4 ms·
After my identity was stolen, likely from Equifax, I closed my Capital One account and advised everyone I knew to do the same. I was shocked to discover how eas
by jinushaun 7y ago
After my identity was stolen, likely from Equifax, I closed my Capital One account and advised everyone I knew to do the same. I was shocked to discover how easy it was to get past the forgot password screen: you are immediately logged in with full privilege if you answer all the easy to guess PII questions! No email notification. No text. No 2 factor. Full logged in access!
Lesson learned: always check the forgot password/trouble logging in feature on sites where security matters.