In the report problems of online banking from security point of view will be discussed. Particularly real problem of legal persons in providing IS of an employee working place, who works with bank-client, infrastructure vulnerabilities of the banks in front of the possible threads will be revealed. Moreover, many 0day vulnerabilities of online banking systems, common mistakes of all popular products developers will be presented. And, of course, it will be shown what it will lead to in the terms of cash theft probability The most stupid RBS mistakes What dont do developers How to send a payment order without an EDS? Practical tips on bypassing Tokens within 5 minutes Attacks on the bank or a customer from inside what to do, pen tester experience The effectiveness of security systems (anti fraud, IPS, firewalls) Where the money lie