You receive a call on your phone.
The caller says they're from your bank and they're calling about a suspected fraud.

"Oh yeah," you think. Obvious scam, right?

The caller says "I'll send you an in-app notification to prove I'm calling from your bank."

Your phone buzzes. You tap the notification This is what you see.

Still think it is a scam?
1/3

This entry was edited (1 year ago)
in reply to flabberghaster

@flabberghaster I have had my actual bank call me, and then ask me (via security questions) to verify that I am actually me. I feel that was *training* customers to divulge information insecurely, as I had no way of knowing that they were who they were, and they wouldn’t have provided it if I’d gone along with their request.
This entry was edited (1 year ago)
in reply to flabberghaster

@flabberghaster @simonwood
Indeed. They should, probably, do it like the good banks send mails: plaintext notification, no link at all, just an info - there is an important message in your Internet banking inbox, go there and fetch it.

So even the call may be initiated in a way - hello, this is your bank, we need to talk to you immediately because of "reason without details" (e.g. there was a suspicious transaction we want to xcheck with you), please contact our telebanking number to proceed.

in reply to Terence Eden

The tricky part of this story is that sometimes banks do really call you - it happens to me whenever I do really nonstandard transaction.

Truth to be told I've always seen this as mixed blessing and I have also been "that weird one" who asks the caller for their name and do the callback to the known (read official telebanking) number of the bank...

My colleague once seen that and was like WTF you're doing dude, they're doing you a favour... and my answer was "never trust a caller, just loose one more minute and do the callback to a known and trusted number".