[ArielCasper]

1. Customer did  "click ' by being tricked by scammer. But why scammer can change limit and add a payee so easily. ? Bcoz the security is not tight enough. Some banks dont allow limit to be changed auto online.
Example is cimb bank  requires me to email them abt the req change  and they call back to confirm. Not online thingy.
2. Even if the banks use the industry standard software solutions, they cannot just sleep there.
You should know that softwares change at near lightning speed.
Your solution is  obsolete but you still kooning whereas scammers can take advantage of the new capabilities.

I don't know about your guys.

But because of this, I tried changing my ATM withdraw limit for OCBC.. It did a 2FA authentication with my phone (I am using my phone as 'token', so I am assuming adding a payee will need the same authentication). Maybe some of you can try and let the rest know.

As for whether to allow change of limit online, it depend on individual. Some wants the convenience. 

I don't know if OCBC solution is obsolete, but it allows me to use my phone to authenticate instead of SMS. DBS and UOB also have similar features.. So if OCBC solution is obsolete, then it is a industry wide problem.

Maybe we should all go back to our parent's days, all transactions must go to the bank to carry out.. Safer..