Re:My Bank Keeps on Undermining Anti-Phishing Education
by x0x0 on Thursday July 17, 2025 @11:22AM
(#44594362)
The idiots at my former credit union apparently subcontract out their credit cards to some east coast bank, whereas my bank and I live on the west coast.
I saw some bank from Florida, that I'd never heard of, calling me on my cell. I assumed it was some sort of scam and ignored it. They're too stupid to get a phone number which has caller id set up to read the name of credit union with whom I did business.
Just amazing.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by Gunax on Thursday July 17, 2025 @01:12PM
(#44595594)
Well, afaik caller id is actually unauthenticated and can be trivially impersonated.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by marcandre on Thursday July 17, 2025 @01:32PM
(#44595848)
You are missing the point. He (hopefully) won't trust the callerID to be the bank, but he will trust a "random" callerID to not be his bank/important.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by godelski on Thursday July 17, 2025 @01:25PM
(#44595764)
> I think they don't have any people working on the full UX flow
Probably right, but this is the importance of dogfooding. I really think this stuff happens because everyone is in such a rush and doesn't take a few minutes to think things though, which requires thinking about everything as a whole.
The example that comes into mind is making transfers to my wife, where every time I do it, they ask me to confirm a bunch of questions to make sure it's not a scam/fraud, which fine, good idea. Once I confirm, they display another notice telling me they won't ask for a confirmation/2FA code because I make transfers to that account so frequently.
The only reason I can come up with why it is like that, is because there isn't a single person/group responsible for the full experience.