Rarely does ING Direct disappoint when it comes to adding a little holiday pizzazz to its website. And it's no turkey this year.

The bank's homepage is given over entirely to a flash animation that starts with its trademark orange ball rising over a cityscape. Then a decked-out turkey joins the scene and its revealed that its a play on tomorrow's NYC Thanksgiving Day parade balloons.

But the more interesting development is the small orange "Black Friday" sale tag in the upper right corner (see inset). ING Direct has four Black Friday specials that will be revealed at one past midnight this Friday at <ingdirect.com/blackfriday>.

We are sworn to secrecy on two of the deals, but we can tell you that there will be a $683 discount (the average amount American's spend on holiday gifts) on ING mortgage products (currently 3.75%) and a 20% off ShareBuilder deal.

The Black Friday tease was also emailed to ING Direct customers this morning (see inset).

My take: The Black Friday promotion, which is being pushed out to media outlets in advance of Friday, is brilliant. It plays perfectly into the more-conservative budget mindsight in the country and gives the press something else to write about beside the long lines at Best Buy at 4 AM Friday.

Grade: An A+ and an extra helping of sweet potatoes to ING Direct for both timing and creativity.  

In a quick survey today of the 25 largest retail banks, three others had holiday promotions or themes: 

• Zions Bank had a traditional Thanksgiving message on its homepage (see below)
• Wells Fargo has a low-key bill pay message in a holiday theme (see below)
• Comerica and Fifth Third Bank had holiday-shopping messages

ING Direct (USA) homepage (23 Nov 6 PM Pacific)

ING Direct black friday landing page (25 Nov 2009)

Zions Bank homepage (23 Nov 7 PM Pacific)
Note: Trusteer promotion on homepage

Wells Fargo homepage (25 Nov 2009, 1 PM Pacific)

Note: For future reference, this post was made on the day before Thanksgiving.

Are you tired of hearing "there's an app for that" yet? Well, get used to it, we are still at the beginning of the great app rollout. 

Even as recently as our iPhone Banking Report published in March, I assumed most financial institutions would have a single iPhone app. One bank. One app. It's how the Web worked, for the most part.  

But when Starbucks unveiled a dedicated app just for its stored-value card (separate from the main Starbucks brand app), I realized that I wasn't thinking big enough.

For example, in August PNC Bank become the first U.S. financial institution to offer multiple apps when it released an app for its Gen-Y-focused Virtual Wallet. That was followed last week by Wells Fargo when it unveiled its cash-management app for larger businesses, CEO Mobile (screenshot below; press release).

Now, I believe that each major bank will roll out dozens of apps, perhaps hundreds, to support their business lines, major products and large segments. There will be an app for each major affinity credit/debit card, one for students, one for small businesses, one for large business, one for senior checking, one for home equity lines, and so on.

And, if that's not enough, there could be a dedicated app for each stock broker, loan officer and mortgage broker. There could be one app for every branch, neighborhood, or region. Right now the search-and-discovery tools at Apple would implode under the weight of all these apps. But they'll figure that out. It's worth billions to them. 

Today, more than 100,000 apps are available for the iPhone. But fewer than 20 are for U.S. financial institutions. It's conceivable that in the banking vertical itself, well over 10,000 apps could be developed, possibly many tens of thousands (see notes 1, 2). 

Wells Fargo is first U.S. bank with a cash management iPhone app (12 Nov 2009)

Notes:
1. They won't all be iPhone apps. The mobile market is too big to have it all consolidated at one player. 
2. It's also conceivable that we'll move away from the dedicated app framework, and users will be able to configure their phones with hundreds of info feeds without needing to install an app for each one. More like the iGoogle portal model.  It will be fascinating to see how it plays out.

I've written plenty about the importance of the iPhone App Store, both here and in Online Banking Report (note 1). But there's one subtle side benefit I hadn't thought too much about previously. 

Every time a new version of a native app is released, users must take action to download it if they want the new features. While this process used to be a nightmare in the desktop software days where users had to use floppy disks, CDs or large downloads to reinstall the software, it's an absolute breeze on the iPhone and usually takes less than a minute from start to finish. And there's no restarting the iPhone or choosing installation options. It's just a one-click process plus the input of your iTunes password if you weren't already logged in.

So why is this process a benefit? Because each time a new release is available a little icon shows on top of the App Store icon (see screenshot 1 below). Users then press the App Store icon, choose update, and they see a list of applications with updates available (screenshot 2). At that point users choose to update them all or look at them individually.

We believe most users are interested enough in their financial apps to take a look at the update, at least until the novelty of the mobile app wears off some years in the future. This provides financial institutions a free marketing opportunity to not only explain the new features of the app, but also deliver other marketing messages. You are much more likely to make an impression with your customers during the update process, compared to sending out a random marketing email.

In the three bank examples below, only USAA (screenshot 3) uses the opportunity to further cement its relationship with mobile customers, touting its new remote deposit capabilities along with several other enhancements. Wells Fargo (screenshot 4) takes a matter-of-fact, "we're fixing bugs" approach that is OK, but still misses the chance to communicate with users. But Chase (screenshot 5) completely annoys users with two sentences of marketing speak that says nothing about the update. 

Lessons for financial & mobile marketers: Whenever you release an update for your mobile app (note 2), take the opportunity to communicate with your customers as follows:

• Clearly explain the benefits of the changes to the app
• Highlight one or two related benefits of the app
• Mention any related news or promotions
• Strike a good balance between disseminating technical info and marketing new benefits

Screenshots

1. Main iPhone screen shows                        2. The Updates page shows the 4 apps
    that 4 app updates are                                       that have new versions available.
    available (right side halfway down).

3. USAA's latest update explains the specific changes made and provides several new benefits to using the app.

4 & 5. On the other hand, the Wells Fargo and Chase update messages are sparse. The Wells Fargo update appears to be a minor bug fix, so we'll cut them some slack for the terse message. However, Chase, with a minor update (2.0.1 update) to its major 2.0 release (released Aug 25), says absolutely nothing in 24 words of marketing-speak: 

We're listening -- You asked for a fully native iPhone banking application. This Chase iPhone app is built exclusively for iPhone and iPod touch users.

Seriously Chase, this is the best you could come up for the tens of thousands, if not hundreds of thousands, of iPhone users waiting for your updated app? At least the bank gets points for brevity.

                   Screenshot 4                                                             Screenshot 5

Note:
1. For more info on the importance of a native iPhone app see Online Banking Report: Mobile Banking via iPhone.
2. The same advice holds true for communicating online banking improvements as well, although the communication methods are different (email, newsletter, statement insert, blog, interstitials, log-off messages, etc.).

As we've mentioned before, there are surprisingly few fee-based online financial services in the United States (see note 1). But things may be changing. In the past month we've looked at three innovative services charging fees:  

• Mercantile Bank of Michigan's Funds Manager, a $4.95/mo service that gives users a sneak peek at pending transactions, before they can cause an overdraft (previous post).
• LowerMyAssessment.com offers a $125 service to help consumers challenge their property tax assessment for their home (previous post).
• Home-Account charges $9.95/mo for its home-management service (based on a one-year commitment).

Today, we highlight a fourth new fee-based service, also charging $4.95/month (or more), vSafe from Wells Fargo. vSafe is a secure online storage solution that sells for $15 to $15 per months as follows:

• $4.95/mo for 1GB of storage
• $9.95/mo for 3GB of storage
• $14.95/mo for 6GB of storage

The service was introduced several months ago, and I've been using it for a couple months. The service automatically stores Wells Fargo statements, and allows users to upload any other file up to the storage limit. It would be even more useful if it offered automated retrieval and storage of other bank and biller statements.

Wells Fargo homepage (1 June 2009, 1:15 PM PDT)

Landing page (link, 1 June 2009)

Take a test drive in the Wells Fargo lab (link, 1 June 2009)

Interactive video highlighting benefits

Signup explanation

Notes:
1. The golden rule of consumerism: "You get what you pay for." Because online banking services are typically offered free of charge, U.S. consumers have had to contend with clunkier, slower, less secure and less feature-rich online services than consumers in other countries that pay for online access. Fees for online services can be a win-win, allowing financial institutions to offer premium online services for those willing and able to pay for them, while at the same time offering basic services free of charge so that everyone can benefit from online banking. 
2. Article updated 9 July 2009 to remove incorrect reference to Expensify's $4.95/mo fee (see comments).

We just completed our latest Online Banking Report. It will be mailed to subscribers this week.
It's also available online here. There's no charge for current subscribers; others may access it immediately
for US$495.

---------------------------------------------------------

Improving Online Account Opening ROI
Ten strategies to increase online application conversion rates

102 pages (published 21 June 2009)

In this report (abstract PDF), we focus on ways to increase conversions and improve your results when opening financial accounts online or over a mobile phone.

The online application is the new branch new-accounts desk. And, just as you provide ongoing support, training and incentives to branch-based sales staff, you must continually fine-tune your online sales process.

In our experience, this is an area that needs attention at most financial institutions. Things have greatly improved during the 10+ years we've been tracking online applications. However, during the research for this report, we reached dead-ends at three of the 10 applications tested (note 1). That just can't happen.

The report outlines a 10-step approach to improving the process: 

• Direct users to the application
• Set expectations
• First things first
• Guide customers
• Bundle mobile access & alerts
• Upsell
• Fund
• Ask for referrals
• Stay in touch
• Humanize the process

We reviewed the online applications of the following companies:

• Bank of America
• BECU (powered by uMonitor)
• Capital One
• Chase Bank
• First Arkansas Bank & Trust (powered by FirstROI)
• Flagstar Bank (powered by uMonitor)
• HSBC Direct
• Huntington Direct (powered by CashEdge)
• M&I Bank
• National City
• Verity Credit Union (powered by Andera)
• Wells Fargo
• Zions Bank

Finally, a 10-year forecast for online account-opening volumes in the United States is presented.

M&I Bank has an attractive and informative application start page (9 June 2009)
Note: The online banking guarantee at the bottom is a good way to improve user trust.

Note:
1. Granted, user error was the problem in two of the three failed apps; however, we weren't purposely trying to make mistakes. The online application should have provided assistance in correcting them, rather than leaving us hanging.

My credit card number was stolen again. It's the third or fourth time since the Internet came along. It's annoying, and a little disconcerting, but not a major problem, thanks to efficient card issuers who take the info, credit my account, and send me a new card. On a ten-point "hassle scale," where 10 is having your hard drive crash, it's only a 2 or 3.

And my previous stolen cards resulted in little financial loss to the issuer, other than the cost to process the chargeback and reissue the plastic. In those cases, either the issuer caught the fraud before anything was shipped, or the items purchased were digital (online subscriptions) and didn't result in any lost inventory.

But this time was different. Someone used my card number to buy a PS3 gaming console and three games at a Best Buy in the Bronx. Assuming Best Buy follows proper procedures, Wells Fargo will be out more than $600 just for the merchandise. All told, with the cost of the investigation and processing, it's probably an $800 to $900 loss to the bank and merchant.

Wells Fargo is generally very good about suspicious charges and usually calls us. I've had the card for almost two decades, and it's been othe primary card for both my wife and me for much of that time. WF knows our purchasing habits better than we do.

Yes, we get to NYC at least once a year, but our charges are usually travel- and tourist-related ones in Manhattan. And we probably visit Best Buy in Seattle a couple times a year (we have teenage boys), so the gaming system charge is understandable. But it's highly unlikely we'd buy a system while visiting NYC, and we've never visited the Bronx, so the authorization request likely triggered flags.

But unless there was inside theft, the bank's authorization system evidently decided the $10 in interchange was worth the risk. Bad call this time, but probably right 99%+ of the time; otherwise, they'd be out of the card business.

