3 ms·
> always says "You will never be asked for this code" and everytime they ask for it. Yes, but the real meaning behind that phrase is "You will only be asked fo
by hunter2_ 5y ago
> always says "You will never be asked for this code" and everytime they ask for it.
Yes, but the real meaning behind that phrase is "You will only be asked for this code by pages served by our domain name or a native app we published." It's unfortunate brevity.
- buscoquadnary 5y agoSorry the exact message is something like you will never be asked for this by a real employee.
- hunter2_ 5y agoOh I didn't mean to suggest the brevity was your doing. I've seen it the short way first-hand, but yes, more typically it's pretty decent, as you've clarified.
- kevincox 5y agoMaybe it would be better to send a link. Then it can't be sent to the wrong domain. Of course you need to then educate people that they shouldn't trust the domain they land one and always immediately close the tab. Even if that tab says "Warning you have a fraud alert on your account. Click here to check your recent transactions"
- ptha 5y agoUnfortunately, there are all sorts of ways to phish links. https://en.wikipedia.org/wiki/Phishing#Link_manipulation https://en.wikipedia.org/wiki/Phishing#Link_manipulation The link may look similar or even appear identical, and still be under control of the scammer. Similar to just not trusting incoming phone calls, you can't really trust incoming links via standard email, without some definitive way of validating the sender.