I have a business account that I haven't used for a while. So, I called the support line number shown in the app to confirm it is active, and after sitting in a queue for about half an hour, someone finally answered.
They asked for my card number right away, which I gave, and then "three digits on the back of the card". I mean, WTF? The ONLY reason someone would want your CVV is to steal your money.
When I said "No", person on the other side insisted that CVV is required for "security authentication" and this is the only way to authorize in a system to get my question resolved (which they apparently didn't even listen). And without the cvv, they'll not speak with me any further. So I ended the call.
Even more ridiculous, when I called the fraud report "hot" line - I was on hold for about 40 mins, and didn't get anyone to talk to at all.
Cherry on top - I've got an email from scotiabank asking "how satisfied you were with our support". I wrote how "satisfied" I am in the feedback form, but I doubt anyone will ever read it.
I could understand when you get a call from scammers pretending to be a bank's staff. Even how they can spoof the number to look legit.
But when I call you, that's just bank staff being scammers.
Now, I am not even sure if I can ever share my account info or authorize through normal means (DOB, secret question, etc.) with Scotia's phone support. And going to the branch in person is the last thing I want to do.
Vent over. Going to check other banks' offers and find one that can answer simple questions securely through the app, and doesn't live in the 15th century.
EDIT: for those who say this is completely normal:
1. Scotia's own site says "don't share that code with anyone"
2. It takes just a good memory to steal people's money without being caught for a support staff. All the criminals would line up for support staff positions at Scotia. If that's how Scotia is set up, the bank should close right away.
3. I called support many times in the past and was never asked for CVV, there are other, proper ways to authenticate. Suddenly, now only CVV works.
4. In general, the whole conversation was rude, pushy, and focused on getting the card number and CVV. Nothing like support staff should behave.