What's mobile have to do with it?
But if Wells Fargo had a real-time connection to me via mobile phone, they could have texted me for an OK (similar to the screenshot above, which is a text-based activity request to Wells Fargo). If it really had been I who stood at Best Buy's register, it would have taken a second to reply "yes," and the transaction would have gone through.

Of course, in this case, I would have said 'no, I'm in San Francisco right now.' Or even better, in the not-so-distant-future, if I'd allowed the bank to track me via GPS, they would have known, without even contacting me, that I was 3,000 miles away from that store. Either way, the bank saves nearly a grand from that single text message. Multiply that by the millions of fraud purchases every year and you have serious money, billions by most estimates.

So yes, mobile banking (really mobile payments) does have a robust and tangible business case from fraud reduction and customer service savings. The technology is in the hands of the users now, and most know how to use it. So, let's get moving.

Note: For more information see our Online Banking Report on iPhone Mobile Banking. 

Day two of the Mobile Commerce Summit ran just for the morning (see Day 1 highlights), but anyone who overslept missed the highlight of the conference: the much-too-short panel discussion on revenue opportunities that started at 8:15 AM and ended at 9:00 (note 1). 

Panel: Mobile revenue opportunities 

• Drew Sievers, founder & CEO, mFoundry
• Joe Salesky, chairman & chief strategy officer, ClairMail
• Cameron Franks, director, Mobile Commerce Americas, Sybase 365
• Jayatsu Bhattacharya, SVP business development, Mobile Money Ventures (Citigroup & SK Telecom joint venture)
• Mustafa Patni, former director of mobile banking, WaMu

Observations from the panel:

• POS payment services: NFC at point of sale
• Value-added services
• Fees for mobile banking services: transaction, monthly, or annual
• Premium accounts with a rich mobile feature set
• Stock/investment trading (Citi Hong Kong is able to charge a premium for mobile trading)
• Bill pay: expedited payments
• Person-to-person (P2P) payments
• Much of the revenues will be indirect, from deepening and improving customer relationship
• Remote deposit capture for businesses
• Merchant advertising: offers to customers as they shop
• Loyalty programs: driving customers to certain merchants with alerts, offers, and discounts
• Lots of cost-saving opportunities: self-service customer service, moving bill payments to on-us transactions, loyalty program management, security, fulfillment, marketing, call deflection

Panel: Smartphone impact on the customer experience 

Armin Ajami, VP retail Mobile channel, Wells Fargo

• Almost half of smartphone users use the mobile Web daily (source: ABI research, Feb. 2009)
• 18% of U.S. consumers have smartphones
• 263,000 apps now available for smartphones, predicted to grow to about 700,000 by 2013
• There are 27 different app stores today
• Mobile-optimized website <wf.com> launched in July 2007, text banking launched Oct. 2007, native iPhone app launched May 2009
• Funds transfer on mobile-optimized websites takes 2 minutes with 5 clicks, no zooming or scrolling vs. 10 minutes via iPhone mobile browser with 7 clicks, 5 zooms, 7 scrolls and 10 minutes

Alain DeSouza, sr. mgr., market development solutions marketing, Research in Motion

• Globally, 12% to 14% of mobile phones sold now are smartphones; in North America, it's now above 20% (22% to 26%)
• Blackberry app store officially launched April 1, 2009
• Not excited about putting NFC chips into handsets (adds cost); will do it when it makes business sense (last year it was a top-5 opportunity, this year more of a top-20)
• P2P transfer is not a killer app, but could be important for adoption
• Be careful not to waste bandwidth in your app development

Note:
1. Note to conference organizers: Never start a session at 8:15 AM after a Thursday night in Las Vegas.

Twelve hours ago, Wells Fargo became the last of the "big four" banks to release a native iPhone app in the Apple App Store (see screenshot below; note 1). The bank, which has long been a pioneer online, let Bank of America reap much of the branding benefits of their association with iPhone banking for the past two years.

But we are glad to see Wells Fargo available and enjoyed checking our balance via iPhone for the first time. At just 0.1MB, the application was a quick download and compatible with my first-generation iPhone. There's no need to first visit the bank's website, as the app can be immediately used with your normal online banking username/password (see note 2).

While it won't win any design awards, it's simple to use with the typical online banking functions: balance inquiry, transaction listings, funds transfer, bill pay and GPS-enabled ATM/branch finder. Only the 12,000 Wells or Wachovia ATMs are listed in its database.

During the initial signon, the app encouraged users to create a short account nickname for easier reading on the small screen. And the bank also prompted me to sign up for text-message banking, something I hadn't used at Wells before. When I agreed to do so, a six-digit confirmation code was texted to my phone, which I entered back into the app. 

There is no mention of the new app on the Wells Fargo site.

Wells Fargo listing in Apple iTunes App Store (18 May 2009; link)

Notes:
1. Big four U.S. banks: Bank of America, Citibank, Chase/WaMu, Wells/Wachovia.
2. We'd previously registered our mobile number, which may have eased the activation hurdle.  

I am rarely at a loss for material when looking for examples to illustrate a point about online finance. Across thousands of financial websites, there's an almost infinite supply of novel new services, marketing strategies, and promotional efforts. 

However, there's one area with almost zero innovation. Pricing.

In the United States anyway, nearly every bank and credit union offers online, and now mobile, banking free of charge (see note 1). It's an appealing price point for sure, but it also hampers the ability of financial institutions to develop novel service offerings. It's a game of minimizing channel costs rather than maximizing returns.

However, several interesting new services that are at least trying to charge fees have recently shot up in online personal finance. Two debuted their new services at FinovateStartup April 28 (see notes 2 & 3; videos of their demos will be available online shortly):

• LowerMyAssessment.com is charging $125 to help consumers lower property taxes on their homes
• Home-Account is charging a $8.75/mo to help users manage their home mortgage

We'll look at both companies this week starting with LowerMyAssessment.com.  

Notes:
1. We covered online banking pricing in a 2004 Online Banking Report (here). While the report is nearly five years old, sadly little has changed, so it remains relevant to today's situation in the United States. 
2. In addition, at FinovateStartup we saw several new services that could increase payments-related income for banks, including the alt-payment companies, especially Acculynk and Moneta, offering revenue sharing and interchange fees for banking partners, and MicroNotes, which showed a platform that provided fee income to delivery-targeted advertising within the bill-payment function.
3. Also, Wells Fargo should be given credit for rolling out a fee-based storage solution integrated within its online banking services. The vSafe program costs $4.95/mo and up based on storage capacity desired. 

We just posted our latest Online Banking Report.
It will be mailed to subscribers tomorrow. It's also available online here. There's no charge for current subscribers; others may access it immediately
for US$395.

---------------------------------------------------------

Selling Behind the Password
Unlocking the marketing potential within
online banking

48 pages (published 21 April, 2009)

In this report (abstract), we go behind the login screen and report on the marketing and cross-selling practices of 15 financial institutions and card issuers.

Even among large banks, there's a huge disparity in the amount of cross-selling efforts within online banking. Wells Fargo is the most prolific, with nine marketing messages and product placements alone on its main account-management page. The bank also uses login and logoff activities to display promotions (see screenshot below). On the other hand, US Bank has just a single link to an "offers page" buried below the fold. Most FIs fall somewhere in between.

We looked at the opportunities within six different areas:

• Interstitial pages (splash screen) inserted after performing any online activity, especially after the initial login.
• Banner and keyword promotions within the secure online banking area
• Product placement within online banking and bill pay
• Transactional upgrades
• Page displayed after an online banking session has concluded (either through logout or inactivity)
• Product/shopping/discount portals and third-party ads

The following financial companies were analyzed by logging in to actual accounts and documenting their sales and marketing efforts:

• American Express business gold
• Bank of America online banking
• Chase credit card
• Citibank business card
• Citibank online banking
• Discover Card
• Everbank
• First Tech Credit Union
• ING Direct
• Jwaala (demo only)
• Mint
• Netflix (non-financial)
• PayPal
• Revolution Money
• US Bank
• WaMu
• Wells Fargo

Wells Fargo promotion displayed after logging out from online banking
(27 March 2009)

It will be a long time before the new mobile application markets, Google's Android Market and RIM's Blackberry App World, get anywhere close to Apple's App Store in breadth or depth. Currently, there are 162 apps listed across all categories in the Android market and 88 for the Blackberry (North America), compared to more than 25,000 for the iPhone (U.S.).

However, Blackberry already has tied the iPhone in one sub-category, big-name U.S. financial services companies. As of today, each has four. Bank of America is the only one supporting both.    

*Blackberry App World also has an Obopay mobile payments app with ties to Citibank.

Financial institution opportunities: The list of participating financial institutions won't stay short for long. You must support iPhone and Blackberry users, the sooner you do so, the more free publicity you can garner. For more information, see our latest Online Banking Report, published today, Mobile Banking 2.0: iPhone Edition.

Blackberry App World Finance & Banking section
(9 March 2009, 10 PM Pacific)

In April, we reported on the robust adoption of Bank of America's online personal finance manager, My Portfolio (see note 1), used by 10% of the bank's 25 million online bankers. The results are especially impressive given that it's a full-featured module accessible via online banking, but not particularly well integrated.

In comparison, Wells Fargo offers a completely integrated PFM tool, My Spending Report, that's extremely simple to use, but offers limited functionality. On Oct. 29, the bank made an important improvement, adding a basic budgeting tool, Budget Watch, to what had been essentially a list of transactions divided by category.

The bank told me last week they have 1 million monthly users, making it the second online PFM provider to break the 1-million mark (after BofA). Wells has about 15% of its online banking base (note 2) using the tool, a slightly higher penetration than BofA. Again, not surprising considering how well it is integrated. The budget tools should boost penetration.

Who'll be the next one to join the 1-million club? Mint, with about 500,000 users in its first 15 months in business, is headed that way, possibly as early as late next year.  Chase/WaMu could get there in a few weeks, if they added online personal finance to their feature set. Quicken Online, now that it's free, should get there relatively quickly as well.

Note:
1. BofA's My Portfolio is powered by Yodlee.

2. Excluding Wachovia accounts.

The best time to get your customer's attention is right after they log in to look at their account. That's why login-screen marketing should be in your mix (see previous coverage). But, your message is not necessarily welcome at that point, so it's a marketing option best used judiciously.

Wells Fargo makes good use of the technique this month with an open letter from CEO John Stumpf. It's been a while since I logged in to my Wells Fargo account, so I'm not sure it was posted. But it carries an October date, so it was probably later in the month after Wells Fargo prevailed in its bid to buy Wachovia.  

Many financial institutions have posted we-are-still-going-strong messages during the past few months. The Wells Fargo message isn't particularly noteworthy, other than they don't beat around the bush asking, then answering, the question:

What does (the Wachovia acquisition) mean to me as a Wells Fargo customer?

Wells Fargo splash screen displayed immediately after logging in (10 Nov 2008)

After returning from some R&R in Iowa and Kansas, I logged into my banking and credit card accounts to see what I'd forgotten to attend to before leaving town. Luckily, everything seemed in order this time.

Always on the lookout for online marketing examples, I thought it would be  interesting to compare and contrast the marketing messages presented to users as they logged in and logged out of five major banking sites. 

