4 ms·
We use 2FA where we can see rotating numbers which we use to validate our login. That means on the server side they have the ability to get the number at any po
by noisy_boy 2y ago
We use 2FA where we can see rotating numbers which we use to validate our login. That means on the server side they have the ability to get the number at any point of time which will match the number on my phone - if that is correct, then why can't the caller quote the number and if it is matches, it is the bank since only they have the ability to get the number. Of course if your phone is compromised then its game over anyway. And there is the added challenge of technically non-savvy people being able to do all this.
- deleted 2y ago[deleted]
- verve_rat 2y agoBut how does that stop this sort of man in the middle attack, the other scamer on the other call just asks the real bank for the number?
- noisy_boy 2y agoGood point - I think one approach that may work is for banks to have the calling feature within the app - only they can initiate such calls. It bypasses all the issues with regular call spoofing etc but excludes customers who do not use the app (for them, just hang-up and call back, which has its own issues).