5 ms·

Not much of an expert, caller ID means nothing. Standard procedure for everybody in the last 20 years should be: Whenever I get a call about security or fraud

by dade_ 5y ago

Not much of an expert, caller ID means nothing. Standard procedure for everybody in the last 20 years should be: Whenever I get a call about security or fraud from the bank, I thank them for the notification and tell them I will call them back, and hang up. Then I call the number on my credit /bank card, not the number I was called from. Fortunately there is a lost or stolen cards so there is no queue time and tell them I received a fraud alert notification.

mekoka 5y ago
Simple and effective. It's been over 10 years that I've followed this same protocol. It hasn't failed me yet. I also don't think I've missed anything that could have been better handled, had I chosen to speak to the caller. Just don't say anything, beyond greetings, to the caller.
BaseballPhysics 5y ago
> Not much of an expert, caller ID means nothing They... said that: > The caller ID showed the correct name and number for my bank, but caller ID data is so hilariously easy to spoof that it might as well not even exist. Honestly, what is with the low quality comments attempting to undermine this person's credibility?
- mardifoufs 5y ago
  So what if they said that? I'm not trying to pile on them but the reason people are questioning their credibility is that they fell for a pretty basic scam. Even if they acknowledged that their assumptions were incorrect (knowing Caller Id is very flawed but still falling for it), it doesn't necessarily make the scam any less obvious. Would you not question the credibility of a doctor who falls for say, crystal healing or homeopathic cures?
  - BaseballPhysics 5y ago
    > I'm not trying to pile on them but the reason people are questioning their credibility is that they fell for a pretty basic scam. Yeah, I've read the armchair quarterbacks around here thinking they wouldn't be the ones to get duped if it was them. Of course, I'll bet if they did get duped, they wouldn't post about it on social media because a bunch of folks would come out of the woodwork to point out how stupid they were. Personally, I read this accounting and thought "You know, for all my own knowledge about how these scams work, I might've been caught by this one." This specific example strayed into spearphishing territory given the knowledge the attacker had of the victim. This wasn't just an average war dialler. And the time investment, alone, on the part of the attacker makes this unusual compared to your average phone same. But hey, maybe I'm just not bright enough to hang with the cool kids around here.
    - mardifoufs 5y ago
      I'm not saying I wouldn't get duped, but Im also not a scam prevention expert! And you are right that I wouldn't be posting this if I was in their place but I'm not sure if that means that makes them immune to criticism. "I bet you'd have done the same" is not an extraordinarily good defense when we are talking about a scam precention expert. I also don't think this has anything to do with intelligence. You can question expertise without questioning intellect
- dade_ 5y ago
  What is with low quality comments commenting on low quality comments? An expert doesn’t just know about a risk, they think through mitigations and apply them. This is a basic 101, and yet no mitigation. A phone call warning about fraud is highly likely to be fraud in itself, so never, ever proceed with the call.

by dade_ 5y ago

mekoka 5y ago

Simple and effective. It's been over 10 years that I've followed this same protocol. It hasn't failed me yet. I also don't think I've missed anything that could have been better handled, had I chosen to speak to the caller. Just don't say anything, beyond greetings, to the caller.

BaseballPhysics 5y ago

> Not much of an expert, caller ID means nothing They... said that: > The caller ID showed the correct name and number for my bank, but caller ID data is so hilariously easy to spoof that it might as well not even exist. Honestly, what is with the low quality comments attempting to undermine this person's credibility?

mardifoufs 5y ago
So what if they said that? I'm not trying to pile on them but the reason people are questioning their credibility is that they fell for a pretty basic scam. Even if they acknowledged that their assumptions were incorrect (knowing Caller Id is very flawed but still falling for it), it doesn't necessarily make the scam any less obvious. Would you not question the credibility of a doctor who falls for say, crystal healing or homeopathic cures?
- BaseballPhysics 5y ago
  > I'm not trying to pile on them but the reason people are questioning their credibility is that they fell for a pretty basic scam. Yeah, I've read the armchair quarterbacks around here thinking they wouldn't be the ones to get duped if it was them. Of course, I'll bet if they did get duped, they wouldn't post about it on social media because a bunch of folks would come out of the woodwork to point out how stupid they were. Personally, I read this accounting and thought "You know, for all my own knowledge about how these scams work, I might've been caught by this one." This specific example strayed into spearphishing territory given the knowledge the attacker had of the victim. This wasn't just an average war dialler. And the time investment, alone, on the part of the attacker makes this unusual compared to your average phone same. But hey, maybe I'm just not bright enough to hang with the cool kids around here.
  - mardifoufs 5y ago
    I'm not saying I wouldn't get duped, but Im also not a scam prevention expert! And you are right that I wouldn't be posting this if I was in their place but I'm not sure if that means that makes them immune to criticism. "I bet you'd have done the same" is not an extraordinarily good defense when we are talking about a scam precention expert. I also don't think this has anything to do with intelligence. You can question expertise without questioning intellect
dade_ 5y ago
What is with low quality comments commenting on low quality comments? An expert doesn’t just know about a risk, they think through mitigations and apply them. This is a basic 101, and yet no mitigation. A phone call warning about fraud is highly likely to be fraud in itself, so never, ever proceed with the call.