• Bank of America (business and personal credit cards): BofA typically has a marketing message at login and logoff.
  Login  The bank's brokerage division is pitching free Morningstar mutual fund research. I haven't seen this one before, and it seems a bit wordy, so it may be the first time for this offer (see screenshot #1 below)
  Logout  A pitch for a cash-back business credit card. It's a good offer, but perplexing, given that I already have a business and personal card with BofA. Not sure why they want me to have three (screenshot #2).
• PayPal (verified account): PayPal has used log-in splash-screens almost since it began in 1999 with a mix of marketing and service messages. But they don't overuse the technique, so it's noticeable when they have a new splash-screen running.
  Login  No marketing, just direct entry to main screen
  Logout  No marketing, just a landing at the usual PayPal merchant emporium (screenshot #3)
• US Bank (multiple accounts): I don't think I've ever seen a marketing message from US Bank at login or logoff. I believe I've seen a service message at login a few times over the years, but it's extremely rare.
  Login  No marketing, just dropped on main account page as usual
  Logout  No marketing, just a brief "you've been logged out" message
• WaMu (business checking): I've had the account only a few months, but WaMu has frequently posted marketing messages at login, and they've been relatively creative, as you'd expect.
  Login  Pitching its WaMu Live concert promotion which provides exclusive access to summer events to WaMu credit and debit card holders (screenshot #4). 
  Logout  No marketing, just a solid recap of security precautions, a good message to leave with online banking users (screenshot #5).
• Wells Fargo (credit card): Wells uses marketing messages frequently at both login and logout.
  Login  Electronic statement (paper turnoff), something I've not done yet (screenshot #6).
  Logoff  Home equity loans (screenshot #7)

What's Innovative?
There wasn't anything particularly enlightening in these examples. The WaMu Live pitch was the only truly unique message. For the most part, they were typical, well-crafted marketing messages you'd expect from these major players. That's fine now, since most customers don't yet have "banner fatigue" at their online banking site. But going forward, the messages will need to be more targeted and more interesting to get attention and action from jaded online users.

The other issue is frequency. You'll figure this out through testing, but there's a line you don't want to cross where a splash-screen message presented at every login ceases to be effective and is just plain annoying.

Finally, for financial institutions, such as US Bank, still not using this login real estate for sales messages, your customers thank you; however, quick-loading, targeted messaging, used with discretion, should benefit your bottom line.   

1. Bank of America login screen for business-credit-card only account (1 Aug 2008)

2. Bank of America logoff screen (1 Aug 2008)

3. PayPal logout (1 Aug 2008)

4. WaMu login screen (31 July 2008) 

5. WaMu logout screen (1 August 2008)

6. Wells Fargo login splash screen (1 Aug 2008)

7. Wells Fargo logoff screen (1 Aug 2008)

I heard from a new company last week that has created a service to help life insurance and bank-account holders to notify beneficiaries periodically that they are named on the account. According to FindYourPolicy.com (see screenshot below), $1 billion in insurance policies go unclaimed each year due to unknown or lost beneficiaries. Although it sounds simple, tracking down beneficiaries can be a timely and expensive process. Outsourcing some or all of that is an appealing idea.

However, as a consumer-direct service, I don't think FindYourPolicy.com will get a lot of traction. The list price of $29.95 plus $3.95 per month is a lot for twice-yearly postcards (see note 1) to your beneficiaries. But the company is likely more interested in setting a high retail "value" on the service so they can wholesale it to financial institutions for pennies on the dollar.

Using the same concept for safe deposit boxes
While the beneficiary notification is an idea deserving of a second look, I was more intrigued with another of its features, safe deposit documentation and notification service. I just spent 30 minutes last Friday making a trip to the bank to look in my safe deposit to see if my son's social security card was there (note 2). Of course, it wasn't. I could have saved the trip if I'd had good records on its contents. I'm sure I wrote it down somewhere, but it would likely take much longer than 30 minutes to find it.

Ideas to help memory-challenged customers like myself:

• Simplest: It would be great if my bank had a simple email-like software app available near the safe-deposit area where I could list the contents of the box and then email the info to myself AND store a record of that communication within online banking so I could access it years from now when the email is long lost.
• Harder: In addition to manually entering info, have a scanner available so that I can scan copies of the documents in the safe deposit box for a digital record.
• Hardest: Extend the service to the home/office and allow me either to store items virtually, using my home/office scanner, or by uploading/emailing documents into the virtual safe-deposit box. This is the core idea behind vSafe from Wells Fargo.

However, as Tripp Johnson at Gonzobanker so eloquently laid out in this article, there are  serious questions regarding overall demand for virtual safe-deposit services, not to mention pesky compliance issues that cannot be ignored.  

FindYourPolicy.com homepage (29 May 2008; see note 3)

Note:

1. Why TWICE yearly? Once per year seems like plenty. Or how about one postcard and one email message each year? (Update 1 June: The reason for mailing 2x per year is that the U.S. Postal Service forwards mail only for six months, so with this frequency the company ensures it gets the forwarding address. (See comment #2 from Michael Hartmann of FindYourPolicy.com) 

2. My bank is requiring a faxed copy of my 18-year-old son's social security card in order to add him to my account. I'm all for good authentication (who isn't?), but that seems extreme. More on that in a future post. 

3. Sometime during the past 10 days, FindYourPolicy.com added the "member of American Bankers Association" seal. It's a reasonable touch, but it only means they've paid at least $1,250 for a service membership to the ABA.

I don't know if Wells Fargo has saturated the entire Seattle market, or just the radio station I listen to, but I've heard its ad for a web-based retirement tool a dozen times in the past week or so.

I like the radio spot. It takes a complicated subject and creates interest by asking, "What is your RSI score?" Then, sending listeners to the Web to take the bank's Retire Secure Index test. It's interactive, it's timely and it makes good use of a multi-media approach. 

And Wells Fargo uses search engine marketing masterfully to ensure that interested prospects find their way to the bank's retirement landing page. The bank has purchased Google AdWords for various retirement terms (see first screenshot below) and created a unique landing page (second screenshot) and URL <wellsfargo.retiresecureindex.com> that has quickly moved to the top of the organic search results (see note 1).

Retirement tool
The tool itself is good. It's not easy to make a retirement savings worksheet compelling, but the bank does about as good a job as you can expect. After a 60-second intro by the friendly virtual spokeswomen (see second screenshot), the user completes a short form that takes about two minutes. The on-screen spokesperson talks you through it, but I tuned her out since it's relatively straightforward stuff (note 2). 

After a few seconds of calculation, and a clever drum roll, Wells delivers an RSI number (see third screenshot), which is the number of years you can maintain your desired income level after retiring. It's a good way to present the results, focusing on the positive. Users can go back and change the inputs or go into advanced mode to add home equity, business equity and/or part-time employment.

At the end, users are encouraged to contact the bank through a branch or toll-free telephone number to talk to an investment rep. There is also a link to open an IRA online. All in all, it's a good effort to engage users with a difficult topic.

Overall scores:

• Radio advertising: A+
• Search engine marketing: A
• Retirement tool: B+
  Provide an option to continue without the virtual spokesperson (see note 3)

1. Google results for "wells fargo retire secure" (10 March 2008, noon)

 2. Wells Fargo Retire Secure Index Landing page

3. Call to action

Notes:
1. For more information on search engine marketing for financial institutions, see our latest Online Banking Report (here). 

2. The audio can be turned off, but the spokesperson cannot be made to sit down or go away (see note 3).

3. The first option on the original landing page is to choose "dial-up" or "high speed" versions of the tool. The dial-up version does away with the audio/video track and just presents the static form.

In our annual Christmas/New Years survey of bank websites (note 1), we once again find little use of holiday themes, especially among the very largest. Scrooge would be pleased with the homepages of the top four: Citi, BofA, Wachovia, and Chase which have no holiday images or messages.

Wells Fargo is the only top-5 bank with a holiday message. The bank wishes its customers Happy Holidays (see below) in a top-of-the-page banner rotating with two other messages: a savings promotion that also uses holiday imagery (below) and an investments banner (not shown). 

However, this year there is one top-20 bank fully embracing the holiday spirit. ING Direct homepage (screenshot above, download flash in note 2, below) features a full-screen animation that first strings Happy Holidays across the page followed by the ING Direct orange ball rolling across the screen, bumping into the tree trunk, and dumping a load of snow on top. It's very well done.   

Also, honorable mentions to:

• Fifth Third and its $10,000 holiday sweeps
• Regions Bank, which is running a Toys for Tots banner across the top
• PNC with its annual tongue-in-cheek Christmas Price Index

Additionally, WaMu and Key Bank use winter imagery. And HSBC, US Bank, SunTrust, BB&T and Citizens are all running small banners for prepaid gift cards.

Wells Fargo

Fifth Third

Regions

PNC                                                              WaMu

Key Bank

HSBC                          SunTrust            US Bank

Citizens Bank

BB&T

Note:

1. Websites observed at 9 AM Pacific Time, Dec. 24, from a Seattle IP address.

2. View the ING Direct holiday animation (here)

Ed Terpening, VP Social Media Marketing at Wells Fargo, invited me on a virtual tour of Stagecoach Island. SI is a  Second Life spinoff where users immerse themselves in a virtual world created by Wells Fargo (see previous coverage here).

Wells Fargo launched Stagecoach Island in 2006, originally within Second Life, and then spun it off on its own. It's a chance for Wells to give users a truly interactive experience with their brand and increase their relevance to Millenials, who may feel that banks don't understand them. 

They are doing some key things very well:

• Pioneering new ways to extend their brand using social media
• Reaching a youthful demographic most banks can't reach
• Harnessing new technologies to redefine marketing

Here are some screenshots from the tour:

We're all gathered at the Wells Fargo ATM near the entrace of Stagecoach Island, including fellow NetBanker blogger Ron Shevlin.

The ATM interface, where you can open an account, get a credit card or a mortgage.

The Stagecoach Island Career Center where interested job seekers can learn about virtual careers in SI.

A place to buy things for your SI avatar, using your virtual Wells Fargo credit card.

Yours truly on the slopes, ready to snowboard.

My Take

I believe that creating a virtual world that combines elements of fun and whimsy with financial education is a great way for a bank to start a conversation with tomorrow's bankers about the role of money and credit in their lives. Although Wells is currently doing many things well, I also noticed some opportunities for them to consider as SI evolves:

• The "fun" and "financial" elements didn't come together as much as I had hoped. It could be improved with an SI-wide games and challenges requiring users to acquire and spend money and use credit to solve puzzles and attain things they need to complete the game. 
• Currently, the ATM is very text heavy and somewhat non-intuitive. Wells is missing an opportunity to make the ATM into an amazing interactive experience. And, there could be ATMs throughout SI, which could be part of a larger game.
  
• It would be great to have real Wells Fargo job openings in the SI Career Center, like TD does in their Facebook group.
  

Also, where was the stagecoach? It had to be there somewhere, I probably just missed it.

In the end, Ed and his team deserve much credit for paving the way. There is great potential left in this idea, and it will be fascinating to see how it continues to evolve. Thanks for inviting me on the tour.

William Azaroff is the Interactive Marketing & Channel Manager at Vancity where he develops interactive marketing initiatives, and pioneered ChangeEverything.ca, the groundbreaking change-themed online community. William builds on a decade of experience at digital agencies in Vancouver, Seattle and Los Angeles driving strategy, extending brands to the Web and building relationships for companies in several verticals, including Honda, Disney, Intuit Canada and the Government of BC. He discusses trends and noteworthy achievements in social media at his blog: azaroff.com/blog.

Tomorrow, Wells Fargo is expected to launch a user-generated video contest that will place the winning entry into a 30-sec commercial that plays during January's Rose Bowl, with an audience of 35 million or more. The winner will be chosen by public voting on the contest website. Entries are due by Nov. 26.

Although, this type of contest has been done before including last year's Super Bowl (see previous coverage of Intuit's TaxRap here and Lending Club here), it's the first time a major U.S. bank has launched such a high-profile effort. It should provide Wells with excellent publicity while supporting its social media and branding efforts.

