3 ms·

My wife had a $50k transfer initiated yesterday from her savings account (Bank of America). She was able to cancel the transaction by calling the bank in time,

by ugh123 3y ago

My wife had a $50k transfer initiated yesterday from her savings account (Bank of America). She was able to cancel the transaction by calling the bank in time, but still have no idea how it happened. Uses an iPhone 12 and hasn't downloaded any new apps in a while. Primarily uses a Mac Air but sometimes does banking on a Windows machine but is admin-managed by her (large) corp. Getting scary out there... Edit: Has 2FA enabled

teaearlgraycold 3y ago
2FA enabled?
- ugh123 3y ago
  Yes!
  - fmajid 3y ago
    Which kind? The FIDO (Yubikey) BofA supports or the BS SMS based security theater they used to have?
panarky 3y ago
My policy: No financial apps on the phone. Only other apps are from big companies with a reputation for strong security practices. That means no sports and weather apps, no restaurant or game apps, no Samsung or Tmobile apps, no TikTok. Banking and brokerage are all in the browser, on a Chromebook, with no third-party extensions installed. This means no adblock and no other browsing on that user profile. Most banks and brokerages don't offer FIDO 2FA, they all just want to do SMS. Their hardware tokens are a pain, but they work.
- smegger001 3y ago
  I'm not that stringent I also allow open source apps from FDroid where I can see what permissions the app wants before I install it