C
Convert3
Guest
On another forum I belong to, someone posted this caution about a new telephone scam to be wary of:
“A colleague of mine told me a scary story today. He was part of the equifax breach a year or two ago. Apparently his username for his online bank was compromised. They somehow also got his cell phone number, don’t know if that was from the breach or if they had to look it up.
Yesterday while in a noisy restaurant he got a phone call from his bank (spoofed caller ID) and they told him that they were looking at what appeared to be fraudulent charges on his account. They asked him to verify a few transactions (all made up of course and none matched anything he’d purchased recently). Since there were several phony charges on the account they told him that his account had been compromised and that they would have a new card sent out to him via fedex. In order to validate his identity/transaction they asked him to repeat a code they’d send him via text.
The text came through from his bank and he repeated the number back to them. They confirmed it and said they’d ship a new card immediately.
Once my colleague came home he checked his account - his password did not work anymore. He reset the password thinking that it was part of the fraudulent charges. He set a new password and got the double verification text from his bank and noticed that a few thousand dollars had been withdrawn via wire earlier in the evening.
Apparently their “verification” for sending a new card was for the forgotten password link verification on the website for setting up a new password. Once logged in they started transactions out of the account, starting in $100 increments and then $1,000 transactions.”
“A colleague of mine told me a scary story today. He was part of the equifax breach a year or two ago. Apparently his username for his online bank was compromised. They somehow also got his cell phone number, don’t know if that was from the breach or if they had to look it up.
Yesterday while in a noisy restaurant he got a phone call from his bank (spoofed caller ID) and they told him that they were looking at what appeared to be fraudulent charges on his account. They asked him to verify a few transactions (all made up of course and none matched anything he’d purchased recently). Since there were several phony charges on the account they told him that his account had been compromised and that they would have a new card sent out to him via fedex. In order to validate his identity/transaction they asked him to repeat a code they’d send him via text.
The text came through from his bank and he repeated the number back to them. They confirmed it and said they’d ship a new card immediately.
Once my colleague came home he checked his account - his password did not work anymore. He reset the password thinking that it was part of the fraudulent charges. He set a new password and got the double verification text from his bank and noticed that a few thousand dollars had been withdrawn via wire earlier in the evening.
Apparently their “verification” for sending a new card was for the forgotten password link verification on the website for setting up a new password. Once logged in they started transactions out of the account, starting in $100 increments and then $1,000 transactions.”