The whole effort is first class, from the Center Stage website, to the pre-taped audio tracks in various genres, and the contest rules and prizes. And while the sample video's are cute, don't listen to them at bedtime. Trust me, you don't want "The Wells Fargo Wagon" running through your head as you try to get to sleep. 

Note: Read part 1 and part 2.

Many articles and blog posts will tell you that the cost to enter into the world of blogs, wikis, RSS, podcasts, social networking (Facebook or MySpace), social bookmarking (del.icio.us or ma.gnolia), or  Application Programming Interfaces (or APIs) mean that you can start a blog or social media project for your bank or credit union at a total cost of zero. Right?

Well, sort of.

One of the critical, but often unsung factors of success of a social media project is the resourcing. If you're going to invite the public to play, make sure you have someone who can help create the kind of community you want.

As we planned ChangeEverything.ca at Vancity we had many discussions about how to create a vibrant and postive community. We have all seen online bulletin boards, discussion forums and blogs degenerate into the kind of name-calling no one wants associated with their brand. This was one of our worst fears. Since then, we've learned a great deal about community building.

In my first part of this post, I mentioned nine success factors for a social media project. An important one is hiring someone who knows how to nurture and grow an online community. Here's why.

Whether or not hard dollars are spent launching a social media project, someone needs to manage the initiative and ensure that it achieves its goals. This is a very specific skill-set with the following requirements:

• Someone who can inspire visitors to come back, readers to register, and registered users to add good content.
  
• Someone who knows when to get involved in discussions and threads that are degenerating, going off topic, or just going nowhere.
  
• Someone who can elevate good material to the homepage so it will hook like-minded people, as well as delete remarks you don't want on the site.
  
• Someone with good taste.
  
• Someone who understands the business goals of the site and can act appropriately and decisively.

Recently I have seen a few interesting posts speaking to the issue of good online community moderation. One was on Jeremiah Owyang's excellent web-strategist.com: For the Community Managers. I also saw a very good piece on Seth Godin's blog: Jobs of the future, #1: Online Community Organizer. So it seems that more and more people are catching on that this free revolution has some resourcing costs built in if you want to achieve success.

Here are three examples of financial institutions that blog and how they manage their resourcing.

Wells Fargo

Wells Fargo has a total of four blogs, the most for any financial institution. According to their VP of Social Media, the amazing Ed Terpening:

Although we have an Experiential Marketing group dedicated to social media activities for Wells Fargo, all of our bloggers are team members who have other full time jobs. They add blogging - writing, posting, reading, replying - on top of those jobs, and our lead bloggers take a more active role than others. The culture of blogging is unique and we strive to connect with that culture through many different voices at Wells Fargo. Finding the person with the right passion + knowledge is our goal, whether they have a professional communications role or not (most do not).

Verity Credit Union



Verity was the first financial institutions to blog, beginning in late 2004. It recently received an excellent facelift and functional overhaul. It's a highly usable and readable blog. According to their CMO and VP Shari Storm, they staff their blog with volunteer employees from around the credit union. Employees who want to blog go through a quick 10-15 minute training on the dos and don'ts of blogging, and they are allowed to spend no more than an hour a month blogging so their managers won't get upset with the project. This is a nice way to save money on resources. Until their recent overhaul, their blog was even hosted for free at Blogger. Says Storm, "One of the unexpected successes of our blog is how much employees like writing for the forum. We’ve heard from employees that it provides extra job satisfaction and a sense of employee pride."

Vancity



One of the key success factors of ChangeEverything.ca was the investment in a full-time Online Community Moderator, Kate. Kate has been instrumental in nurturing the community, providing them with contests and activities, connecting the site to the press to get earned media exposure, moderating comments and understanding the needs and wants of the site's registered users. Not an easy job, and I always say that Kate is one of the key reasons why the site has grown and excelled in the way it has. She has an amazing balance of clearly knowing the purpose of the site, and also being open to where the community wants to go. She deserves amazing credit and her skillset will only make her more and more valuable. (NOTE: no poaching!)

So, by all means try out social media. There are many low-cost, even free, options. But realize  that for a site to achieve longevity and success as a communications vehicle, branding tool, community platform, or whatever you have planned, you may need to invest in social media management. This means either tapping good people internally to devote time to the project or hiring a community moderator to ensure your project develops to its full potential.

William Azaroff is the Interactive Marketing & Channel Manager at Vancity where he develops interactive marketing initiatives, and pioneered ChangeEverything.ca, the groundbreaking change-themed online community. William also plans strategy for the online channel, with a view to its potential to help Vancity, its members and the community. William brings nine years of experience in Vancouver, Seattle and Los Angeles producing web projects for such clients as Honda, Disney, Intuit Canada and Nike Jordan. He writes about the intersection of online branding, social media and the world of banking on his blog at azaroff.com/blog

A recent article in Bank Systems & Technology looked at the question of whether or not banks were reaping Web 2.0's potential. The subtitle of the article—"some institutions aren't realizing all that Web 2.0 has to offer"—is generous beyond belief.

The article takes the form of a panel discussion, with participants from Wells Fargo, Adobe Systems, Tower Group, and Hurwitz & Associates addressing questions about which banks are implementing Web 2.0 technologies, and why banks aren't embracing them more than they have.

The Tower analyst had some interesting things to say, while the rep from Wells Fargo understandably focused on internal initiatives, although (probably reflecting the part of the organization he works in) he made no mention of WF's blogging efforts.

What had me shaking my head in disbelief was the comments from the Adobe person. Her reply as to why banks aren't embracing Web 2.0 technologies more: "The main obstacle seems to be that institutions are hesitant to improve one section of their website too drastically for fear of making the other sites look even more out of date."

Robin Bloor of Hurwitz better captured reality with his response to the same question:

"It may simply be a matter of where to invest. A Web 2.0 project is very difficult to define in terms of specific business objectives. There are no obvious corporate successes to imitate, and no easy way to calculate payback."

My take: There are three major forces holding banks back from capitalizing on Web 2.0:

1) ROI. Despite all the talk about building customer relationships, most banks invest in sales, not in relationship building. If there's no clear link between the investment and a sale, most banks are reticent to make the investment. An example: Personal financial management. NetBanker now tracks more than 20 online personal financial management sites. Why is it that most banks (with the exception of a select few like Wells Fargo) aren't making an investment in a PFM or Wesabe-like capability? Because they can't see how it ties to making a product sale.

2) History. Besides "no obvious successes to imitate," there are past failures to avoid. Plenty of bankers still remember the online community efforts that banks dabbled in seven, eight, nine years ago. They jumped into those initiatives feet first back then and found that they were jumping into empty pits. This time around, they're more cautious and asking, "What's different this time?" Well, there are plenty of things different this time, but they still need to be educated about, and convinced of, these differences.

3) Banker say what? Ask 100 banks if they could launch a successful social media campaign, and 95 will say, "Huh?" (4 will say no, and 1 very deluded individual will say yes, unless she's from Wells Fargo). Even if some banks were willing to take a longer term view of the ROI on these investments, it's still not clear to many exactly what Web 2.0 is—and isn't. I, for one, wouldn't suggest tossing around words like "wiki" or "facebook" with senior execs at most financial firms.

So is Web 2.0 dead when it comes to banks? No. But the needle isn't going to move until one or both of the following happens:

PFM sites influence consumers' choice of institutions. Wesabe's Jason Knight has said that his firm doesn't compete with banks. And he's right, of course. But if (or when) Wesabe starts becoming an influence on its members' choice of firms in any significant manner, the banks will sit up and take notice. And then start, however belatedly, to get on the Web 2.0 bandwagon.

P2P lending makes a bigger dent in the big banks' business. Firms like Prosper can crow about the dollar volume of the loans being made on their sites, but, for now, many banks assume (rightly or wrongly) that these transactions are not cannibalizing their business. If this view changes, however, banks will start whistling a new tune regarding Web 2.0.

Ron Shevlin is vice president of client solutions at Epsilon. Prior to that, Ron was an analyst at Forrester Research. He opines (translation: rants) about financial services marketing at Marketing ROI: Whims From Ron Shevlin. The opinions expressed here are Ron's, not those of NetBanker, his employer, or any other sane person or party for that matter. 

Just two days after announcing its browser-based (WAP) mobile banking service (press release here), it's already showing up in the bank's cross-marketing efforts. When I logged out of my Wells Fargo account this afternoon, I was greeted with this message:

Clicking on Sign Up Now takes you to this topnotch landing page (here). The Take a Tour button in the lower right triggers a short animated demo of the mobile service right on the landing page:

Features
The bank is using a new, shortened URL, <wf.com> for mobile access, a huge keystroke advantage over <wellsfargo.com>. Both <wf.com> and <mobile.wellsfargo.com> go directly to a mobile phone-optimized secure sign-in page (see inset). The mobile service offers:

• account balances for checking, savings, mortgage, home equity, brokerage, auto loan, student loan, and credit cards
• transaction history
• funds transfer between Wells Fargo accounts

Note:

1. An interesting side note to the announcement: The first result in a Google search for "wells fargo mobile" still leads to an August 2002 CNet story on Wells Fargo's decision to shutter its original mobile banking platform launched in 2001 (see inset).

CIO Insight recently published a long article called, Will Mobile Banking Take Off? Reporter Dan Briody discusses Wells Fargo's mobile efforts and how their implementation parallels the early days of online banking. Wells EVP Steve Smith is quoted at length.

There's not much new for anyone closely following the space; however, about two-thirds into the article, we discover Wells Fargo is testing SMS banking, using ClairMail as its service provider. Not a huge surprise, but it lays to rest the rumors.

With Bank of America, Citi, and Wachovia grabbing the headlines this year with mobile initiatives, Wells Fargo could create a buzz with an SMS offering by being the first major U.S. bank to go that route. Several weeks ago, Bank of Stockton became the first U.S. bank to align with ClairMail (link here).

On a personal note, I can't wait. The ever-diligent Wells Fargo fraud department, which must have my home phone number on speed dial, will hopefully start texting me when I use their card outside of Seattle, saving us both a lot of time and expense.

For more info see our Mobile Money and Payments report here.

Wells Fargo marked the one-year anniversary of its first blog, Guided by History, with a Q&A today with the bank's Social Media VP, Ed Terpening. The post appeared in the the bank's Student LoanDown blog (post here), which just made it past the six-month mark. I've already weighed in on its blogging strategy (see previous coverage here), so I won't repeat myself.

The bank is experimenting with a number of social media outlets to extend its brand and see what works and what doesn't. Not all of these will pan out. The MySpace presence seems like a long shot, but then again, the cost is negligible so it's worth a try. Wells Fargo has wisely not posted a pure "banking" presence, but instead used one a character from its StageCoach Island game (see screenshot below). 

Bottom line: The bank's willingness to try new things has created an impressive lists of "firsts:"   

• First U.S. bank with a blog (though Verity Credit Union beat them to it by more than a year)
• First bank with a student loan blog
• First bank with a business banking blog
• First bank in the world with a Second Life presence
• First bank on MySpace at <www.myspace.com/stagecoachisland>, really more an extension of its StageCoach Island game which also has its own blog here (see below; though several credit unions beat them to it)
• First bank with 2, 3, and 4 blogs
• First bank with an avatar persona on MySpace
• First bank with a VP Social Media (who appears to be proactively reaching out to the blogging community)

If you've been reading this blog for long, you know I'm going through a "mobile" phase. There's two reasons for that:

1. It's an interesting and important extension to online banking, our core area of expertise.

2. I am in the process of writing two extensive reports on the subject, the first was published a few weeks ago on mobile banking (link here) and the second is due out by the end of the month on mobile payments.

