... well, except for the most gullible and uncareful ones !

I know this is not related to GOG, but in fact it is a bit.
GOG implemented recently Two step authentification (optional), GOG wallet (optional), both quite some time after Steam and Humble

But when we would complain about GOG, keep this in mind:

Whenever they add a customer feature, they do this way better and overall are behaving way more safely than concurrent stores.

My last purchase on humble was 2 weeks ago (august 27) without trouble
Tonight i try to purchase something, of course i avoid paypal because i "divorced" from Paypal a few years ago)
Checkout and validate as usual, and suddenly ! I'm asked my phone number for verification SMS
I search a bit, usually it is required if i used their stripe payment function "remember me" (i didnt) or opted in for 2 factor authentification (didn't either)

1) I don't have cell phone anymore, except a professional one that is not "mine" but provided by my employer... So i can't get an SMS with a landline (at least not mine)

2) NOWHERE they ever disclose any privacy rule or explanation about how they will/would use this rather personal piece of information beyond the scope of the current order, or with whom they woumd share it. Which is rather shadowy, privacywise and consumerwise

3) best for the end: no fear, they provide another payment method (and then i thought i entered the twilight zone):
SOFORT BANKING !
Aside frorm themselves claiming they are all safe; secure, number one and so on, i couldnt verify anything about them. I sure may sound dumb to you especially if you already know it and think/know Sofort is secure and trustworthy
So i just went it to have a look:

The damn thing ask me for my full personnal bank account credentials !!! NO less ! The guies want the credentials i use to log in to my bank and access my account and do rather serious things with. How could anyone possibly allow this service (even if legit) to be launched in such way ?
Maybe it is a cultural thing, that in USA it is common and casual to give out/share your bank personal credential with each and every merchant or online sertvice you deal with... But here it's rather personal matter in my country, not a single local merchant or service would dare to ask that (and bank would not allow; in fact, sharing credentials with a 3rd party is against their TOS)

It seems Humble doesn't really want regular customers anymore; but they still will gladly welcome gullible ones who doesn't value their safety.

At least, GOG didn't spit out similar nonsense yet :)

PS: still can't believe it, even after writing it down here ! FULL personal credential...

You can pay with Amazon, right? I find that works well.

Curious. I wonder if that's a recent overall change or one related to customers with French IPs...

Are you talking about name/address along with the credit card info? If so, that's fairly common, at least, in my experience.
If you're talking about literal "this information can be used to access my bank account and screw around" sort of stuff, I'd contact Humble and ask about it. That sounds like a phishing scam.

well, it's something i always found strange:
"Bundle" part of humble does include amazon payment as a possible method (and it's a fin service afaic)
"Store" doesn't offer amazon payment as a possible method

also: thanx for confirming it wasn't a "cultural" thing

but anyway, what goal would humble try to achieve by taking a payment partner that looks so obviously suspicious and shady ?

i mean aside from giving customers to steam and gog, i mean :)


nop zeogold it's not name and adress, it's Bank account number, bank's login and bank password"
and that is not the kind of "casual" piece of personal info one would willingly disclose...

I'll check through vpn if this payment method was proposed because of my frnech ip (but hell, it is especially more suspicious under french law and cultural habits than anywhere else) or if it's a general overall change (thanks for suggesting about geolocalisation scenario)

0.0

-.-

0.0

0.o

Wow. I think you're wise to be suspicious.

what is even more frightning is that they act and talk about themselves in their FAQ as if it was completely common and normal to work this way :)

I mean, it takes serious balls to try to put such obviously suspicious stuff in the open and hoping people will fall for it (sadefully, there are poor souls that will fall for it)

Just curious... why did you drop Paypal?

both because they changed their TOS regarding privacy (and sharing their client's info with partners like facebook, which i dont fancy either) and also a change in fiscal legislation in my country that made paypal account falling into a different "category" that made it tedious and risky to keep using for me theorically

I see. I guess I should look into that. That bit about sharing info doesn't sound good to me, but it would be tremendously inconvenient for me to stop using it.

Becaaaause some people don't have a personal mobile device capable of making calls?

Like 20 USD feature phone?

That doesn't even make sense. Even a family dinner is more expensive than one feature phone.