@AAKL that's a genuine notification from the legitimate Chase app.

Terence's posts Post Back to profile

Top-level

Terence Eden

Like 2 May at 16:26 | Open on mastodon.social

6 comments

AAKL

@Edent It sure sounds like it could be a scam.

2 May at 16:27 | Open on infosec.exchange

Patrick

@AAKL @Edent I’d still be tempted to just say I’m calling the number on the back of my card for security purposes. Hang up and call. Though it does seem like that would be a little trickier to fake than a text/email alert.

2 May at 16:38 | Open on ppb.social

AAKL

@ppb1701 @Edent Last time the bank sent a text, I dug up the legitimate number and called directly. Same in this situation.

2 May at 16:40 | Open on infosec.exchange

Log 🪵

@Edent @AAKL The notification should specify whether you called the bank, or the bank called you. Would stop this MITM scam immediately.

2 May at 16:55 | Open on mastodon.sdf.org

Lionel 🦊

@log @Edent @AAKL and/or display the phone number that is calling the bank

2 May at 19:39 | Open on pouet.chapril.org

Log 🪵

@lionel @Edent @AAKL Except that the PSTN is insecure garbage, and the scammer knows the customer phone number, because they call it, so they will spoof that number to the bank, and spoof the bank's number to the customer. The telecom has always been a weak link in security.

2 May at 22:23 | Open on mastodon.sdf.org

Go Up