Does anyone oppose any piece of advice given in this video?
I don’t oppose any but I have had a gut feeling that some sites that use “two factor authentication” are selling my phone number to scammers. I never got spam texts util I started being forced to use two factor authentication.
It’s pretty shameful that most financial institutions don’t support MFA apps or FIDO2 hardware keys.
Ally Bank and my local credit union… still only use text-based two-factor. My credit cards? All text-based.
Schwab and Fidelity use MFA apps.
3 Likes
Seems like Yashin was warning more about clicking on “Phishing Scams”. I’ve had a fair amount of those “Post Office” hold up scams which I click on “Report as Junk”.
I have fallen twice now for a Text that appears to be for the wrong person. One I got was from someone saying “ I can’t do Yoga today so don’t bother to pick me up”. I replied saying you got the wrong person. Then they tried to engage me. Another just recently was “How is the Ohana doing”. Stupid me thought it must be a friend so I said “Fine who is this?” Then they said “isn’t this Bob in Hawaii?” . Not the name I go by. I’m learning but slowly. Then there’s not answering an unrecognized phone number. But what if it’s from your Doctor with a new appointment? Unfortunately too often it is.
I don’t see how a criminal can grab my code from Vanguard between when I request it and when I put it in. I’ll start trying e-mail I guess.
I understand both Fidelity and Schwab have Fraud protection now but VG does not. As a paranoid Old Guy I’m thinking of moving to Fidelity , in addition to the fact they have great Cash Management Account (payin MM interest) with checking and Debit Card as well as a 2% back on everything Credit Card. Beats the minuscule interest I’m getting from NAVY FED CU on my Checking.
Exactly. Many banks, etc. don’t give the customer a choice about 2FA.
If it’s your doctor’s office they should leave a message. If they don’t, complain to your doctor.
True, provided you signed your HIPAA forms authorizing them to leave a message. I am pretty sure you have to explicitly agree with that.
1 Like
Why is this news to anyone? Experts have been warning that text 2FA is not secure since it came out… yet most financial institutions went with text 2FA rather than something more secure. I don’t get it.
2 Likes
I think it’s because it’s easy enough for most people to understand/use it. Everybody has a smartphone. Other forms of 2FA are a little harder to understand.
1 Like
I had an interesting/disturbing thing happen. I did my taxes today and used Tax Slayer. To log on they use the wonder “two factor authentication” and text a code to my phone. Fine…rules are rules and all that. I did my taxes and submitted it to be efile. 3 hours later I get the following text
It is obviously a scam but I called Tax Slayer and told them that they might have been hacked. I just find it unusual that I just filed my taxes and within a few hours get a scam text purporting to be the IRS. Maybe it’s just timing, but I found it odd.