I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened.
I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened.
The real answer here is to have decent digital ID as 2-factor authentication.
This scam would be practically impossible in Sweden with BankID for example.
Adding multiple factors to authentication just adds another step to the scam, it doesn’t make it impossible by any means.
For BankID it somewhat does, because only registered services can make the request - so they’d need to register a scam service and then use that. Which also makes it an easier job for anti-fraud police.
So it’d be a lot more complicated.
Like obviously at a certain point if someone is willing to do everything they can - then they will be scammed, see this for example: https://www.bbc.com/news/uk-england-leeds-67208755
But the more steps there are, the higher the chance the person realises it is a scam.
He gave them his CC number over the phone. How would Sweden’s BankID protect against that?
More that you’d never need to provide it, but many transactions will also require 2FA, even by the credit card.