Quote from thehangingman:
IB has it down pat. You cant make a withdrawl without the token. The token in question also has a pin, so even if the person has the token then they have to know the pin as well.
However, you can still trade if you have the password which I believe is a flaw. I would like to use the token as well in this instance.
I change the IB password every weekend with an 8 digit randomly generated alpha-numeric password and only after the computer has been thoroughly scanned for spyware. Another IB flaw is that your password cant excede 8 digits.
From a psychological standpoint, I would feel safer if the password was at least 12 digits. Every other account, I use the max number of digits possible. Im not sure if a password longer then 8 digits would matter, but I would feel a little safer knowing that its longer.
How much do you trade every day?
How much would it cost you...
If your security token was lost, broken, or down for one day?
From your attitude... obviously not very much.
I can go along with the withdrawal token...
But if a token is required for trading...
I can almost guarantee that you would be down 2-3 days/year...
And the lost profits and psychological stress...
Would far outweigh the infinitesimal chance that someone could actually trade your account...
And get away with it.
The whole security problem has been manufactured...
Because people like IB ** refuse ** to make 30 second phone call to check suspicious activity...
And prefer to saddle the trader with Draconian systems that can and will go wrong.
Also...
Most institutions have VERY strict rules on money flows...
And, by law, funds can ONLY be wired to certain accounts.
If a Big Broker choses to wire funds anytime, anywhere because they are too lazy to change a program...
They would be 100% liable for sending an illegal wire.