4 ms·
G Suite support from Google improved a lot, but for good reasons it is not easy to recover access to an administrator account that was modified to prevent recov
by scardine 9y ago
G Suite support from Google improved a lot, but for good reasons it is not easy to recover access to an administrator account that was modified to prevent recovery. In a case like this, how support personel can tell a legitimate customer from someone trying to gain access through social engineering?
A local reseller can pay you a visit and verify the situation but hands are tied for the friendly Kumar sitting at a helpdesk facility in India.
Here in Brazil it is even harder, because most customers are unable to communicate well in English and support in Portuguese is not done by native speakers.
- derefr 9y ago> In a case like this, how support personel can tell a legitimate customer from someone trying to gain access through social engineering? Pretty simple: opt-in KYC. Give people the option to email/fax you their passport or birth certificate or whatever, at any time after they set up their account but before the account is compromised. Extract the relevant ID numbers from the images; then store those numbers, encrypted, the same way you'd store "password recovery" info. If the account is later compromised on their end, just ask the person attempting to do the recovery to send through the same stuff again, and compare with your recovery fields. It's essentially the pseudo-biometric, pseudo-"something you have" equivalent of a Secret Question.