So I had to laugh when I opened by Wells Fargo credit card bill today, not at the size of the bill which was not at all funny, but at the insert that fell out pitching, "cellular phone protection at no cost" (see front of insert right, back of insert below).  

This is a different type of "mobile payment" than what I've been thinking about lately. But, this Wells Fargo program is brilliant, and has a much better business case, at least in the short term.

Here's what Wells Fargo is proposing:

1. Put your mobile phone bill on automatic payment via your Wells credit card.

2. In the event your phone is damaged or stolen, you will be reimbursed for up to $100 in damages, after a $50 deductible (see note 1).

Analysis
The business case for this program looks fabulous. Assuming an average mobile phone bill of $60/mo x 12 months x 1.5% ROA = about $10 per year in revenue. While the cost should be just a few pennies per year in insurance payouts, given the difficulty in filing a claim. 

Even though the bank will pay out benefits to cardholders who had their cellphone charged to Wells even without the incentive, the bank should earn 10x to 20x the cost of the program each year. Maybe Wells can put some of that windfall into a new mobile access to online banking and credit card info. 

Note:

1. To keep costs down, the maximum number of claims is two per 12-month period, $200 in total. And the claim procedure is  cumbersome, especially for a maximum payout of $100. You'll need copy of receipts, statements, other insurance coverage, police reports, and so on. The full details of the fine print are online here.   

The Wall Street Journal published an extra section yesterday on personal finance entitled, Your Money Matters. Online financial tools were highlighted in Jane Kim's, "Check it Out: New online tools from financial institutions can help consumers manage their money." 

Here's the back story on several of the items mentioned in the article:

• Our sister publication, Online Banking Report, was cited as the source of the following statistic: "About 16% of U.S. households used some personal-finance feature at least once in 2006. That percentage is expected to climb to an estimated 33% by 2016, with nearly three-quarters of those households using personal-finance tools offered by their financial institution online."
  
  The information cited in the WSJ story was contained in the report we published last fall in Personal Finance Features for Online Banking (OBR 131/132; see Table 3, p. 3, lines 4 and 10). Current usage estimates were based in part from data provided by Javelin Strategy as shown in Table 2 on the same page. 
  
• In the article, Bank of America's My Portfolio was the first of two existing personal finance tools mentioned. The service, powered by Yodlee, was quietly launched in December and was covered in NetBanker at the time (link here) and received an OBR Best of the Web award in our final report of 2006 (OBR 137) where it was rated the third most important development of 2006.   
  
• The second example cited was Wells Fargo's MySpendingReport (see inset and previous coverage here). The service, which is basically just a consolidated view statement data across the bank's transaction accounts, is a great example of positioning online banking features in a way that resonates with users. It was awarded an OBR Best of the Web in 2005, finishing the year as the tenth most important new development of the year (report here).

The story finished with hints of new services planned for later this year at Everbank, Bremer Financial (powered by Corillian), and a Digital Insight tool that allows users to hand enter additional bill payments in order to their entire payments picture in one place.

No matter how comfortable and convenient your branches are, forcing customers to rush to the branch to cash a check before closing time is not helping cement the relationship. And it leaves you vulnerable to competitors with longer hours or branches that are closer to your customer. And extending hours into the evening and weekend may be great for the customer, but its tough on the bottom line. 

That's what makes Wells Fargo's latest move doubly smart. Because deposit/check-capture ATMs automate the check cashing process, the main reason customers visit a branch late in the day, the machines can serve almost like a virtual branch for many users.

So Wells Fargo is leveraging its so-called "Envelope-free" ATM network to provide what amounts to extended branch hours, providing same-day credit for checks deposited in its Envelope-free ATMs to 7 PM. By adding three hours to what was a 4 PM cut-off, the bank instantly has a network of 1200 extended-hour locations (see Note 1) for a fraction of the cost of keeping branches open an extra 10 to 15 hours per week.  

As remote deposit capture becomes a key selling point for banks, we expect deposit cutoff times to disappear altogether, just as many bill payment systems now allow payments to be initiated up to midnight for same-day processing. 

Notes:

1. The bank announced Tuesday that it will be expanding its network of envelope-free check capture ATMs to 1200, from the current 400 (see press release here). The Wells Fargo Envelope-free page is here.

Wells Fargo has tweaked the design of its Student LoanDown blog by adding a comment input box for the most-recent blog post (see inset). The bank uses this a similar technique at its first blog, Guided by History.

This should spur more comments, especially with the call to action at the bottom, "send a comment to Barbara." Users preview their comment, and read an onerous Wells Fargo disclaimer (see second screenshot below), on a separate page before submitting.

The comment input box is only used on the first blog entry on the main page. Late entries revert to typical blog format, with the comment function at the bottom of the post.

The main downside to this layout is that it's a bit distracting (see screenshot below), but that's probably a good trade-off if it helps drive more comment activity.

Comment Preview

Our sister publication, Online Banking Report, is constantly on the prowl for innovations in online finance. When it finds a new one, it awards the new development an "OBR Best of the Web." During its 12-year history, the newsletter has handed out about 80 such awards (click here for the pre-2006 list). The main criteria for winning is "raising the bar" in online consumer banking, credit/debit cards, payments or lending (see note).

The 2006 winners in chronological order were:

• Prosper (March) for its eBay-like take on
  person-to-person lending (coverage here)
• billQ (August) for its Web 2.0 bill payment
  reminder service (coverage here)
• USAA (November) for the first in-home, remote deposit-capture service (coverage here)
• Wells Fargo (December) for fully embracing
  blogging with the launch of four blogs in 2006
  (coverage here); also, a belated award to Verity Credit Union for being the first to blog in
  December 2004 (coverage here)
• Bank of America (December) for its Yodlee-powered, full-featured online personal
  finance service, MyPortfolio (coverage here)

It was a good year innovation-wise, and we look forward to continued growth in 2007. One prediction: multiple winners in the mobile finance arena. For more information on the top developments of 2006 along with the latest 10-year forecast, see Online Banking Report #137.

Note: Usually, the first company to implement a significant new feature wins the award. And generally there is only one award for each new feature. For instance, Signet Bank was named best of the Web in 1997 when it launched the first triggered-email alert. Then Charter One won the award in 2002 when it took the triggered-alert feature to a whole new level, integrating voice, fax, and email options into a full suite of alerts. Online Banking Report founder and managing editor Jim Bruene makes the final decision. The only way to win the award is by being innovative. There is no nomination process, no deadline, nor any way to influence the decision. 

Evidently, Wells Fargo has found blogging religion. Not only is it the only major U.S. financial institution with a blog, but it now has not one, not two, but FOUR public blogs.

Here's the lineup:

Previously reported:

• Guided by History: The bank's first blog, a community service resource that began in March.
• The Student LoanDown: An excellent blog launched in September to support the bank's student loan business. We've reported on it here and here.

Launched in August, but not previously reported:

• Commercial Electronic Office (CEO) Blog: This B2B blog supports the bank's Commercial Electronic Office business portal. It launched August 10, but is not listed on the bank's blog index page <blog.wellsfargo.com> or on the bank's main website. Our initial reaction: The CEO Blog is an all-business affair with 39 posts in four months, a good rate for a business blog (see screenshot below). We'll take a closer look in a future post.

Newcomer:

• Stagecoach Island Community: Another good-looking blog (see screenshot below) launched Nov. 27 supporting the bank's Second Life-inspired virtual world Stagecoach Island (see our coverage here).

In our opinion, the Wells Fargo homepage has been the gold standard for the past three years, ever since the launch of its tabbed navigation in June 2003. It was one of four large-bank homepages earning an A in our Report on Financial Homepage Design in October 2003 (see Online Banking Report, 101/102). The navigation, copywriting, and usability are still top-of-the-line, but the look and feel is a bit dated, especially the banners running along the bottom.

According to a small-text warning at the top of the page, the site is being refined, and users "may see a different homepage for the next few months" (see screenshot below).

Analysis
The bank's homepage design has been essentially unchanged for more than three years, so it's about time for a remodel.

What we don't quite understand is the reasoning behind the cryptic message at the top of the page. With spoofing a continual problem, the bank may not want users to be concerned if they see changes. However, this message probably does more harm than good. 

The main problem is lack of information. The bank doesn't say what type of changes to expect, or even when they might happen. Most importantly, they fail to communicate why they plan to dribble out incremental changes instead of launching a redesigned site all at once. (And a quick search on "home page redesign found nothing at the bank's site.)

There may be very good technical and/or marketing reasons for the iterative process, but they should be explained. At minimum there should be a link to an FAQ page. As it stands, users can't be sure if an odd-looking Wells Fargo is a spoof or a new design. 

Don't leave users hanging! It creates only more uncertainty, not to mention additional emails and calls to customer service. 

We've come a long, long way since the dawn of the commercial Web, which in banking began in May 1995 when Wells Fargo posted the first customer statement on a website.

Back then, when we talked about virtual banking, we meant Internet banking. Now, there's the very distinct possibility that banks and credit unions will set up shop in virtual worlds such as Second Life from Linden Lab <secondlife.com>.

Let's call it truly virtual banking. Second Life, with more than 940,000 users, allows the exchange of virtual Linden dollars for real greenbacks, currently at a rate of L$273 to US$1. Due to the possibility of real profits from virtual activities, this metaverse has attracted more than 10,000 businesses including Starwood Hotels and others (see Analysis below). 

Apparently, the first real-world bank with a truly virtual presence is none other than Wells Fargo, whose Stagecoach Island debuted in Second Life late last year. However, after a few months the site was moved to a standalone site with no connection to Second Life <stagecoachisland.com> (see screenshot below).

In Second Life, the private island was accessible only to Wells Fargo customers who received an invite from the bank. Normal Second Lifers could not gain entry. Users were given a $30 stake in virtual cash. Although the island tempts them with various ways to spend it, the goal is to save, with interest paid at the rate of 10% per day. Users can earn additional cash by taking finance-oriented online quizzes.

The stated purpose of Stagecoach Island is financial education. It is part of a larger program aimed at younger adults. The We Take the Fun of Money Seriously program was piloted in Austin and San Diego last year. Here's an excerpt from the Sept. 14, 2005, press release:

Wells Fargo is hosting a series of live "We Take the Fun of Money Seriously" events throughout Austin and San Diego during September and October where young adults can participate in various activities — from karaoke and trivia games to athletic challenges and photo booths — and win prizes while learning about banking basics. Event participants will receive the Web address and a unique log-in code for the Stagecoach Island software and will have the opportunity to play the online game at home for 30 days.

Apparently, the pilot was successful. This year, the program was used at summer rock concerts, primarily a dozen venues of The Warped Tour, and at 19 college campuses this fall. The first stop was Aug. 20 at the University of Nebraska and the tour ends Nov. 1 at Central Washington.

The bank was assisted by Swivel Media, a San Francisco-based marketing firm which hosts a Web page and short video devoted to the game at <www.swivelmedia.com/fun_money.htm>. According to a July blog post at Clickable Culture, the company paid $17,000 to Second Life freelancers to build the game.

Analysis
Online gaming, or advergaming as it's sometimes called, is a good way to make an impression with younger users, even though it may be difficult to create a game not considered totally lame by the target audience. We recommend keeping it simple, and bribing the target audience with numerous prizes.

The bigger issue, whether to create a presence in Second Life and/or other metaverses, is more complicated. Several major brands have recently taken the plunge including American Apparel, Starwood Hotels, and others.

