Bank to Bank transfers, linking external banks

 

One of my banks recently changed their online platform provider/software. This in and of it self nothing new, I've had many banks do this in the past.

One feature of online banking is the ability to link external accounts to transfer funds in either direction. In the past (and with all other banks I have accounts at) this is done by the bank doing the linking performing an initial transfer of 2 amounts less than a dollar (known as trial deposits). A few days later once these deposits hit the external account, you return and verify the amounts. This method has worked for years (at least 2 decades that I can think of).

The bank in question above (CIBC) has now partnered with PLAID to handle the verification. The flow has changed such that PLAID (a third party) now REQUIRES you to login to the external account, including authenticating any 2fa/sms verification in place. Effectively, this allows PLAID full access to the external account.

My understanding is PLAID is now acting as a MITM (man in the middle) entity to confirm access to the external account. With all the data breaches we hear of, who in their right mind would give such access to a third party. My relationship is with the first bank and external bank. Not to mention, PLAID had a class action suit brought against them not too long ago for sale for consumer data - https://www.courthousenews.com/judge-approves-settlement-ord... .

My existing external accounts are still shown in the profile, so I can transfer to/from those, but can't add any new ones unless I offer PLAID keys to the castle. I tried reaching out to the bank but have gotten mostly hot air. Effectively, "this is the new system, take it or leave it". Waiting on a call back from a supervisor, but am not holding my breath. Will likely file a CPFB complaint but doubt much will come of that.

Main reasons for keeping the account include a competitive savings rate for a local brick and mortar bank, high ach transfer limits and fee free in/out domestic wires.

Thoughts?

What bank?

I may be able to provide an executive level email address.

--
John from PA

Hopscotch

Can you transfer to a bank already approved and then transfer from that bank to the final destination?

It adds a step and will take additional time but it could be a work around.

The bank in question is CIBC

The bank in question is CIBC - it's in the third paragraph wink.

I could use multiple banks sure, but that defeats the purpose, and their large ach limits ($130K or $150K). I suppose with that large of an amount, I would just make use of the free wire service. What ever the receiving bank charges would likely be less than any interest lost using a next day ach.

This covers outbound transfers, but not inbound.

I have other banks that also use PLAID with the trial deposit option NOT disabled.

Check for a PM

zx1100e1 wrote:

The bank in question is CIBC - it's in the third paragraph wink.

Sent you a PM

--
John from PA

^^How do I read private

^^How do I read private messages on here? I don't see a private message button... Link?

Digging around cibc's site, there's this page - https://www.cibc.com/en/privacy-security/protect-yourself-3r...

At the bottom, 2nd to last faq question, do not share credentials with any third party, no protection from bank if you do.

So it's ok to share other banks' credentials with third party but not cibc!@# Makes perfect sense.

no such thing here

zx1100e1 wrote:

^^How do I read private messages on here? I don't see a private message button... Link?
~snip~

There is no private messenger type thing here, the "contact" link on a person 'profile' simply sends an email.

--
. 2 Garmin DriveSmart 61 LMT-S, Nuvi 2689, 2 Nuvi 2460, Uniden R3 radar detector with GPS built in, includes RLC info. Uconnect 430N Garmin based, built into my Jeep. .

Wild! Well, no emails

Wild!

Well, no emails received, nothing in spam either.

Check email

John from PA wrote:
zx1100e1 wrote:

The bank in question is CIBC - it's in the third paragraph wink.

Sent you a PM

Based on comments by soberbyker then look for an email. If you can’t find anything make sure the email address you have in your profile is correct.

--
John from PA

Email in profile is correct

Email in profile is correct and still working (for the past 25 years). Perhaps the email function here is broken.

Forgotten password does generate an email, albeit it ends up in spam. Your PM ended up in /dev/null, nowhere to be found.

I'd contact you, but profile file doesn't show a contact option.

Microsoft not having a good day - https://i.imgur.com/mqY44W4.png . Email addr I use on here is a hotmail acct.

Just changed my profile to allow contact

zx1100e1 wrote:

Email in profile is correct and still working (for the past 25 years). Perhaps the email function here is broken.

Forgotten password does generate an email, albeit it ends up in spam. Your PM ended up in /dev/null, nowhere to be found.

I'd contact you, but profile file doesn't show a contact option.

Microsoft not having a good day - https://i.imgur.com/mqY44W4.png . Email addr I use on here is a hotmail acct.

