Mimicking a device is becoming almost impossible

Re:Mimicking a device is becoming almost impossible by Telemakhos on Monday June 28, 2021 @10:49AM (#27662716)

I tried to set up a web account with the IRS (the American tax bureau) the other day. My perfectly legitimate mobile number, which works with every other two-factor authentication, was not sufficient for the IRS. Apparently you have to have a number with a certain set of major cell phone service providers like ATT and Verizon, not a minor service provider. They also require half of a credit card number or some other financial identifier like a mortgage. I rather wonder if the cell phone service provider requirement has to do with adding more surveillance capabilities to the IRS' already impressive financial surveillance ability.

[ Parent | on HN ]

Re:Mimicking a device is becoming almost impossible by rsync on Monday June 28, 2021 @12:18PM (#27663831)

A few things ...

I had to set up a web account with the IRS in the recent past and I just skipped the entire mobile validation by having them send the auth code to my mailing address. It arrived in two days and worked perfectly. YMMV.

I am, however, interested in what mobile carrier you use that had a "real" (not VOIP) mobile number and can receive SMS from "short codes", but did not work with the IRS ?

That's unexpected - basically every mobile number in the US is one of the big three or an MVNO operating with one of the big three networks ... can you share just a bit more about your setup ?

[ Parent | on HN ]

Re:Mimicking a device is becoming almost impossible by toast0 on Monday June 28, 2021 @02:36PM (#27665804)

Republic Wireless mobile numbers often look like voip because it's a MVNO run by Bandwidth.com (a large wholesale voip carrier). It's apparently in the process of being sold to Dish Wireless though, so that may change.

I think the IRS may have access to customer names associated with mobile phone accounts to confirm identity, but not all carriers have identity information for their customers, and I'd guess smaller carriers (or privacy focused carriers, if any exist) may not provide that access.

[ Parent | on HN ]

Re:Mimicking a device is becoming almost impossible by Telemakhos on Thursday July 01, 2021 @02:40PM (#27702774)

It's Xfinity mobile and can send and receive SMS from short codes including my banks, Amazon, etc. Also, I cannot use my mailing address for precisely the reason that I wanted to set up a web account: my accountant put the wrong city and zip code on all my tax returns (several EIN/TINs), and the IRS uses the address on the most recent filing for verification purposes.

[ Parent | on HN ]