You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Users are able to withdraw or deposit money by only providing the account number, without needing any additional authentication such as a password. This creates a security flaw, as anyone with access to the account number can perform unauthorized transactions.
Expected Behavior:
To withdraw or deposit money, users should be required to provide more details, such as:
Full name as registered in the system
Password
Simply knowing the account number should not allow financial transactions to be executed.