2 ms·
In your story the bank trusted a phone call more than you being logged in the website? How did they authenticate you over the phone?
by jobigoud 6y ago
In your story the bank trusted a phone call more than you being logged in the website? How did they authenticate you over the phone?
- judge2020 6y agoThe first call is authenticated as being the bank by calling the correct phone number the bank has on the website. The second call is authorized via a password given on the first phone call: > (with the agreed password for when the bank calls me) Now the stringency of the verification of the caller being OP is unknown.
- tialaramex 6y agoAfter I identify myself I have to give them letters from a telephone password and a series of arbitrary questions I selected like "Memorable date" to answer. The very large transfer was years before I received a physical two factor authenticator, it's possible that these days I'd need to prove I had the authenticator too, I don't know.