4 ms·
The 2FA messages I get from my bank are already something like "Your security code is 0123456. Do not share with anyone. We will never call to ask for this code
by gurchik 5y ago
The 2FA messages I get from my bank are already something like "Your security code is 0123456. Do not share with anyone. We will never call to ask for this code." But it wouldn't surprise me if victims are too scared to read it properly, so some improvement could be helpful. It doesn't help that other banks regularly ask for SMS codes over the phone, entraining into people to do it without thinking.
I would personally feel a lot better if every bank had the ability to only allow 2FA via OTP, or only physical key, or even email. My bank uses a "Security Word" which is crazy to me.
- underwater 5y agoThe scammers get you panicked and hold you in that state so that you're stressed out and not thinking rationally. They also exploit a small slip up and escalate it into a catastrophic one. For example the scam might start with the assumption that caller ID is accurate, or the assumption that because there is fraud on your account the person is actually from the "fraud department", or the assumption that hanging up a landline terminates the call. Each of those are small slipups, but they get people bought into the fiction, and then as the scam escalates they don't stop and think through the sequence and realise that the initial assumption was flawed.