Post

You receive a call on your phone. The caller says they're from your bank and they're calling about a suspected fraudulent payment. "Oh yeah," you think. Obvious scam, right? The caller says "I'll send you an in-app notification to prove I'm calling from your bank." 🧵 1/4

1K reposts1.6K likes

I used to work for Wells Fargo. Yes it sucked. But one take away I tell everyone is to thank the caller, hang up, and immediately call your bank. If anyone calls from a bank do this. It is the only way to be sure. And don't call the number that called you. Call your official bank customer service.

My friends sometimes change numbers. Gig venues often phone. People who want to employ me phone. It isn't practical to say "never answer your phone".

Good advice. I suppose my reaction would be to treat it like a suspicious email and call the bank directly with their number posted on their website. “Thank you, this sounds important.” (a little validation from my call-center days 😉) “I’m going to call you back on a trusted line. Goodbye.”

I worked in banking fraud for over 10 years. If you ever receive a call from your bank, they will never ask you to give or enter your password. Hang up, call the fraud hotline on your statement or the back of your check card. Then you know you are speaking with them. Skip the AP and call to verify.

One thing to watch for here. If the call is on a landline, the call is only terminated when the *caller* hangs up. So you could hang up, pick back up and dial your bank, all the while still connected to the scammer. (Faking a dial tone is hardly challenging.)

Not quite. The victim doesn't give the scammer a password. The victim types in their passcode to the bank's official app. That's a subtle but important difference.

Mmmmmm alright as a thought experiment I want to pitch at someone with experience, how about amending the messaging and options: How abouuuuut amending it to "This is CHASE, did you call us just now" 1) No, I did not 2) Yes, I rang 555-CHASE" 3) No, someone claiming to be from CHASE called me

I never respond to texts or emails. I always look up the number in my contacts. I’m sure at some point they’ll figure that out too, but not giving out my password to anyone. EVER. Mainly because I don’t know it my computer does and needs my fingerprint.

Your phone buzzes. You tap the notification from your banking app. You unlock it with your thumbprint. This is what you see. A genuine notification from your official banking app. There's no way to fake that. This must be a genuine call. Right? 🧵 2/4

You tap the big obvious button. Why wouldn't you? This is a legitimate notification, there's no need to be sceptical of it. But look at it closely. What does the wording *actually* say? 🧵 3/4

Wow, that's awful. And especially since it would be so easy for the bank to rephrase their alert as you suggest.

The scammer is on the phone to you. Their accomplice is on the phone to your bank, pretending to be you. Your bank sends you the notification. You accept, and scammers proceed to drain your account. Full write up: shkspr.mobi/blog/2024/05... 🧵🔚

shkspr.mobiBank scammers using genuine push notifications to trick their victimsYou receive a call on your phone. The polite call centre worker on the line asks for you by name, and gives the name of your bank. They say they're calling from your bank's fraud department. "Yeah, r...

For the Americans latching on to this thread - please note that it relates to Chase *UK*. I don't know if your banks or apps work the same way. This scam was doing the rounds last year, but similar threats exist today. Stay safe out there. (Replies disabled because some people are utter spanners.)

First rule of thumb when dealing with anyone claiming to be from the bank, government, etc: YOU have to make the call to THEM first. Banks will NOT call you first! The government will NOT call you first. YOU have to call them, it's standard & anyone who falls for this is asking to be taken.

OK. But what if I'm waiting on a call from the hospital? Or if I've applied for a job recently? Or I run a business? Telling people not to answer the phone to avoid scamming is like saying "avoid STDs by never having sex." We know abstinence isn't the answer.

I use this new in the last 20 years feature called visual voicemail to determine why someone called me and then if I need to call them back I call them back on their actual published number.