Skip to main content

A scary scam

I have just been subject to the most sophisticated scam attempt I've ever come across.

I had a call apparently from BT (my broadband provider) to say that my internet had been hacked. To confirm that it was really them, they sent an email and a text with a PIN.

There was admittedly something fishy about it. They weren't able to specify exactly what they meant by my account being hacked, and I was confused about the PIN aspect (more on that in a moment) - so I hung up and called BT myself. 

They confirmed that it wasn't them who had been in touch. It was, indeed, a scam. Not only was there not a problem, and they had not contacted me in the last 3 months, the BT operative also confirmed my suspicion about the PIN - the point of a PIN is for me to confirm who I am, not for them to prove who they are. Anyone can send you a PIN and ask you to read it back. BT won't do this when they contact you, only when you contact them.

However, it's easy to see how the text and email could help fool people. The text was apparently from the same number that BT use to send a confirmatory PIN. The wording of the text was almost (but not quite) identical to the BT message. And what I still find unnerving is that the scammers were able to link together my landline phone number, my mobile number (for the text) and the email address I use to log into my BT account.

Because of this linkage, one thing I did do was both change my password on the BT website and switch on two factor authentication (where it sends you a text or email to check it really is you) in case someone had got into their data.

I pride myself on not falling for scam calls. But this one was scarily convincing. Traditionally it's been said that phishing emails and scam calls may be deliberately poor so they are only believed by the most vulnerable. This was certainly not that kind of operation.

See all of Brian's online articles or subscribe to a weekly digest for free here

Comments

  1. There is a similar version in which the scammer contacts you saying your account on, say, Amazon has been abused (someone trying to buy an expensive item on it). They go on to say there's no problem as they have blocked the transaction and that all you need to do is confirm this by reading out the one-off PIN that Amazon will send you. They then trigger the PIN request from your Amazon account so the PIN seems to be genuine, but, of course, if you give them the PIN they can reset your account for their own access.

    ReplyDelete

Post a Comment

Popular posts from this blog

Why I hate opera

If I'm honest, the title of this post is an exaggeration to make a point. I don't really hate opera. There are a couple of operas - notably Monteverdi's Incoranazione di Poppea and Purcell's Dido & Aeneas - that I quite like. But what I do find truly sickening is the reverence with which opera is treated, as if it were some particularly great art form. Nowhere was this more obvious than in ITV's 2010 gut-wrenchingly awful series Pop Star to Opera Star , where the likes of Alan Tichmarsh treated the real opera singers as if they were fragile pieces on Antiques Roadshow, and the music as if it were a gift of the gods. In my opinion - and I know not everyone agrees - opera is: Mediocre music Melodramatic plots Amateurishly hammy acting A forced and unpleasant singing style Ridiculously over-supported by public funds I won't even bother to go into any detail on the plots and the acting - this is just self-evident. But the other aspects need some exp

Is 5x3 the same as 3x5?

The Internet has gone mildly bonkers over a child in America who was marked down in a test because when asked to work out 5x3 by repeated addition he/she used 5+5+5 instead of 3+3+3+3+3. Those who support the teacher say that 5x3 means 'five lots of 3' where the complainants say that 'times' is commutative (reversible) so the distinction is meaningless as 5x3 and 3x5 are indistinguishable. It's certainly true that not all mathematical operations are commutative. I think we are all comfortable that 5-3 is not the same as 3-5.  However. This not true of multiplication (of numbers). And so if there is to be any distinction, it has to be in the use of English to interpret the 'x' sign. Unfortunately, even here there is no logical way of coming up with a definitive answer. I suspect most primary school teachers would expands 'times' as 'lots of' as mentioned above. So we get 5 x 3 as '5 lots of 3'. Unfortunately that only wor

Why backgammon is a better game than chess

I freely admit that chess, for those who enjoy it, is a wonderful game, but I honestly believe that as a game , backgammon is better (and this isn't just because I'm a lot better at playing backgammon than chess). Having relatively recently written a book on game theory, I have given quite a lot of thought to the nature of games, and from that I'd say that chess has two significant weaknesses compared with backgammon. One is the lack of randomness. Because backgammon includes the roll of the dice, it introduces a random factor into the play. Of course, a game that is totally random provides very little enjoyment. Tossing a coin isn't at all entertaining. But the clever thing about backgammon is that the randomness is contributory without dominating - there is still plenty of room for skill (apart from very flukey dice throws, I can always be beaten by a really good backgammon player), but the introduction of a random factor makes it more life-like, with more of a sense