The Starwood's program is interesting. They are using the Second Life hotel project, aloft, to create a buzz for a real-world brand they intend to introduce in 2008 under the same name. The hotel's Second Life effort is chronicled in its own blog, <virtualloft.com>, which includes a virtual grand opening featuring Ben Folds scheduled Oct. 19.

Financial institutions, looking to create some buzz, should consider a presence in Second Life. With an expected population of one million by year-end, the marketing opportunities within the metaverse are intriguing. But more importantly, a Web-based blog and marketing campaign could yield millions of free impressions for online and offline media.

However, this is not as easy as it seems. There are numerous risks and obstacles that must be overcome. The largest banking operation in Second Life, Ginko Financial <ginkofinancial.com> which lends Linden dollars at 44% interest, has been plagued with accusations of fraud, specifically of being a Ponzi scheme (read Reuters article here). There have also been recent incidents of Second Life hacking that have caused problems.

But the biggest risk is to your reputation. Not only are you vulnerable to the whims of the game players, you also risk being associated with the more adult-themed activities in Second Life. Before taking the plunge, you should have a staffer join the metaverse and consult with seasoned players for advice on proper "game etiquette" (remember "netiquette" ten years ago?). You want to make sure you position yourself as "less lame" than the average financial institution.

But those risks are manageable; in fact, they are similar to the problems you deal with in the real world. And given the potential buzz from a successful Second Life brand, it's worth your while to investigate the potential.

P.S. If you think this is all a fad, consider the source of the Ginko Financial article cited above. It was written by a new full-time reporter from Reuters who works IN Second Life (see NY Times story here).

Resources:

• Sept. 2005, CNET article on Wells Fargo's Second Life promotion (15 Sep 05)
• Aug. 2006, BusinessWeek article on Starwood Hotel's virtual hotel in Second Life
• June 2006, BusinessWeek article on American Apparel's store in Second Life
• Oct. 2006, brief article on the overall economics from Silicon Vally Bank
• Today's Reuters story on Ginko Financial

After a slow start, with no new entries during its first week, the student loan blog from Wells Fargo is off and running. Since its Sep. 5 launch, the site has averaged about two posts per week, each running 300 to 400 words, a good length. (See inset for jump page to the bank's two blogs, <blogs.wellsfargo.com>)

Furthermore, the writing is surprisingly good, with little corporate-speak, a trap that's so easy to fall into when every word has to be approved by a team of attorneys and compliance officers. Interestingly, the one off-topic post, written by the freelancing college-student mom, Caroline Hansen, was pulled from the site a day or two after it was posted. Either her step-daughter, or more likely, Wells Fargo management didn't like the story about her new tattoo.

The site is obviously aimed at parents, with warnings about credit card abuse and an instructive post about transferring money online to pay for a $573 book tab (ouch!).

While the bank does a good job of not blatantly pitching its products, it seems that most links within the posts lead to a wellsfargo.com page. The blog would have more credibility, and readership, if it linked to more outside resources.

Wells Fargo launched its second blog today, The Student LoanDown  <blog.wellsfargo.com/ StudentLoanDown>. The site, which is not yet mentioned on the main Wells Fargo site, is designed to offer guidance on the student loan process (click on inset for closeup).

The first post claims they won't try to sell anything. It's a claim not technically accurate since there are several links to the corporate lending site, and a position that's not really necessary. As long as you are upfront about the corporate affiliation, it's OK to highlight your own products and services PROVIDED it's done in a way that is both interesting and useful.

The website is powered by Six Apart's Moveable Type and launched with just a single post from two of its four listed authors. Wells Fargo joined the so-called blogosphere back in March when it launched an odd site called Guided by History, a look back at the 1906 San Francisco earthquake and what we can do today to be better prepared for natural disasters.

While that site is pure community service, The Student LoanDown hopes to educate students and parents while driving more business to its student loan unit. Live less than 24 hours, it's too early to give it a full grade, but here are our first impressions.

Pros:

• A bank that blogs, and one that will provide good PR, regardless of whether students like it
• Even if it looks a bit hokey, you can tell the bank put an effort into the design, unlike Bank of Internet (see NetBanker Aug. 31)
• A good cross-section of authors, one from marketing, one who's a May college graduate, one communications consultant, and a bank-sponsored, literacy-program manager (where are the guys though?)
• Full bios and pictures of the authors
• Comments are open (but moderated of course), which is a good feature provided the function is used. The bank will probably have to do some subtle encouragement, perhaps with employees, to get some Q&A started

Cons:

• There are only two postings, neither of which offered anything useful or interesting; try to launch with something interesting, even if it's a blatantly commercial sweepstakes
• The design is a bit hokey; Trey Reeme over at OpenSourceCU called it, "a little on the MySpace side with a WF feel" (hint: that is not meant as a compliment)
• The content needs more pizazz

--JB

In its seventh annual Internet-bank "beauty contest," Global Finance Magazine <gfmag.com> named Bank of America the best consumer Internet bank in the United States and Citigroup the best corporate Internet bank. Apparently, the magazine loves Citigroup's work, naming it the best corporate Internet bank in 46 countries and best consumer Internet bank in 11 countries including Germany, United Kingdom, and Indonesia (see list of complete winners, by country, by clicking on the link at the bottom of this article). 

The magazine also named winners in specific categories. In the United States, the winners were:

Consumer Internet Banks:

Best investment management services: Bank of America

Best bill payment and presentment: Bank of America

Best online consumer credit: Wells Fargo

Best website design: Wells Fargo

Best integrated consumer bank site: Bank of America

Best information security initiatives: Bank of America

Best online deposits acquisition: TD Bank Financial Group
-

Corporate/Institutional Internet Banks:

Best online cash management: Citigroup

Best trade finance services: Citigroup

Best website design: Wells Fargo

Best integrated corporate bank site: Wells Fargo

Best information security initiatives: JPMorgan Chase

-

-

Source: Global Finance Magazine <gfmag.com>, July 8, 2006

It's no secret that a vast population researches online and buys offline, as much as 50% of your customer base according to recent research by Yahoo Search Marketing (NetBanker April 24). Whether the practice has evolved from habit, security reasons, or a need for face-to-face interaction, it's an important dynamic for financial institutions that have billions invested in retail branch networks.

Until consumers are ready to give up the branch experience, an important function of financial institution websites is to funnel prospects into the branch. Most banks now have prominent branch/ATM search functions.

These tools, often outsourced, usually provide good utilitarian results: name, location, hours, phone, and directions. This is enough information for current customers just looking for the closest place to pick up $100 with no ATM fee or deposit the rebate check from Procter & Gamble.

But as a sales tool for prospects considering a major purchase such as a new checking account or mortgage, the typical "branch finder" leaves a lot to be desired.

Analysis
Considering how inexpensive it is to post content online, why is it that banks do so little to help their branches create a unique presence online? After all, bank "stores" are usually multi-million dollar operations with aggressive sales and profitability goals. Even our tiny US Bank branch, staffed with two or three employees, plus a security guard, is surrounded by $500,000+ homes where the largely middle-class owners often have equity of $300,000 or more.

Why doesn't my branch use every tool in the book to tap into this market? Just one or two additional home equity loans per year would pay for a killer website. 

We know the reasons banks keep branches from attempting their own creative marketing efforts: low-budget fliers may not align with company graphic standards; complicated disclosure rules must be followed; branch efforts might conflict with larger "branding efforts," and so on.

Those arguments don't hold as much weight online. Banks could employ a content-management system that allowed branches to customize their personal webpage for use in neighborhood marketing efforts, and that would be more likely to pull a website visitor into their branch.

While we've reported on several of these efforts over the years, it's still difficult to find a comprehensive "bricks-and-clicks" effort. We recently came across Thatsmybank.com from Sacramento-based First Northern Bank (click on screenshot upper left). While the bank does better than most with a branch page that includes a picture of the branch and branch manager along with the names of lending officers, it is still very basic. It doesn't even include the email address of the branch or any of the key contacts.

Mortgage banks have done a better job. Wells Fargo Home Loans has had individual Web pages for its lending offices for several years. Huntington Bank also provides each mortgage loan officer their own Web page (click on inset for closeup). The page is tightly controlled. The mortgage officer uploads a picture, fills in basic contact info, then adds a paragraph about themselves and their lending specialty.

The template is completed with a list of local links provided. The only interactive element is the mail-to link that allows visitors to send an email to the loan officer via the user's email client.

Action Items
We believe branches should have a larger Web presence than just name, address, and phone number. Consider installing a content manager that allows branches to input custom localized content. It's a cost effective way to help branches and loan officers leverage their community connections and unique expertise.

--JB

The U.S. Treasury’s U.S. Money Laundering Threat Assessment, published last December, says that many types of stored-value cards have the potential to become major avenues for money laundering, suggesting—although not saying explicitly—that stringent anti-money laundering regulations are in the offing for the card products.

Industry groups are preparing what amount to pre-emptive negotiations to keep the issue off the floor of Congress, hopefully minimizing potential regulations that could, in the view of many in the industry, cripple the business case for what bankers and other payments executives consider several promising new revenue streams. But prepaid-card executives are declining to speak publicly about the issue, hoping to keep public discussion about stored-valued cards “positive.”

Continue reading "Money Laundering Creates Problems for Stored-value Cards" »

Manhattan District Attorney Robert Morgenthau, together with federal and New York state banking officials, is on the verge of settling serious money laundering charges against the Bank of America Corp. with a reported $25 million fine, making this the second largest money laundering case the long-time DA has settled in three months. In December, the Manhattan DA, the New York State Banking Department, and the Federal Deposit Insurance Corp. settled a similar case with Israel Discount Bank of New York, also for a fine totaling $25 million, including the costs of the investigation.

Continue reading "Manhattan District Attorney and Money Laundering Regulations" »

Judging by media reports, almost everyone in the civilized world has lost their identity to cyber-criminals. But while there has been an unending torrent of news about data breaches and related identity thefts, the damage has been much less drastic than that, says a study from Javelin Strategy & Research.

“The impression in the general public is that identity fraud is spiraling out of control, but what we came away with is the contrary; the growth [in the phenomenon] has been contained,” says Rubina Johannes, the Javelin research analyst who wrote the report.

Continue reading "The Truth about ID Theft from Javelin Strategy" »

People have grown wary of credit cards. They’re paying them off faster; generally, debit cards are edging them out as payment vehicles. And at least for now, home equity loans are increasingly more popular than credit cards among consumers (click on inset for more details and see tables below).

The result? Credit card portfolios are losing profitability, even though net losses and delinquencies are down, and serious questions about the industry’s future are surfacing. So are questions about how wise banks were when they snapped up most of the monoline credit card operations last year. The business model needs an overhaul, says observers, but so far, issuers are just changing the oil. And there may be no way out.

Continue reading "Credit Card Portfolios: More Pressure, Less Profitability." »

A consortium of six major banks and the country’s largest accounting firms said Wednesday that they were setting uniform computer-security standards, designed to ensure that the third-party computer providers they do business with are adequately protecting both their computer systems and the information those financial firms send them.

“This is good news,” says Avivah Litan, vice president and research director of Gartner Inc. “I don’t think it goes far enough, but it’s smart for them [the institutions] to do it in steps, if that’s what they’re doing. But they need to do it beyond the service providers. They need to do it themselves”

Continue reading "Data Security Standards Set by Major Financial Institutions" »

In a blow to the future of account aggregation, Wells Fargo, the second largest online bank in the United States, is discontinuing its OneLook account aggregation service which ran on software from Teknowledge (click on the email message from Wells Fargo to customers, left). The Wells Fargo in-house account aggregation service, installed in November 2002, was the first to be integrated into its online banking services with its own tab.

For more information on the subject and the Wells Fargo service in particular, read Online Banking Report, #96/97 Account Aggregation 3.0.

