Hacker News new | past | comments | ask | show | jobs | submit login

Hello, this is Fidelity customer service, and to confirm this, we will send a text message with a code to the phone number you registered with us. For security, please confirm you are our customer by responding with the code.

Narrator: No, it was not Fidelity, but a scammer who needed the code to drain the customer's Fidelity account.




The attacker doesn't control that message. If they did, they would already know the code and wouldn't need you to give it to them.


How will scammer initiate the SMS? Considering online and customer care messages are different enough.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: