4 ms·
This type of stuff is diabolical for old folks who just weren't inoculated to these scams. I feel terrible for them. Get calls often asking me to help interpret
by s_kierkegaard 11mo ago
This type of stuff is diabolical for old folks who just weren't inoculated to these scams. I feel terrible for them. Get calls often asking me to help interpret.
- SoftTalker 11mo agoKeep it very simple: never give an SMS authentication code to anyone on a phone call, in response to a text message or email, or as part of any checkout or purchase. They are only to be used when logging in to an online account. Anything else is a scam. Even that may be too complicated, now that I read it back.
- asnyder 11mo agoUnfortunately there are many companies that actually rely on SMS confirmation codes in real-time, which include reading it back to them. A legitimate and generally well liked company, and its real helpful service representative used this method to verify my identify before they could finish their support effort.
- rolph 11mo agoyeah someone that gets paid a lot needs to talk to someone whos pay depends on implementing that IT consultants directives. relaying security codes by voice is how the bad guys do it, dont train your users to think its normal. its probably not a bright idea to have your phones camera pointed at your screen while 2FA-ing or password resetting, or else someone will watch you login, and will see your codes, and use automation to authenticate with your digits faster than you can move a cursor and click.
- SoftTalker 11mo agoProbably safe if you call them at a well-published number. If they call you, absolutely not.
- bobbiechen 11mo agoI got this interesting pair of messages from Schwab recently - not sure if any other companies do this On login: Schwab Watch out for scams. DON'T share this security code with anyone, EVEN IF THEY CLAIM to be from Schwab. Your code for online login is XXXXXX And then on a later phone call with an agent: Schwab: XXXXXX is your Schwab security code to confirm your identity with the agent. This is a nice touch, though I'm not sure how much it would help in a real scam situation for say, my grandma.
- toast0 11mo ago> or as part of any checkout or purchase. Hope you don't have to do 3D-Secure for a purchase, I guess.
- SoftTalker 11mo agoNever had to do more than CC# and 3-digit security code on the back for an online purchase.
- deleted 11mo ago[deleted]
- Terr_ 11mo agoA few weeks ago I told them: "I will never be offended or hurt if you ask suspicious questions to check my identify if I suddenly need sketchy wire-transfers or a pile of Amazon gift cards." Sometimes the best way to defang scams is to attack the social-factors and artificial-urgency they try to exploit. In a similar vein, no legitimate institution should ever act punitively if you tell them that you're going to call them back through their official number/e-mail/site only.