8 ms·
> banks and other institutions continue to send legitimate messages that look like phishing. The Canada Revenue Agency (tax collectors) once called me up abou
by Plasmoid 2y ago
> banks and other institutions continue to send legitimate messages that look like phishing.
The Canada Revenue Agency (tax collectors) once called me up about something. They literally said "To verify your identity, please give me your social insurance number". It's hard to blame people when actual government agencies are training people to be phished.
- effluvium 2y agoDo business with business that have local offices. That way anytime something needs verification or seems off, go into the businesses building.
- Scoundreller 2y agoWhen a Canadian gov agency calls, a good reverse verification method is to test their French. « Êtes-vous une pamplemousse? »
- jplrssn 2y agoIf you live in Canada you can't really opt out of doing business with the CRA.
- Terr_ 2y agoI ranted about something similar when it came how the US Internal Revenue Service was implementing authentication for their free-filing service. They're training taxpayers to put in large amounts of extremely sensitive personal information into a third-party domain called "id.me". Even if you trust the private company, I think it's insane they didn't at least whitelabel the process through a *.irs.gov domain! (For those curious, the .me TLD is run by the country of Montenegro. Control over DNS has some security implications for phishing and man in the middle attacks.)
- CodeWriter23 2y agoJust curious, how did you confirm it was The Canada Revenue Agency and not scammers?