4 ms·
Would it help if the text message included the reason for the code? “This is <bank>, you requested a password reset. Your code for this is 123456. Using this c
by yardstick 5y ago
Would it help if the text message included the reason for the code?
“This is <bank>, you requested a password reset. Your code for this is 123456. Using this code will change your password. Call us if that’s not what you want.”
Or something along those lines.
Yeah it’s still a fundamentally flawed process, but until they replace the entire process with something better, a slight change in wording would help save some people.
- jrib 5y agoI agree this would be an improvement. Many people won't actually read the message but for those who do it adds some security. At the very least there should be distinct codes for identity verification when on the phone with your bank and when performing other activities.
- notahacker 5y agoOne of my banks actually sends two SMSes, a generic warning one, with the actual code following a minute later (the website tells you this will happen). Annoying when you're short of time, but I suspect it's very successful at countering this sort of social engineering. You open the message the scammers tell you they've sent, and it just tells you to beware of people ringing you up and asking for codes. Probably you don't stay on the line waiting for the actual security code.