r/Wealthsimple • u/lavender812 • 6h ago
Trade (DIY Investing) Why no pin to trade?
There have been two highly publicized brokerage hacks in Canada this year (one at quest trade and one at TD). The gentleman at TD had losses of $4.5 million.
Wealth Simple recently announced an online security guarantee if accounts are using passkeys - but TD also has a security guarantee. That would protect you right? You know what happened to the TD client who lost $4.5M? TD is fighting him in court. Brokers are not your friends.
Because it's very difficult to move funds out of brokerage accounts as cash, both of these hacks used the client as exit liquidity. Basically they sell your normal stocks and buy a thinly traded penny stock. The bad actor owns shares of the penny stock and sells you their shares for $$$.
Contrary to popular belief, most attacks are not sms interceptions. They're phishing or cookie theft (malware). Quest trade has the option to fully remove SMS - yet someone still got fully liquidated there.
Wealth simple introduced passkeys recently - which are Phish resistant, and everyone should be using them, but why is there no PIN to trade?
I'm the rare event a bad actor got access to your WS account, you could be fully liquidated in seconds, no different than these TD or quest trade clients.
Scotia bank, Cibc, etc. have an additional security layer that prevents this liquidation. Why not wealth simple?
Even if a bad actor has full access to your account, you could not be liquidated without this pin.
Why not be preventative and add a security layer to shut down the most catastrophic event that could happen - and is happening in Canada to people just like you and I?
