One Monday morning in May, I woke up and grabbed my cell phone to read the news and scroll through memes. But it was out of cell service. I couldn’t make calls or texts.

That, though, turned out to be the least of my problems.

Using my home Wi-Fi connection, I checked my email and discovered a notification that $20,000 was being transferred from my credit card to an unfamiliar Discover Bank account.

I thwarted that transfer and reported the cell phone issues, but my nightmare was just starting. Days later, someone managed to transfer $19,000 from my credit card to the same strange bank account.

I was the victim of a type of fraud known as port-out hijacking, also called SIM-swapping. It’s a less-common form of identity theft. New federal regulations aimed at preventing port-out hijacking are under review, but it’s not clear how far they will go in stopping the crime.

  • @superfes@lemmy.world
    link
    fedilink
    248 months ago

    Hey guys on the Intertubes, perhaps you’ll never see this, but if you do, please read the following: SMS is a terrible way to 2FA, don’t do it, ever.

    • @pelletbucket@lemm.ee
      link
      fedilink
      78 months ago

      I was pretty annoyed when a couple apps forced me to start using an authenticator, but I’m glad for it now.

      • Rentlar
        link
        fedilink
        68 months ago

        I joined the pro-OTP club when I found open source alternatives to Google, Microsoft Authenticator and Authy (which Twilio would later ruin). Before I didn’t like it.

      • @floofloof@lemmy.ca
        link
        fedilink
        English
        4
        edit-2
        8 months ago

        Pretty much all the sites I use offer authenticator apps or passkeys/security keys. But my bank only offers SMS and sets a limit on password length.

  • @akakunai@lemmy.ca
    link
    fedilink
    7
    edit-2
    8 months ago

    I mistyped my PIN (yes PIN, you can have only a 4 or 6 digit number, not a real password) into my bank app too many times and had to reset it. I was prompted the secret question “what is the name of your childhood best friend?” This alone would have given me (or anyone) access to my bank account. I forgot what the answer was and had my account locked after a few attempts.

    How was I to prove my identity? Call the 1-800 number and the automated system asked for my account number or any credit/debit card number, the numbers in my postal code, my phone number, and my birthday. THAT’S IT. Account unlocked and was able to set a new password PIN. So many people know or can easily find out this information.

    I use very strong digital security everywhere that allows it, but of the hundreds of accounts I have, my bank is the least secure and does not allow any stronger security even if you want it!

  • @miriamhooper@lemm.ee
    link
    fedilink
    اَلْعَرَبِيَّةُ
    15 months ago

    in this site MyGiftCardy.com you can buy all kind of gift cards, your one-stop shop for purchasing gift cards easily and securely! We offer a wide selection of gift cards from top brands, including Apple, Amazon, Google Play, and more. Whether you prefer to pay with cryptocurrencies, Perfect Money, or traditional methods, our platform provides a seamless buying experience with instant delivery and exceptional customer support. Discover the convenience of shopping with us and find the perfect gift card for any occasion. Join thousands of satisfied customers who trust MyGiftCardy.com for their gifting needs today!