--JB

Ten years after becoming the first bank in the world to post customer statement data on a website, Wells Fargo's in-branch collateral shows just how far the online banking industry has matured.

Instead of putting a generic online banking brochure in the branch, which would hardly get a second look these days, at least in our Seattle neighborhood, the bank has created an entire take-one brochure showcasing its innovate new feature My Spending Report that we looked at Feb. 17.

The My Spending Report brochure is a statement-stuffer sized 4-panel, 4-color creation printed 2/05 and entitled:

Look at your finances in a new way.

Also on the cover:

Introducing My Spending Report, exclusively from Wells Fargo.   

Inside, the left panel explains the spending report and cross sells credit and debit cards with an umbrella program called, The SmartSpender Plan, which includes:

• My Spending Report
• WellsProtect fraud protection
• Wells Fargo Rewards on select card accounts

The right panel shows a screenshot of the report depicting checking, debit card, credit card, and bill payment activity.

Update on Website slacking
In February, we were critical of the bank for announcing a new feature that had no visibility on its website. That has been corrected. Now the first result for a a search for "My Spending Report" links users to this explanatory page.   

-- JB

Last year, NetBank was one of the first banks to talk about allowing business customers to deposit checks directly via scanner, so called remote image capture or remote deposit capture.   

NetBank has yet to go live, but several others have including: First Tennessee (the first to go live in March 2004), Bank of New York (announced 08 Nov 2004, see inset), HSBC (announced 08 Nov 2004), Wachovia (announced 13 Dec 2004), BB&T (announced 10 March 2005, live 01 April 2005).

Also, know to be implementing or testing: PNC, E*Trade Bank, Bank of America, LaSalle Bank, JPMorgan, BB&T, Mellon, Citibank, Key Bank, Zions, and Glenview State Bank (IL).

Now you can add Wells Fargo to that list.

Last week, the online banking pioneer announced its extremely well named remote deposit capture service, Desktop Deposit. The service allows businesses to scan checks into their PCs using a USB device from the bank. No word yet on pricing and availability.

Analysis
Remote deposit capture, either at the customer's PC or at a scanner-equipped ATM, has the potential to negate one of the branches last roles, check cashing. It could be especially appealing to small businesses who benefit from the obvious time savings (no more trip to the bank) and better cash flow (no stashing checks away until the weekly bank run).

But the more important benefit to businesses are the improved record keeping and easier resolution of billing disputes. Images of deposited items are available immediately online and can be easily searched, retrieved, and forwarded, should a question arise later. Finally, the business retains the original paper item for a back-up paper trail.

And given the large value to the business, banks should be able to increase checking account and/or online banking fees for remote-capture clients, thus profiting from a process that wrings paper checks out of the system.   

Resources:

• NetBank Announces Remote Deposit Scanning Service">, NetBanker, 24 May 2004
• The Tech Scene: Remote Image Capture - Small Banks React, American Banker, 6 April 2005

-- JB

2005 is off to an innovative start, first the launch of Billeo, a toolbar-based bill payment manager. Now, Wells Fargo puts a little sizzle into its online banking steak, with a preformatted spending report, ala Quicken, appropriately named, My Spending Report.

The bank's press release says its patent-pending, which we can only hope is a marketing gimmick.

Here's how the bank describes the service:

...combines spending transactions from a customer's check card, credit card, checking account and bill pay in one convenient place, accessed through a secured, online banking session and updated automatically each day. Electronic and bill payment transactions are organized by familiar categories such as gas/automotive, groceries, ATM withdrawals, etc.

Analysis
We will see more and more innovations around data delivery as banks try to differentiate their online services and add value. The stream of banking data available online is begging to be organized, analyzed, flagged, and reported.

Quicken has been doing it for 20 years, but it's more appealing to many users, especially younger ones, to integrate personal financial management right into banking websites.

Slightly Off-Topic Rant
Despite a well-crafted press release, don't bother visiting Wells Fargo's website today to learn more about My Spending Report. Not only is there no homepage link, the site-search function contains no relevant links either. So much for integrating PR with your website.

--JB

If you'd like to learn more about the how personal finance functionality is penetrating online banking, check out Personal Finance Features for Online Banking: Why “My Spending Report” trumps free bill pay on the subject from our sister publication, the Online Banking Report.

Wells Fargo knocked Citibank out of the number-one slot in the latest beauty contest from Gomez. Wells moved up two notches to log its first-ever top ranking. Citibank finished second, ending its two-year lock on the number one ranking. Charter One drops a notch to third place, but still shows considerable improvement from its number nine finish a year ago. The only other major change was Wachovia’s jump of eight notches to take the seventh spot, its first top-10 finish.

Table 1

Top-Rated U.S. Online Banks According to Gomez: 2000 to 2003

Source: Gomez Advisors, 5/03; *pre-merger First Union score; in 2001, Wachovia ranked 17 with a score of 5.08; in 2000, Wachovia ranked 26 with a 5.56 score

Using our live test accounts, we changed passwords then subsequently “forgot” the new one to test how major financial institutions handle the situation. Overall, most received good marks, although everyone has room for improvement.  

Table 1

Password Scorecard

Source: Online Banking Report, 4/03
*We believe users should have at least 5 login attempts, with clear instructions before and after lockout

Testing process

1. Login with existing username and password

2. Change password or username

3. Logout

4. Use online password reset if available

5. Attempt to log back in 10 times with an incorrect password

American Express

Password Scorecard

Grade: Needs improvement

Weaknesses:
(1) Browser AutoComplete function not disabled
(2) No email confirmation of password change
(3) Account lockout too quickly, after third login try

Password structure: User defined, 6 to 8 characters with at least 1 letter and 1 number

Username structure: 5 to 20 characters with
at least 1 letter

Second password/challenge: No

IE 6 AutoComplete disabled: No

Online password change: Yes, with old password

Email confirmation of password change/reset: No

Online password reset: Yes, with card number, 4-digit card ID (on face of card), work phone number, last 4 digits of soc, and 5-digit zip code

Account lockout with excessive login attempts: Yes, after third attempt; red warning issued after attempt two

Online username retrieval: Depends, certain accounts can retrieve their username online, others must call; we were in the latter group so could not test this feature

AutoComplete is not disabled on the login screen.

User friendly: American Express warns users after their second unsuccessful login that they will be locked out after one more attempt.

Password reset, step 1: Enter userid, card number, and 4-digit code from back.

Password reset, step 2:
Enter personal info for authentication.

Bank of America Credit Card

Password Scorecard

Grade: Good

Weakness: No email confirmation of password change

Username structure: User defined, 9 to 20 numbers

Password structure: 4 to 7 characters; cannot repeat 4 or more in same sequence as username; cannot be same character repeated

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: No, must call

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, after 4 attempts; help section carries clear warning

Online username retrieval: No

BofA provides a helpful popup screen with each unsuccessful password attempt.

Centura Bank

Password Scorecard

Grade: Fair

Weaknesses:
(1) No email confirmation of password change
(2) No warning of account lockout
(3) No customer service link or HELP available from login screen

Username structure: Social security number (with dashes)

Password structure: 6 to 15 characters

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Password change: Online with old password; but neglected to provide an on-screen confirmation that the change occurred, an annoying usability flaw

Online password reset: No, must call; password sent via postal mail

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, after sixth unsuccessful attempt; no prior warning

Online username retrieval: Unnecessary (SSN)

Centura had the best login screen “security look and feel.” It also provides a link to disclosures, but not a single mention of customer service or online help, even after making an unsuccessful login attempt. Evidently the bank’s lawyers have been through the site, but where’s customer service?

Charter One Bank

Password Scorecard

Grade: Needs improvement

Weaknesses:

(1) Browser AutoComplete not disabled

(2) No email confirmation of password change
(3) No warning prior to account lockout
(4) No message after account lockout

(5) A bit too easy to gain read-only account access for new users; requires account number and social security number. However there is a crucial safeguard for bill payment which requires mother’s maiden name, date of birth, home phone number, and a 2-day waiting period.

Username structure: Social security number

Password structure: Must be at least 6 characters

Second password/challenge: No

IE 6 AutoComplete disabled: No

Online password change: Yes, with old password

Online password reset: No, must call

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, not sure when it happens, sometime before the tenth attempt; the bank does not provide a warning of impending lockout, nor does it let you know after you’ve been locked out, you only receive a cryptic
error message.

Online username retrieval: Unnecessary (SSN)

AutoComplete has not been disabled
at account login.

New users enroll with social security number and account number. Note the excellent use of security graphics during enrollment.

Chase Bank

Password Scorecard

Grade: Good

Weaknesses:
(1) No email confirmation of password change
(2) No warning of upcoming account lockout
(3) No message after account lockout

Username structure: User defined, must include one number

Password structure: 6 to 10 characters, 1 of which must be a number

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: Yes, with name, account type, account number, social security number, and two user selected challenge questions

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, sometime during the first 10 attempts; no warning message and no indication when account is lockout out, a “try again” message just keeps repeating

Online username retrieval: Yes, displayed online after entering name, account type, account number, social security number

Chase is one of the few banks offering online retrieval of forgotten usernames. After correctly entering name, account number, and social security number, the username is displayed. At that point you can login if you know your password. If not, you can retrieve your password online by answering two previously selected challenge questions. This is great from a usability standpoint, but the bank should send a confirmation via email and/or snail mail.

To reset the password, users answer two
previously established challenge questions. 

DeepGreen Bank

Password Scorecard

Grade: Needs improvement

Weaknesses:

(1) Browser AutoComplete not disabled

(2) No email confirmation of password change

(3) No minimum password length, can be a single letter or the same as the username
(4) No warning before account lockout
(5) No message after account locked out

Username structure: User defined, can be all alpha

Password structure: 1 to 14 characters, can be the same as the username or a single character

Second password/challenge: No

IE 6 AutoComplete disabled: No

Online password change: Yes, with old password and mother’s maiden name

Online password reset: Yes, with social security number and mother’s maiden name

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, but not sure when because the lockout is not disclosed until the user attempts to login with correct username/password.

Online username retrieval: No, must call, then wait
7 to 10 days to receive in the mail

A common security vulnerability: Failure to disable IE 6’s AutoComplete function.

Everbank

Password Scorecard

Grade: Needs improvement

Weaknesses:
(1) AutoComplete not disabled
(2) No email confirmation of password reset, even though it can be reset with info available to an identity thief, SSN and mother’s maiden name
(3) No email or on-screen confirmation of p/w change
(4) No warning before account lockout
(5) No help on login screen for the memory challenged

Username structure: Initially set as social security # (with dashes); can be changed online one time; 8 to 24 characters, not similar to current username, not same as password, not offensive, at least 2 numbers and 2 alphas

Password structure: 8 to 16 characters with at least one number and one letter, not similar to username, not similar to prior password, not the same reading backward and forward

Second password/challenge: No

IE 6 AutoComplete disabled: No

Password change: Online with old password; no confirmation of the change provided on-screen

Email confirmation of password change/reset: No

Online password reset: No, must call; new temp password given over the phone after providing SSN, name, address, date of birth, and mother’s maiden name

Account lockout with excessive login attempts:
Yes, after fifth attempt, must call to reactivate; no warning prior to lockout

Online username retrieval: No, must call

Everbank provides no help at login for users that forget username or password, just a lengthy warning written by the lawyers.

First USA Credit Card (Bank One)

Password Scorecard

Grade: Fair

Weaknesses:
(1) No email confirmation of password/username change or reset; especially important given relative ease of resetting username/password
(2) No warning before account lockout

Username structure: User defined, 7 to 16 characters, case sensitive

Password structure: 7 to 32 characters, case sensitive,  must have at least 1 number, may not use the same letters consecutively, cannot match username or social security number.

