements, I’m a bit ‘whatever’ about it. If they want to see titillating information such as my balance or where I go for dinner, or what shops my wife buys her clothes from, then they can knock themselves out.

Edited by anonymous-user on Sunday 13th June 10:02

[Dog Star]

LunarOne said:

I'm reluctant to let them investigate as even my medical records don't reveal as much about my lifestyle as my bank statements do. What I absolutely object to is sending them via open unencrypted email, where they can be intercepted by every hacker aged 10 years old and above. To the person who posted the tinfoil hat - how do you think passwords get breached and you end up getting loads of spam email. Hackers have vast networks of bots scanning the internet for information useful for committing fraud.

This is pure comedy - how is it going to compromise your password? What will these shadowy “hackers” glean from your statements? Your name, address and account number? And do what? Or are your bank statements full of transactions to uberkinky or something? Zip keys

Are you just being massively silly to prove how much you take security seriously? You just sound paranoid and silly and like you’re trying to big up your IT skills. If I was at the receiving end of your ridiculous objections I’d be seriously wondering what you’d be like to work with and considering retracting the offer.

[Scabutz]

Kermit power said:

Scabutz said:

Sound strange to me. When I worked at the police as a Strawberry I went through SC clearing, but then the police did their own thing on top. One was a financial declaration, but it was all done on a form they never asked to see statements. The questions on the form weren't looking for massive detail either.

Regardless, your choice is easy. Show them the statements and take the role, tell them no to the statements and see what they do, of tell them to stick the job where the sun don't shine.

Strawberry Mivvy = Civvy. Civilian. Not a police office. Cake eater. Shiny arse

Coppers love a nick name

[LunarOne]

Dog Star said:

LunarOne said:

I'm reluctant to let them investigate as even my medical records don't reveal as much about my lifestyle as my bank statements do. What I absolutely object to is sending them via open unencrypted email, where they can be intercepted by every hacker aged 10 years old and above. To the person who posted the tinfoil hat - how do you think passwords get breached and you end up getting loads of spam email. Hackers have vast networks of bots scanning the internet for information useful for committing fraud.

This is pure comedy - how is it going to compromise your password? What will these shadowy “hackers” glean from your statements? Your name, address and account number? And do what? Or are your bank statements full of transactions to uberkinky or something? Zip keys

Are you just being massively silly to prove how much you take security seriously? You just sound paranoid and silly and like you’re trying to big up your IT skills. If I was at the receiving end of your ridiculous objections I’d be seriously wondering what you’d be like to work with and considering retracting the offer.

I'm afraid it's you who looks massively silly. Why don't you post your bank statements in full for the last three months? Don't worry, I'm sure all the hackers and people who commit identity fraud won't bother trying to use the information within for nefarious purposes. People can use your recent bank statements to obtain goods and services, take out credit in your name, open new bank accounts, and potentially destroy your credit rating or even take over your identity. If you don't realise that, more fool you.

I'm also guessing you don't remember this:
https://www.autoblog.com/2008/01/07/jeremy-clarkso...

[williamp]

Its also worth considering: any organisaton who still uses fax machines, or who cosiders them a safe transmission method tor personal data shouod be well avoided. If I was being cheeky, I would ask why they consider his a safe method.

[Dog Star]

LunarOne said:

I'm afraid it's you who looks massively silly. Why don't you post your bank statements in full for the last three months? Don't worry, I'm sure all the hackers and people who commit identity fraud won't bother trying to use the information within for nefarious purposes. People can use your recent bank statements to obtain goods and services, take out credit in your name, open new bank accounts, and potentially destroy your credit rating or even take over your identity. If you don't realise that, more fool you.

I'm also guessing you don't remember this:
https://www.autoblog.com/2008/01/07/jeremy-clarkso...

I really don’t think someone sending in a bank statement by email to a financial institution is at very much risk; there are plenty of easier targets and ways to commit identity theft.

The Clarkson thing is a red herring: high profile bloke basically issues challenge. What did you expect?

You seem totally incapable of assessing risk and making an objective decision. Are you sure you’re in the right job sector? You’re just flagging yourself up to the contract client as a massive weapon.

[hajaba123]

Seems like a massive over reaction to a non existent issue

[acd80]

take-good-care-of-the-forest-dewey said:

They don't even ask for bank statements during direct vetting. I. E. Vetting for access to Top Secret.

Seems a little OTT to me.

• Developed Vetting and yes, they do actually.

OP - I've seen this before with contract roles. It's one of their ways to see if you haven't been sent to prison for a short period. I don't agree with it one bit but mind you, I steadfastly refuse to take on any Inside IR35 roles.

I get your point about sending it in the clear and I agree with that. Just wait for them to come back with the argument that they can't receive encrypted emails for 'security purposes' .

[98elise]

take-good-care-of-the-forest-dewey said:

They don't even ask for bank statements during direct vetting. I. E. Vetting for access to Top Secret.

Seems a little OTT to me.

Do you mean developed vetting?

Yes they do (or did) and they go a whole lot deeper than a few bank statements. They also want to know about your porn habits, internet use, and all your email addresses.

[dmahon]

I wouldn’t give it to them on principle, but the thing about emailing them seems a bit overblown. What could anyone do with them in the one in a million chance they were intercepted?

Not wanting to email documents in 2021 is a strange hill to die on!

Edited by dmahon on Sunday 13th June 16:04

[Dog Star]

dmahon said:

I wouldn’t give it to them on principle, but the thing about emailing them seems a bit overblown. What could anyone do with them in the one in a million chance they were intercepted?

Not wanting to email documents in 2021 is a strange hill to die on!

