this post was submitted on 15 Mar 2024
209 points (97.3% liked)

Technology

74003 readers
2967 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
209
Cory Doctorow gets scammed (pluralistic.net)
submitted 1 year ago by 0x0@programming.dev to c/technology@lemmy.world
53 comments fedilink hide all child comments
 

I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened.

you are viewing a single comment's thread
view the rest of the comments
[–] kernelle@0d.gs 28 points 1 year ago (2 children)

Adding multiple factors to authentication just adds another step to the scam, it doesn't make it impossible by any means.

[–] nivenkos@lemmy.world 20 points 1 year ago (2 children)

For BankID it somewhat does, because only registered services can make the request - so they'd need to register a scam service and then use that. Which also makes it an easier job for anti-fraud police.

So it'd be a lot more complicated.

Like obviously at a certain point if someone is willing to do everything they can - then they will be scammed, see this for example: https://www.bbc.com/news/uk-england-leeds-67208755

But the more steps there are, the higher the chance the person realises it is a scam.

[–] prole@sh.itjust.works 8 points 1 year ago* (last edited 1 year ago) (1 children)

For BankID it somewhat does, because only registered services can make the request

I'm not an expert on digital banking, but this sounds like a no-brainer... Aside from marginally increasing compliance costs, why would this not just be the norm everywhere?

I mean... It was rhetorical. I know why.

[–] nivenkos@lemmy.world 7 points 1 year ago

It kind of is the norm.

Just a few countries like the US are really backward in terms of accessible banking - mainly due to having no federal ID, residence registration, etc. too on top of outdated bureaucracy.

[–] kernelle@0d.gs 4 points 1 year ago

"A chain is only as strong as its weakest link" - We are the weakest link in any security chain, and always will be. Social engineering is one hell of a drug.

[–] TORFdot0@lemmy.world 11 points 1 year ago

It doesn’t matter how many locks you have if you give the scammers the keys. And so many people give up the keys