Sippican
Member
- Location
- South Coast Massachusetts
There is a new, more advanced credit card scam going around that appears legitimate.
People get a call from 'a bank', lets say Wells Fargo.
They tell you your credit card may have been compromised and tell you specific locations where it may have been used.
They also tell you legitimate charges you have made (to give you a sense of credibility in the call). Remember these are hackers that already have your information)
The phone number seems ligit (its ghosted back to an actual Wells Fargo phone number) so when you do a search, it comes back as a Wells Fargo number.
The name the person is using is an actual employee at Wells Fargo, so it still seems 'real'.
Here is where they try and get you.....They say they want to verify its you, so they can make the 'adjustments'.
They authenticate by sending a number to your phone, (This is commonly used these days by reputable companies to validate its you) and want you to tell them what the number is....DON'T DO IT. Do not read them the number back.
This will allow them to enter it through their phone and make their phone a valid number in which to make transactions.
This is called 'two factor authentication' and is used to validate its actually you. It is legitimate when used correctly, but not in this case.
Giving them the number makes their phone a valid phone number for the account.
Hang up and call the number on the back of your card and make them aware that your information has been compromised and ask for a new numbered card.
They will move any valid outstanding transactions to the new number and shut off the old number.
People get a call from 'a bank', lets say Wells Fargo.
They tell you your credit card may have been compromised and tell you specific locations where it may have been used.
They also tell you legitimate charges you have made (to give you a sense of credibility in the call). Remember these are hackers that already have your information)
The phone number seems ligit (its ghosted back to an actual Wells Fargo phone number) so when you do a search, it comes back as a Wells Fargo number.
The name the person is using is an actual employee at Wells Fargo, so it still seems 'real'.
Here is where they try and get you.....They say they want to verify its you, so they can make the 'adjustments'.
They authenticate by sending a number to your phone, (This is commonly used these days by reputable companies to validate its you) and want you to tell them what the number is....DON'T DO IT. Do not read them the number back.
This will allow them to enter it through their phone and make their phone a valid number in which to make transactions.
This is called 'two factor authentication' and is used to validate its actually you. It is legitimate when used correctly, but not in this case.
Giving them the number makes their phone a valid phone number for the account.
Hang up and call the number on the back of your card and make them aware that your information has been compromised and ask for a new numbered card.
They will move any valid outstanding transactions to the new number and shut off the old number.
