4 ms·

I'm not at all confident that the real bank will never actually ask for you to verbally read a security code texted to you. This is how little I trust bank's se

I'm not at all confident that the real bank will never actually ask for you to verbally read a security code texted to you. This is how little I trust bank's security practices. Here's a comment from a similar post last month, where the commenter believes the legit bank asked for a verbal confirmation of security code: https://news.ycombinator.com/item?id=30875233 https://news.ycombinator.com/item?id=30875233 (I suppose it's possible the commenter was actually interacting with a scammer there and still doesn't realize it?)

alias_neo 5y ago
> I told him, the 2FA message literally says to never give this number out to anyone He was 100% being scammed.
- jrochkind1 5y ago
  And still doesn't realize it some time later? (I guess we don't know how much time later). That would be stunning in it's own way! What a world.
- mint2 5y ago
  If you called in to Amex using the number on the card for certain things like fraud, for a while they would then text you a code in a message that says: “Amex Fraud Free Msg: Your requested code is: xxxx. We won't call to ask for it. Don't share it. Call ######## if you didn't request it. Reply STOP to opt out.” You wouldn’t be the requesting this text and code, the person on the phone would. And it says don’t share it. Maybe I was hoodwinked but it seemed really legit although in principle I refused to give it. It seems so scammy, but I’d called the number on the back of the card.
- bombcar 5y ago
  Banks are dumb, really dumb, and they don't align. I have personally called the number on the card, and been asked to verify the phone by repeating a number they would send, which came with the standard "nobody will ask for this number". I presume because I initiated the call they think it's ok, but it's still silly.
IG_Semmelweiss 5y ago
I agree with you. I think there might be a distinction btw inbound and outbound. I think reading any code during inbound call is red flag for fraud. However, more than once i took the initiative to call ccs to unblock a large / international charges. The only way for the bank to verify my identity is for me to read the code. So it is not true that you NEVER read ever. Maybe for inbound this should be true. But not outbound

alias_neo 5y ago

> I told him, the 2FA message literally says to never give this number out to anyone He was 100% being scammed.

jrochkind1 5y ago
And still doesn't realize it some time later? (I guess we don't know how much time later). That would be stunning in it's own way! What a world.
mint2 5y ago
If you called in to Amex using the number on the card for certain things like fraud, for a while they would then text you a code in a message that says: “Amex Fraud Free Msg: Your requested code is: xxxx. We won't call to ask for it. Don't share it. Call ######## if you didn't request it. Reply STOP to opt out.” You wouldn’t be the requesting this text and code, the person on the phone would. And it says don’t share it. Maybe I was hoodwinked but it seemed really legit although in principle I refused to give it. It seems so scammy, but I’d called the number on the back of the card.
bombcar 5y ago
Banks are dumb, really dumb, and they don't align. I have personally called the number on the card, and been asked to verify the phone by repeating a number they would send, which came with the standard "nobody will ask for this number". I presume because I initiated the call they think it's ok, but it's still silly.

IG_Semmelweiss 5y ago

I agree with you. I think there might be a distinction btw inbound and outbound. I think reading any code during inbound call is red flag for fraud. However, more than once i took the initiative to call ccs to unblock a large / international charges. The only way for the bank to verify my identity is for me to read the code. So it is not true that you NEVER read ever. Maybe for inbound this should be true. But not outbound