I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened.

  • Brokkr@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 months ago

    When a fraud department calls you, you don’t need to provide any more information than your name and yes/no answers. If they are asking for any additional information, tell them that you don’t trust their authenticity and that you’ll call the number on the credit card. A legitimate agent will politely end the conversation there.

    Then you better call that number on the card quickly.

  • SkyNTP@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    8 months ago

    Never, ever, ever, ever volunteer personal information, for any reason, on a call you did not initiate, with a number you haven’t verified from a trusted source, like a brick and mortar branch, or your online banking account.

    • perviouslyiner@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      8 months ago

      He said someone in the bank’s supply chain was compromised, as they knew a lot of details that should have been known only to the bank. Also that the only information he gave away were the last digits of a card number.

  • sbv@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 months ago

    I hadn’t given [the scammer] the last four digits of my card.

    Wait a sec.

    He hadn’t asked for the last four digits. He’d asked for the last seven digits. At the time, I’d found that very frustrating, but now – “The first nine digits are the same for every card you issue, right?” I asked the VP.

    I’d given him my entire card number.

    Huh. I hadn’t realized the institution prefix was so long.

  • nivenkos@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    8 months ago

    The real answer here is to have decent digital ID as 2-factor authentication.

    This scam would be practically impossible in Sweden with BankID for example.

    • 0x0@programming.devOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      8 months ago

      He gave them his CC number over the phone. How would Sweden’s BankID protect against that?

      • nivenkos@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 months ago

        More that you’d never need to provide it, but many transactions will also require 2FA, even by the credit card.

  • systemglitch@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    8 months ago

    Lol an entire article about someone giving away info that should never be given away.

    Call your bank back if they start requesting info. shakes head