How to Protect Yourself Against Phone Scams

SMS hack

For example, a hacker needs only a user’s email address and phone number to break into their email account – even if the account is protected by two-step verification – to take over the digital life connected to that email address. Dubbed ‘password recovery scams’, hackers use the two-step verification method utilized by various email providers to trick users into handing over access to their accounts.

As reported by security firm Symantec, once a hacker knows the target’s email address and phone number, they send a message asking them to verify their account by replying with the verification code the email provider sends to the registered phone number. If the target replies with an actual security code, it opens the door for the hacker to reset the password using the one-time code, and as such the rightful user is locked out of their email account.

Apple support hack

Scammers don’t shy away from acting in the name of any respected company, Apple included. They don’t need to break into iCloud to get your username and password, it’s enough to simply call you as a supposed Apple Support employee to squeeze the information out of you. The problem with this situation is that Apple Support will never ask for your Apple ID and/or password. If this does happen, then you can be sure that there is a scammer on the other end of the line that is after your money. The best thing anyone can do in this situation is to save the number, hang up the phone and report the situation to Apple.

Cell phone porting scam leads to identity theft

A nightmare can easily start with just a text message from the cell carrier saying “your password has been changed”. We are pretty sure that no one wants to wake up to the “surprise” message that many T-Mobile customers have experienced where they had their phone number ported and their lives ruined after a number of unauthorized transfers of money from their bank accounts.

Alongside good password hygiene – in other words using a unique and cryptographically secure password for every account created both online and offline with the help of a password manager – it’s also good to think twice before clicking on a link in an email or text message, asking yourself two questions before doing so:

1. Is the sender legitimate?
2. Were you expecting an email/text message containing a download link or one-time password?

If the answer to either question is ‘no’, then it is likely you are the target of a phishing scam and as such it’s wise to avoid downloading the attachment or clicking on the link in the email or text message.