This is a most excellent place for technology news and articles.
Capital One does something similar and it's so fucking annoying. They send text messages that read "Your transaction for some company was DECLINED! Take action now: http://someweirddomain.com/sketchy/uri"
I used URL Checker to figure out where it ultimately landed and it does go to Capital One.
I've even complained about this and they said, "Well, you should know these texts only come from us."
With how much effort is being put into phishing awareness and training, some people/companies still put zero effort into their communication.
Duting a lengthy process that involved an attorney, I got an email from a firstnamelastname(at)yahoo(dot)com, with no introduction, no mention of my name, a misspelled address, telling me about an appointment at another address that was... screenshotted from a website and pasted as image. Looks sketchy AF by any measure. Nope, that was a real email from a paralegal.
Filed a helpdesk ticket at work. Get a Teams message from " (external)", asking me my company machine ID in bad English. Responded with "you are helpdesk, do you not know this?". After a few repeated requests for the ID and not answering any of my questions, I just stopped responding.
The scammers messages look less dodgy than the real one, if you dont count the obviously suspicious links. Though it doesnt help that the real one also has link that looks suspicious and also like it was made by scammer who isnt very good at what they do.
I usually post the article in the comments so it is easier to read, but Troy hunt 's website is already so easy to read its a joy!
Yeah. Recently I was expecting a message from a bank, finally I got a call... from a chatbot claiming it has an important message for me, but first I have to give it my private info to verify myself and there's no way to validate the call is legit first.
When I complained to the bank they just told me I shouldn't worry, they made the call so it's perfectly safe and there's nothing to worry about...
Always call back. A legitimate bank will say that its no problem to call them back. Never give any personal details over the phone unless you made the call yourself.
I would change banks over that and list that as the reason why.
My banking app has a "is calling?" button, which is pretty neat. The button is highlighted whenever I open the banking app whilst on a phone call, presumably as a subtle anti-scammer warning.
e: spelling
My bank has the inverse as well. If i open the app while on a call there's a huge banner across the top stating they are not calling me.
Damn cool. Which bank, if you don't mind me asking?
This is honestly a really good idea.
One cool thing that just went live in the last month or so is SMS Sender ID. You need to file a shitton of paperwork before being given the keys to send an SMS to an Australian with a name instead of a phone number.
https://www.acma.gov.au/sms-sender-id-register
I personally had to write the code to make this work for a rather large financial institution that uses AWS for bulk SMS. It was a lot of hoops to jump through. If you get one detail wrong, your SMS just has a phone number instead of a name.
At this point, it should be impossble to deceptively get "Fedex" into an SMS header.
Is this for real? I would’ve automatically deleted and reported it as spam lol.
Yep. Accidentally imported some parts for my car (thought they were in the states, but no, China), got a random message about duty fees. I initially thought it was a scam, but got another, so I followed the link on a safe device (laptop running Linux). It gave a valid address from the shipping company with details that verified my order, so I had to pay or it wouldn't be delivered. Very annoying, should have been told earlier that I needed to pay duties/tariffs so I could plan accordingly.
You and the "87%" of people who responded to his Tweet or whatever.
Yeah, of course. Surprised there are “13%” of people of his Tweet that would not or whatever.
