4 ms·

I just had this experience from pnc bank. I don’t even bank with them, but a member of my household does. The incoming message was automated, asking for (perso

I just had this experience from pnc bank. I don’t even bank with them, but a member of my household does. The incoming message was automated, asking for (person who lives here) with a visa debit card that has fraudulent transactions. The caller id was a number not listed on the back of the card. Pressing “1” puts you into the next phase, which asks you to “verify” your identity by - guess what - typing in your full 16 digit debit card number! At this point I am convinced this is a scam. You google the phone number and you see tons of links saying it’s a scam. The person calls their regular number on the back of her card and they claim no fraudulent activity. A few days later I still get these calls so I decide to investigate. Pressing zero a bunch and asking for an agent finally gets me to a live individual. He claims they’re from pnc and they are a different section not connected to the “main” number. He’s able to recite details about the account that only pnc would know, so now I’m not sure. I email abuse@pnc.com asking them to please either say the calls are fraudulent or acknowledge that the phone number associated with these calls is legitimate (it doesn’t appear anywhere on pnc’s web site) I did get a response - good! But they didn’t actually change the site ... so I suppose in this case anyone who receives notification of fraud on their pnc debit card should email abuse@pnc.com to validate the calls are legitimate?

xur17 6y ago
> I email abuse@pnc.com asking them to please either say the calls are fraudulent or acknowledge that the phone number associated with these calls is legitimate (it doesn’t appear anywhere on pnc’s web site) Note that faking the number you are calling from is fairly trivial, so do not trust the callerid as proof of identity.
- ipython 6y ago
  I should have clarified: I called the number back (from the caller ID)
0xff00ffee 6y ago
> He’s able to recite details about the account that only pnc would know, so now I’m not sure. That's the creepy part. There is so much of our info available on the darkweb that even engaging with scammers potentially verifies it and makes it more valuable, although it is unlikley a purchaser of a phishing database is going to provide feedback to the point of origin, they may feed it forward if they resell and augmented dbase. [For example, if someone buys 1,000,000 phone numbers, and that person finds 250,000 are bogus, they can sell the "cleaned" database again claiming it's been slightly sanitized. DefCon has taught me to fear the world.]
mint2 6y ago
My company expense card is from pnc. I’ve had many bad experiences with it that make them seem very unprofessional and not competent technically. First time I needed to update my pin to use the card and their databases were down... But yeah their fraud detection is lacking and reporting it was a pain, and they are slow to resolve anything. They did not detect the fraud at all. Your experience reinforces my impression.

xur17 6y ago

> I email abuse@pnc.com asking them to please either say the calls are fraudulent or acknowledge that the phone number associated with these calls is legitimate (it doesn’t appear anywhere on pnc’s web site) Note that faking the number you are calling from is fairly trivial, so do not trust the callerid as proof of identity.

ipython 6y ago
I should have clarified: I called the number back (from the caller ID)

0xff00ffee 6y ago

> He’s able to recite details about the account that only pnc would know, so now I’m not sure. That's the creepy part. There is so much of our info available on the darkweb that even engaging with scammers potentially verifies it and makes it more valuable, although it is unlikley a purchaser of a phishing database is going to provide feedback to the point of origin, they may feed it forward if they resell and augmented dbase. [For example, if someone buys 1,000,000 phone numbers, and that person finds 250,000 are bogus, they can sell the "cleaned" database again claiming it's been slightly sanitized. DefCon has taught me to fear the world.]

mint2 6y ago

My company expense card is from pnc. I’ve had many bad experiences with it that make them seem very unprofessional and not competent technically. First time I needed to update my pin to use the card and their databases were down... But yeah their fraud detection is lacking and reporting it was a pain, and they are slow to resolve anything. They did not detect the fraud at all. Your experience reinforces my impression.