This is the point I’m trying to make. I just cannot see the point in getting so het up about such a remote possibility.

OP - stop worrying and go and enjoy your new job.

[take-good-care-of-the-forest-dewey]

98elise said:

take-good-care-of-the-forest-dewey said:

They don't even ask for bank statements during direct vetting. I. E. Vetting for access to Top Secret.

Seems a little OTT to me.

Do you mean developed vetting?

Yes they do (or did) and they go a whole lot deeper than a few bank statements. They also want to know about your porn habits, internet use, and all your email addresses.

Sorry yes developed.

I've never seen a request for bank statements or email addresses.

The prurient lines of questioning - absolutely. And opinions on drugs.

[98elise]

take-good-care-of-the-forest-dewey said:

98elise said:

take-good-care-of-the-forest-dewey said:

They don't even ask for bank statements during direct vetting. I. E. Vetting for access to Top Secret.

Seems a little OTT to me.

Do you mean developed vetting?

Yes they do (or did) and they go a whole lot deeper than a few bank statements. They also want to know about your porn habits, internet use, and all your email addresses.

Sorry yes developed.

I've never seen a request for bank statements or email addresses.

The prurient lines of questioning - absolutely. And opinions on drugs.

The email addresses is on the application form, and...

Government Guidance for Vetting said:

Documents you need for interview

Vetting officers commonly ask applicants to bring the following documents to their interview (all documents must be original copies):

General documents:

evidence of identification, for example: birth certificate, passport (also required as evidence of travel), driving licence, identity card
utility bills (for proof of address)
Curriculum Vitae (CV)
Deed Poll or certificate of declaration in respect of any change of name
naturalisation or registration certificate
adoption certificate
marriage certificate/civil partnership documents
Decree Absolute or Nisi
separation or maintenance orders
HM Forces (HMF) discharge certificate.

Financial documents (for you and your partner):

bank statements for any current accounts (last three months)
statements for credit, charge and store cards (last three months)
statements for mail order accounts (last three months)
details and statements of all loans and hire purchase agreements
latest mortgage statement, including monthly repayments and remaining balance
details of any County Court Judgements
last three pay statements or payslips
documents and statements connected with savings and investments
any other documents which support or help to explain any figures on the Financial Questionnaire (FQ).

https://www.gov.uk/guidance/united-kingdom-security-vetting-applicant

[take-good-care-of-the-forest-dewey]

98elise said:

https://www.gov.uk/guidance/united-kingdom-securit...

Ignore me op. I'm obviously wrong.

[Captain Raymond Holt]

98elise said:

take-good-care-of-the-forest-dewey said:

They don't even ask for bank statements during direct vetting. I. E. Vetting for access to Top Secret.

Seems a little OTT to me.

Do you mean developed vetting?

Yes they do (or did) and they go a whole lot deeper than a few bank statements. They also want to know about your porn habits, internet use, and all your email addresses.

Was going to say, tell us about your full web activity, porn, forum usage, emails pretty much anything. Takes an age too.

[Far Cough]

Austin_Metro said:

Have they actually said why they need this? (Sorry if I missed it)

Yes , to decide suitability as to whether to offer him the job. Their job , their rules. If you don't like it then walk away.

If your having doubts at this early stage maybe the firm / job is not for you

[Mr Whippy]

Mr E said:

Taita said:

It would be EXTREMELY abnormal for any modern email setup to be like that.

Agree with encrypt / key thing but pop3 is not flying around the Internet as much as the old days. Especially not from any mainstream email provider.

Agreed. But unless you know otherwise, I presume comms paths are insecure.

Or, oops, “forward to all” by some muppet at the receiving end.

Sending anything like that via email isn’t the best idea.


On the job, why not just make up statements?

Trim out the fat. Look boring. If they’re having to ask then they’ll never know any different any way.

[Caddyshack]

hajaba123 said:

Seems like a massive over reaction to a non existent issue

I am with you on this one. I don’t think much fraud would go on within a bank where they steal info from a bank statement nor email hackers. People are right to be cautious but can be a bit over the top.

Most mortgage companies need 3 months bank statements and they have sophisticated credit bureau info. Santander are one of the rare lenders that do not look at bank statements but they do things like companies house searches etc for self employed so suspect they know a lot about banking anyway.

[LunarOne]

Caddyshack said:

hajaba123 said:

Seems like a massive over reaction to a non existent issue

I am with you on this one. I don’t think much fraud would go on within a bank where they steal info from a bank statement nor email hackers. People are right to be cautious but can be a bit over the top.

Most mortgage companies need 3 months bank statements and they have sophisticated credit bureau info. Santander are one of the rare lenders that do not look at bank statements but they do things like companies house searches etc for self employed so suspect they know a lot about banking anyway.

It's not within the bank as much as the transiting the internet part I'm worried about. As a test recently, I opened a port 22 on my home firewall and directed it to a Linux virtual machine. At first, nothing happened, but within 25 minutes I started getting connection attempts from Vietnam with varying usernames like admin, root and similar. Within an hour my VM was being hammered with continuous connection attempts from across the globe. For the most part, email is generally passed from host to host in unencrypted form until it reaches the recipient's mail exchanger, and it would be very easy for a determined hacker to intercept all email destined to a mail exchanger. I'd rather my bank statements didn't fall into the hands of those with nefarious intent, no matter how boring my life is.

Anyway, the company in question have agreed to my proposed encryption method and I have supplied the data they requested plus the encryption key provided to them separately. I'm still not particularly thrilled to give them my private information, but I feel happier that I have struck a balance between security of my information and their requirements.

Thanks everyone for your input!