Re:My Bank Keeps on Undermining Anti-Phishing Education
by taneq on Thursday July 17, 2025 @09:56AM
(#44593482)
Just piggybacking on this, if your bank (or eBay or Amazon or whoever) ever calls you to inform you of a suspected hack on your account, and says they're sending you a 2 factor authentication code to confirm your identity, do NOT tell them the code. It sounds obvious when phrased like this, but if you're not familiar with the scam then yeah, it's a scam and they're trying to get your 2FA token in order to access your account.
[ Parent
| on HN ]
Re:My Bank Keeps on Undermining Anti-Phishing Education
by zoklet-enjoyer on Thursday July 17, 2025 @10:11AM
(#44593665)
That's when you pull out the 69420 code and if they ask your name, it's Ben Chode.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by taneq on Thursday July 17, 2025 @10:15AM
(#44593696)
Haha yeah, or 'Deez'.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by anonnon on Thursday July 17, 2025 @03:01PM
(#44596872)
> do NOT tell them the code
When my father calls his bank, they actually verify him by sending a 2FA code to his email that he reads back.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by debugnik on Friday July 18, 2025 @05:55AM
(#44602913)
At least he's doing so having called an already trusted number. But receiving a call from someone claiming to be your bank is a much more dangerous situation, despite it feeling similar to lay people. Banks should really train people to hang and call to their actual customer service.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by tempnew on Friday July 18, 2025 @07:34AM
(#44603550)
A variation can be the scammer presents a fake number for you to call, via email, sms or worse through malicious ads that pop up when you google for the company phone number. Or, a phishing proxy like evilginx could overlay a “call [fake number] to unlock your account” as part of the login process.