You receive a call on your phone.
The caller says they're from your bank and they're calling about a suspected fraudulent payment.
"Oh yeah," you think. Obvious scam, right?
The caller says "I'll send you an in-app notification to prove I'm calling from your bank."
🧵 1/4
The caller says they're from your bank and they're calling about a suspected fraudulent payment.
"Oh yeah," you think. Obvious scam, right?
The caller says "I'll send you an in-app notification to prove I'm calling from your bank."
🧵 1/4
Comments
It isn't practical to say "never answer your phone".
Call your bank immediately.
Who knew being dirt poor would have this level of advantage? 😳
“Thank you, this sounds important.” (a little validation from my call-center days 😉) “I’m going to call you back on a trusted line. Goodbye.”
The victim types in their passcode to the bank's official app.
That's a subtle but important difference.
Banks *do* make outbound calls for fraud issues.
How abouuuuut amending it to
"This is CHASE, did you call us just now"
1) No, I did not
2) Yes, I rang 555-CHASE"
3) No, someone claiming to be from CHASE called me
The best advice is if someone calls and claims to be from you bank is to hang up and don’t say anything. Call on a published number if you want to see what they wanted.
It’s frustrating banks call & ask for personal info which many will give without hesitation. It also conditions us to think “call asking for personal info” is reasonable. It isn’t
You tap the notification from your banking app. You unlock it with your thumbprint.
This is what you see.
A genuine notification from your official banking app. There's no way to fake that. This must be a genuine call. Right?
🧵 2/4
https://instantiator.dev/post/sophishticated-scam/
This is a legitimate notification, there's no need to be sceptical of it.
But look at it closely. What does the wording *actually* say?
🧵 3/4
Their accomplice is on the phone to your bank, pretending to be you.
Your bank sends you the notification.
You accept, and scammers proceed to drain your account.
Full write up: https://shkspr.mobi/blog/2024/05/bank-scammers-using-genuine-push-notifications-to-trick-their-victims/
🧵🔚
I don't know if your banks or apps work the same way.
This scam was doing the rounds last year, but similar threats exist today.
Stay safe out there.
(Replies disabled because some people are utter spanners.)
YOU have to make the call to THEM first.
Banks will NOT call you first!
The government will NOT call you first. YOU have to call them, it's standard & anyone who falls for this is asking to be taken.
Also, use your own telephone numbers (on ur statement or back of cards) DON'T use the contact number you see on ur phone or a number they provide!!
They should work in politics. Or Wall Street.
If I must access my account away from a computer, I'll use the browser app on my phone to log in.
You can say "don't use these apps" - but they're incredibly convenient. People need to check their balance before making a purchase. They want spending alerts. They like being able to repay friends instantly.
If I must check my balance, the browser works. I don't want spending alerts or need instant payments. Nothing is that urgent.
Of course, everyone has to make their own choices regarding risks and benefits.
For work, we use the Microsoft Authenticator app to log in — although that's on my company iPhone. I don't use that phone for anything besides work.
Telling people not to answer the phone to avoid scamming is like saying "avoid STDs by never having sex."
We know abstinence isn't the answer.
Scammers do repeat scams on customers. It's their specialty.