In other words, your account could show a full balance online but actually be empty. The only way youd find out is if you went over the limit or if you see it on a paper statement thats mailed to your home.
So is he saying that electronic statements (in PDF form) are useless too? My bet is that the computer system that generates the PDF is the same one that prints a physical statement. If the data in the computer is hacked I'd expect both to be incorrect.
I can imagine that a website page, displayed in a compromised browser, could display
incorrect information whereas a provider generated statement, in whatever form, would be correct.
I always download and check statements in PDF format.
Upon reflection I guess a hacker could provide a (modified) link to a bogus PDF statement if the users browser was hijacked. IMO doing that well enough to pass unnoticed (by me anyway) would be difficult but certainly possible. I always visit the providers page for downloading statements and not links in email etc. In theory that may not make a difference.--
Don't feed trolls--it only makes them grow!