News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by MrDarcy on Tuesday September 16, 2025 @04:09PM (#45267318)
> — no support group from a big company is going to call you. Ever

> - never give out codes sent to use via sms or push notifications to someone requesting them via phone or email. Never. The messages often even say that.

Chase bank still, as of last week, asks for these codes over inbound calls. Drives me mad. They do so when calling me about fraud alerts, not the other way around.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by schneems on Tuesday September 16, 2025 @04:33PM (#45267619)
You can hang up and call the number on the back of your card
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by gennarro on Tuesday September 16, 2025 @04:38PM (#45267693)
100% this. Do it every time.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by bdangubic on Tuesday September 16, 2025 @04:36PM (#45267664)
NEVER answer - like NEVER :) absolutely NEVER answer... calls or text... it is really simple. I also have Chase and I have blocked just about every single number they called me from (probably like 12 over the last decade)
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by kevin_thibedeau on Tuesday September 16, 2025 @06:14PM (#45268905)
If you initiated the call (to the correct number) then SMS verification has a low likelihood of being a scam.
[ Parent | on HN ]