4 ms·

I did exactly this with Fidelity's customer service, and I was impressed to see that the text message I received did NOT say "don't share this with anyone", lik

by lutorm 4y ago

I did exactly this with Fidelity's customer service, and I was impressed to see that the text message I received did NOT say "don't share this with anyone", like their normal login messages do. Instead, it said "give this code to the customer service representative". I was so pleasantly surprised I actually had to commend them on it.

dmckeon 4y ago
Hello, this is Fidelity customer service, and to confirm this, we will send a text message with a code to the phone number you registered with us. For security, please confirm you are our customer by responding with the code. Narrator: No, it was not Fidelity, but a scammer who needed the code to drain the customer's Fidelity account.
- cedilla 4y ago
  The attacker doesn't control that message. If they did, they would already know the code and wouldn't need you to give it to them.
- blackoil 4y ago
  How will scammer initiate the SMS? Considering online and customer care messages are different enough.
Scalene2 4y ago
If the warning not to are is not worded carefully enough then a second message could be sent by an attacker before or after instructing the user to disregard the warning.
ghayes 4y ago
Even better would be: ask your rep what his or her favorite animal is. If he or she answers giraffe, then share this code. Otherwise hang up and dial the number on the back of your card.