--
John from PA

Just sent the contact info again (4:57 PM EDT)

And checked off “Send a copy to myself” which after 4 minutes doesn’t seem to have worked.

--
John from PA

I too

want internet banking rates, but as I learned, it was a royal PITA to get the "free" cashiers check including free next day FedEx.

It was simply a bad experience.

It wasn't a ridiculous amount but it wasn't nothing either, 60k.

I decided to leave the rest of the cash in SPRXX at Fidelity. It's 3.85% vs 3.4% at my online bank. I would not simply switch to multiple online banks, the one we have is linked to our 11 y.o.'s UGMA.

Even though Fidelity isn't insured, imho it's safe. And I know when they say the money is going to be in your bank next day, it really is. The internet bank was 3 days later than promised. They sent an apology email not admitting any fault, just saying we apologize for any inconvenience.

I won't lie, I was worried. So as far as Plaid goes, I think it's ok, no different than when you want to upload a 1099 and you have to login via a pass through.

I get it. People here tend to be cautious, and there's nothing wrong with that. Was it here people said you can't cancel XM as they will keep charging you (this I've found to not be the case), or is it another forum? Don't know. If unsure, err to the side of caution.

Because of my direct deposit, I often have funds sitting in non interest checking but local banks that I can walk into. When I think of it, I'll move the funds to internet savings. it's a very sloppy process on my part, sometimes I wasted $1.50/day in interest. Believe me, I care about $5/$10/$20/$30/mo, so shame on me.

^^I don't mind giving plaid

^^I don't mind giving plaid the account/routing number of the external bank to create the link. Any transfers with that external bank will identify who made the transfer. My issue is giving login credentials to plaid, a third party I have no relationship with.

@ zx1100e1

John from PA wrote:

And checked off “Send a copy to myself” which after 4 minutes doesn’t seem to have worked.

You may have been correct earlier when you mentioned the forum contact mechanism may not be working properly. The "send a copy to myself" option although checked off didn't work. Prior to making the attempted contact, I verified my email address was correct.

--
John from PA

Try this

Executive level contacts for CIBC can be found at https://www.elliott.org/company-contacts/cibc-customer-servi.... Once there, scroll down a bit. I would start with the Senior Executive Vice-President and Head of Personal and Business Banking. Keep your content short and to the point. You likely won’t hjear back from the exact person but some level of Administrative Assistant.

--
John from PA

Used Plaid to buy car

When I bought a Tesla I found myself tracked into using Plaid. I grumbled but used it.

No troubles in my case.

--
personal GPS user since 1992

@John, thanks, I'll give

@John, thanks, I'll give those a shot.

@archae86 Everyone has their own comfort levels. My concern mitigating losses and headaches if/when there's a data breach at plaid. No matter how well they claim they secure their systems, no one is exempt from data breaches.

Would you give a complete stranger keys to your house? Apparently some do, by way of digital access to garage (https://www.amazon.com/Amazon-Key-In-Garage-Delivery/b?ie=UT...). The whole concept seems insane.

In recent years I've done lots of bank promos. I can't think of a single one that REQUIRED login/pass to link an external account. They all offered the option to link with acct/routing numbers.

email not working

John from PA wrote:
John from PA wrote:

And checked off “Send a copy to myself” which after 4 minutes doesn’t seem to have worked.

You may have been correct earlier when you mentioned the forum contact mechanism may not be working properly. The "send a copy to myself" option although checked off didn't work. Prior to making the attempted contact, I verified my email address was correct.

I sent you a test message John from PA and also check the send to me box, I haven't gotten anything, nothing in spam, checked my resident mail program as well as the email company's email interface. Nada.

--
. 2 Garmin DriveSmart 61 LMT-S, Nuvi 2689, 2 Nuvi 2460, Uniden R3 radar detector with GPS built in, includes RLC info. Uconnect 430N Garmin based, built into my Jeep. .

Nothing

soberbyker wrote:
John from PA wrote:
John from PA wrote:

And checked off “Send a copy to myself” which after 4 minutes doesn’t seem to have worked.

You may have been correct earlier when you mentioned the forum contact mechanism may not be working properly. The "send a copy to myself" option although checked off didn't work. Prior to making the attempted contact, I verified my email address was correct.

I sent you a test message John from PA and also check the send to me box, I haven't gotten anything, nothing in spam, checked my resident mail program as well as the email company's email interface. Nada.

Nothing at my end either.

--
John from PA