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online username change: Yes, with old password

Online password reset: Yes, with credit card #, social security #, signature panel code, and expiration date

Online username reset: Yes, with credit card number, social security number, signature panel code, and expiration date

Email confirmation of password or username change/reset: No

Account lockout with excessive login attempts: Yes, locked out after four attempts, no warning given

First USA is the only financial institution tested which allowed usernames to be reset online; nice for usability but a confirmation of the reset should be emailed and/or mailed to the cardholder.

Harris Direct (brokerage)

Password Scorecard

Grade: Good

Weakness:
(1) No email confirmation of password change (thought there is for password reset)
(2) Only 3 login attempts allowed before lockout (but can reset online relatively painlessly)

Username structure: User defined, 6 to 15 characters

Password structure: 6 to 8 characters

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: Yes, a new disguised password is emailed after entering username and birth date; the new password is a created from the account holder’s mother maiden name and social security number but is not disclosed in the email, e.g. the first 2 letter of mother’s maiden name plus last 4 digits of social security number.

Email confirmation of password change: No

Email confirmation of password reset: Yes, confirmation also sent via snail mail

Account lockout with excessive login attempts:
Yes, after third attempt, but can be reset online; no warning before lockout

Online username retrieval: No, must call

HarrisDirect allows online reset after your account has been locked out for excessive login attempts. It was the only company which emails a disguised new password when resetting. For good measure, they also mail an identical confirmation.                    

ING Direct

Password Scorecard

Grade: Excellent

Username structure: Account number

Password structure: 4-digit number (called PIN)

Second password/challenge: Yes, one of 5 user-specified questions asked at login (see below)

IE 6 password remember disabled: Yes

Online password change: Yes, with old password

Email confirmation of password change: Yes; confirmation also sent via postal mail

Online password reset: No, must call

Account lockout with excessive login attempts:
No (not in the first 10 attempts)

Online username retrieval: Unnecessary (acct #)

ING Direct is the only bank we know of using a challenge question at login. In addition to account number and password, one of these five rotating questions must be answered correctly:

•  first 4 digits of social security number

•  zip code of mailing address (first 5 digits)

•  birth year (4 digit)

•  last 3 digits of social security number

•  last 4 digits of social security number

We like the concept, but the implementation is weak. By simply refreshing the browser screen, the would-be thief can select which question to answer, one of which is zip code, which is trivial to ascertain. 

PayPal

Password Scorecard

Grade: Fair

Weakness:
(1) AutoComplete not disabled on the password reset screen (it is disabled on login page)
(2) Username (email address) known to others

Username structure: Email address

Password structure: 8 to 24 characters case sensitive; recommended, but not required that it include upper and lowercase and at least one number or special character

Second password/challenge: No

IE 6 AutoComplete disabled: Varies; yes, on main login screen, no on password reset screen

Online password change: Yes, with old password

Online password reset: Yes, via email; must answer secret question via email link; if unable to access original email account the new password is sent via snail mail

Email confirmation of password change/reset: Yes

Account lockout with excessive login attempts:
Yes, after 10 unsuccessful attempts; a lockout warning appears after the seventh attempt

Online username retrieval: Not necessary since username is equal to email address

PayPal is one of the few financial companies using cookies to automatically insert usernames at login. The company has used this approach since inception, so they must feel that the improved usability more than compensates for the decrease in security.

PayPal’s online password reset process requires the user to have access to the email account registered with the service. If not, users answer one of four authentication questions (top screen) and the password is mailed to a one of the previously confirmed snail mail address (bottom screen).

PayPal explains after the seventh incorrect password attempt that you have 3 more tries before lockout. This is a far more reasonable approach than many banks’ three-strikes-and-you-are-out policy.

Schwab

Password Scorecard

Grade: Fair

Weaknesses:
(1) No email confirmation of password change
(2) Account lockout too quickly, after 3 login attempts, but can be reset relatively easily online

Username structure: Account number or social security number

Password structure: 6 to 8 characters including at least one number BETWEEN the first and last characters; cannot match or be a subset of username

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: Yes, in one of two ways;
(a) If logging in with account number, you must provide social security number, date of birth, home phone number, and correctly pick a security in your account from a list of 10 choices including “none of the above”
(b) If logging in with a social security number, you must only provide the answer to the secret question.

Can also reset via automated phone system.

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, after 3 attempts; no warning prior to lockout

Online username retrieval: Not necessary (acct. # or soc. #)

Schwab’s unique password reset process requires the usual social security #, birth date, and telephone, plus users must correctly choose one of ten securities in the portfolio (including “none of the above”).          

US Bank

Password Scorecard

Grade: Good

Weakness: No email confirmation of password change

Username structure: User defined, 8 to 24 characters

Password structure: 8 to 24 characters

Second password/challenge: No

IE AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: Yes, with ATM card number and ATM PIN; new password displayed online

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, after 6 attempts; can reset online or wait 24 hours; no prior warning

Online username retrieval: No, must call

Password change screen. Note the prominent placement of what happens next.

Forgotten password can be reset online with
ATM card number and PIN.

Wells Fargo

Password Scorecard

Grade: Good

Weaknesses:
(1) No email confirmation of password change
(2) Account lockout too soon, after 3rd login try

Username structure: Social security number

Password structure: 5 to 8 characters

Second password/challenge: No

IE 6 AutoComplete disabled: Yes

Online password change: Yes, with old password

Online password reset: Yes, with statement account number and ATM PIN; those without an ATM PIN are directed to call customer service.

Email confirmation of password change/reset: No

Account lockout with excessive login attempts:
Yes, after 3 attempts; user redirected to online password reset page; no prior warning

Online username retrieval: Unnecessary (SSN)

Wells offers six options for where to go
immediately after login.

After three unsuccessful login attempts users are directed to reset their password, which can be done online with account number and PIN.    

Following are some of the better emails we’ve seen from financial providers in recent months. Because we only see those from financial institutions where we have established relationships, we would appreciate seeing others you’ve received. Send them to: info@onlinebankingreport.com .

Wells Fargo/ShareBuilder

This is our favorite holiday email. It was marketing NetStock’s ShareBuilder on behalf of co-branding partner Wells Fargo. It was sent the week after Thanksgiving (Nov. 28) and featured a engaging graphic of a young child and just 32 words of text (not including the mousetype fine print).

The pitch was for starting ShareBuilder accounts for children, with a $25 bonus for accounts opened prior to Dec. 31. A unique, if somewhat complicated, holiday gift idea for parents and grandparents.

First USA

This is a good example of a simple old-fashioned holiday greeting. FirstUSA punched it out on Christmas Eve and included a well-crafted P.S., “Maximize your holiday time by managing your accounts online at: Cardmemberservices.firstusa.com.

PayPal

PayPal sent several emails during the holiday period promoting a usage sweepstakes that rewarded users for shopping with PayPal. Taking a page from Visa’s annual holiday promotion , winners received their PayPal purchase free of charge. This message kicked off the program on Nov. 30.

PayPal also provided shopping ideas and a link to a directory of PayPal shops (right-hand side of the screen). The look of the emails was crisp and clean like the company’s Web site, but we would have preferred a bit more holiday cheer in the graphics.

DeepGreen Bank

DeepGreen Bank sent this message on Dec. 10 promoting holiday usage of its Home Equity Line of Credit. The message was pretty straightforward and was signed by DeepGreen CEO Jerome Selitto.

It’s a good email overall, but it’s a bit boring. The usual, great rates, great convenience, yada, yada, yada. To increase readership, it would be better to put some of the info into eye-catching graphics.

The company made a serious error by not putting DeepGreen in either the email subject or sender field. Unless you know the CEO, it looks a lot like a SPAM until you open it.

Intuit’s Quicken.com

We received our first holiday email from Intuit on Nov. 15, with a message entitled, “Holiday Gift and Sending Guide.”  The message had the usual format of Intuit’s monthly Money Matters email letter, with no holiday graphics. Beside the spending and gift advice, it featured a fifth anniversary sweeps for NetBank.

Although much of the advice is boilerplate, we like how it positions Quicken.com as a provider of thorough and timely advice about all aspects of your financial situation.

Normally, we don’t like to see outside advertising, but the NetBank sweeps added interest to the message.

NextCard

The December installment of NextCard’s monthly email newsletter was full of shopping discounts. The full newsletter was a bit cluttered taking up about four screens (at 800x600 on a 19-inch monitor).

The newsletter also promoted the Visa Magic Moments sweepstakes that awarded cardholders free purchases at a randomly selected second every day (box on the right).

To help differentiate its message from in-box SPAM, NextCard incorporates the cardholder’s first name in the email subject field.

Wells Fargo

www.wellsfargo.com

As Net.B@nk’s stock shot up $100+ per share on news of 8,000 new accounts, Wells Fargo (San Francisco, CA; $195 billion) added 150,000 online accounts in first quarter, upping its total to 850,000.

Wells Fargo

www.wellsfargo.com

Wells Fargo (San Francisco, CA; $101 billion; 10 million ATM cards) became the first bank to offer real time second mortgage/home equity application approval. The new service is featured on its home page and other areas such as the following starburst on the Request for Info page.

Promotional icon located in the Request for Info area.

Great program, crummy Web page. Navigation bars are nice, but this goes overboard. When I saw this screen, I wanted to move on as quickly as possible.

Wells should be commended on pioneering yet another industry-first feature on the Web. Real-time approval is a great marketing tool and sure to bring incremental business. But the treatment of the innovative feature on its Web, while thorough, is uninspiring if not downright confusing with five navigation bars competing for attention (screenshot above). Compare that to the elegant design at NextCard (OBR 5/98) or The Lending Tree Contact: Dudley Nigg is EVP, (415) 477-1000.

Wells Fargo

www.wellsfargo.com

Wells Fargo brings its stage coach to the investing arena with a mid-priced online brokerage offering.

Wells Fargo (San Francisco, CA; $101 billion; 10 million ATM cards) added WellsTrade, a discount brokerage service, to its Web offerings. By Internet standards, the service is premium priced at $29.95 plus $0.03 per share after the first 1,000. But less-frequent traders likely to use a bank offering, aren’t likely to care about paying an extra $15 for a couple trades per year. Especially if the program is integrated with their bank account through online funds transfer. The company worked with Philadelphia-based BHC Securities to develop the online program.
Contacts: At Wells, Cliff Gerrish is Mkt. Mgr. Private Client Services; Dudley Nigg is EVP, (415) 477-1000.

Wells Fargo

www.wellsfargo.com

Wells Fargo (San Francisco, CA; $101 billion; 9.9 million ATM cards) posted its privacy policy at www.wellsfargo.com/privacy .

Chase Manhattan

www.chase.com

Chase Manhattan Bank (New York; $281 billion; 3.6 million ATM cards) has joined the online banking elite, crossing the quarter-million subscriber mark. Here are the five largest North American banks. CIBC (Toronto, Canada; CDN$283 billion; 4.8 million ATM cards) is also nearing the quarter-million threshold, reporting 200,000 users on March 4, 1998.

Source: company reports, industry estimates

(1) For free services, this number of subscribers isn’t particularly meaningful. Number of users is a far better gauge. But of the five, only BankBoston has reported regular users, which are 50-60% of subscribers.

(2) Monthly fee for lowest priced online option. Some charge additional fees for access through Quicken or Money.

(3) Bill pay is optional. The fee is waived at Wells with a $5,000 deposit balance and at Nations and BankBoston with premium checking accts. Additional transaction fees may apply for heavy users.

Bank of America

www.bankamerica.com