6 ms·
Tangent: I used to receive at least a dozen bank scam calls per day in India, especially during insurance renewal. I wanted the banks to publish official phone
by Abishek_Muthian 5mo ago
Tangent: I used to receive at least a dozen bank scam calls per day in India, especially during insurance renewal. I wanted the banks to publish official phone numbers and mandate their employees to use only official numbers.
Recently the regulatory bodies did just that and so the banks should only use 1600 numbers to contact their customers. My bank scam calls have dropped to 0.
- hunter2_ 5mo agoKnowing what numbers are real through an official publication is very good, but it only allows you to place trust in calls you make, not calls you receive, because making calls doesn't involve caller ID, receiving calls does, and caller ID is spoofable.
- bdavbdav 5mo agoThat would take nothing to implement. Services like Truecaller already do live caller ID against databases on iOS / Android. All it would take is a sensible register of verified numbers
- Abishek_Muthian 5mo agoSeveral of the bank scammers had their profile verified as the bank in the Truecaller[1]. [1] https://xcancel.com/Abishek_Muthian/status/1806348022290211321 https://xcancel.com/Abishek_Muthian/status/18063480222902113...
- l23k4 5mo agoTruecaller can tell you about who a phone number belongs to. Truecaller cannot accurately tell you whether or not the person calling you from a phone number is actually in control of that phone number.
- TeMPOraL 5mo agoWon't stop people from trying to make Truecaller, et al. prove that, though. The problem here is that the correct security posture of the bank against third-party scams also protects the customers from first-party scams. Telling people the bank will never call them for anything, and even if, they're to always hang up and call the number on the back of their card, works equally well against criminals and telemarketers.
- l23k4 5mo agoI feel like this is kind-of a solved problem in the jurisdictions where banks are liable for customer losses not arising from gross negligence. If a bank calls their customers directly and trains them to get phished, the bank does not get to claim gross negligence when this happens and has to refund the customer. If a bank tells their customers that they'll never call them (and actually doesn't), they have much better chances of claiming gross negligence on the part of the customer.
- 4ndrewl 5mo agoThat's the number one rule though. If someone calls you claiming to be your bank, just say "I'll call you back"
- smcin 5mo agoAsk them their name/ last initial, employee ID or unique identifier for the conversation, direct phone number, job title and what location they're based at. Scammers will pretty much always refuse/argue/hang up on this (once I had one start insulting my mother in Hindi when I asked him this). Then call your bank's proper number and verify all of these details. (But in any case your bank will never call outwards to you, unless you've specifically requested that, which you almost never do.)
- DamonHD 5mo agoUnfortunately my UK banks (and others) DO regularly make calls to me unannounced and demand my ID to 'prove who I am'. They are not scam calls and the callers cannot understand what they are doing wrong. If I'd had more strength in the last round of this stupidity I'd have done a number on them with the regulator. (I used to work in finance and was the director of a regulated financial entity, so I think I'd have a head start.)
- Cider9986 5mo agoYeah and people call crypto a scam. It mostly is, but Monero is pretty good.
- cuteboy19 5mo agoit is time we have a good industry standard for this stuff
- lostlogin 5mo agoI dream of a time I don’t have a bank, or not in any traditional sense. I’d been hunting for ways to use a Wisecard standoff a bank but got a bit wary of what would happen if they went bust. Government backed guarantee do not exist for Wise.
- trollied 5mo agoMy bank has a feature whereby it'll tell you promoinently in their app if they are currently calling you.
- ghoul2 5mo agoRecently, banks where also asked to put their official websites/netbanking on *.bank.in domains. I have wanted that for SO long.
- nolok 5mo agoIn France, basically every bank say (show in their app and everything) "if we call you and ask anything like code, confirmation, to do an action, anything, end the call and call us back, don't do anything on a call you didn't initiate". Same in their app eg you try to do a sepa wire to a new recipient and you get a warning "are you on the phone with someone ? did someone ask you to do that ? please call your bank by pressing this button. By the way we will never call you to ask an auth code or to do a wire"
- spicymaki 5mo agoHere is a fun one, my mobile phone company has an account lock along with a pin and OTP over SMS system. In order for me to activate a new device (like an phone upgrade) with eSIM over the phone, I need to unlock my account with account lock, give them the pin over the phone, and read the SMS OTP to the mobile phone rep online. I get doing the account unlock and verbal pin, but I don't get why they ask for the OTP especially when they train us to never share the OTP over the phone. I even asked the rep about it, but he mentioned that you should never share the OTP if you did not initiate the service request. From a security posture point of view I think that stinks. I am not exactly sure how they expect SMS OTP to work in the case where my phone is not functional.
- benhurmarcel 5mo agoAnd then we have the national post office sending its notifications from the scammiest-looking domain they could find: noreply@notif-colissimo-laposte.info
- dawnerd 5mo agoUnfortunately in the US, maybe elsewhere, pharmacies and medical offices have trained the elderly it’s okay to verify their dob when they call. Costco does that when they call and it drives me nuts.
- vkou 5mo agoUS insurers expect you to click on sms links and log in with your username, password, and 2fa all so you can receive a fucking marketing message.
- 0123456789ABCDE 5mo agois it common for banks to call you? always though the agreement was: we don't call you, you call us. we'll send letters though.
- amarant 5mo agoOh man that brings back memories! "Hello, I'm calling from Blockchain, I would like to talk about your investment portfolio" it weirded me out they would pretend to be from the underlying technology instead of an exchange or something. I kept thinking I should pretend to be the CEO of TCP/IP or something when they called.
- taskforcegemini 5mo agoI was several times called by windows employeesq
- ed_elliott_asc 5mo agoIsn’t that really easy to spoof?