My brother just got hit by a really insidious bank scam. Scammers spoofed caller ID with citibank’s real online banking number and tell him “there was a fraudulent Zelle transfer from your account. Call Zelle at this number.” Fake-Zelle rep confirms fake case numbers that fake-Citi gave him, dazzles with still more bullshit and gets him to actually transfer money to them under some plausible sounding “fix” pretext. Slick. Citi says it’s a new one on them and are investigating ASAP.
@shoq Holy hell. Not a day goes by where we don’t get some kind of attempted scam by one means or another. It’s outrageous.
@strachanp @shoq Same, get a scam txt msg or 2 a day. There are leaks in the system. Yesterday an official USPS package msg was followed by a “We need your address” scam msg. The package arrived within the hour. :)

@shoq

Just got an email from the “CIA” (they got the physical address of their Virginia HQ right, but the phone number is a Miami number in the header). Apparently they acquired so much money from scammers I’m one of only ten people (lovingly addressed as “Fund Owner”) they’ve decided to “refund” 4.8 million dollars to. All I’ve got to do is fill out a whole bunch of personal information and include my identification when I reply.

Alright! Almost five million dollars! I can’t wait!!!

@shoq

My first clue that it was bullshit is it appeared to come from a branch of the American Government that actually seemed to care at least a little about the well being of its citizens.

@RodneyPetersonTalent @shoq I don't care about all you losers. I still say "your porn name is the name of your first pet and the street you grew up on" was the best twitter game ever, and I proudly claim the porn name "Lucky Thornhill."
@msbellows @RodneyPetersonTalent @shoq
"Rags108th Place" is perhaps less successful.
@shoq I've had relatively similar stuff and threats about banking before.

Generally, I'd recommend ignoring any numbers given by phone and finding the bank (and the company's) official numbers online, on their own sites and using the customer support/phone operators to get to where you're supposed to go.

Or, ideally, to be told that such an office doesn't exist and that you never were called. Worst case you spend a bit more time on the phone, best case you just avoided getting scammed.
@lispi314 @shoq This. If it sounds legit, go thru known legit channels to reach out to them. Never ever ever ever use the phone number they provide on the phone.
@shoq I got burned by that very scam.
@shoq yeah. I will never fall for this shit. I would say, "ok, I'm not worried since I know y'all will fix it when I come into the bank to talk to a teller face to face considering you're FDIC insured."

@shoq
Pro Tip: WhenEVER you get a call, text, or email wrt anything, thank them politely, hang up, and then call the customer service dept of whatever supposedly reached out.
Never open a link someone sent to you unsolicited.

Even with text notifications enabled, I still do that. Got one from SS the other day. Deleted the text and logged on to My Social Security to find they’d sent my 2023 COL notice.

@shoq sounds like an inside job. Somebody sold a database.

@shoq Previous one like this where you get a fake text from Zelle saying some money was put in your account. Then you get a call from someone saying they sent Zelle to the wrong number, are going to miss their rent and their kids will starve, and beg you to "send it back."

I got a good looking check in the mail once along with a letter asking me to deposit the check and then "review" Moneygram by sending some money.

@shoq honestly there is no way to avoid these type of scams. I think even someone like myself who knows about security and even does some security stuff as a career would fall for these.
@shoq NEVER give out private information to ANY COMPANY via an incoming call. Hang up and call the company to confirm.
@adirtyhippie @shoq And call the number on their website that you know is good because your password manager agrees it's the right site.
@shoq Damn. That's some social engineering shit happening right there.

@shoq
UK people - for most banks you can ring 159 to check if a call is a genuine call from your bank

https://www.bbc.co.uk/news/business-58722201

New 159 fraud hotline launched to counter threat

Potential victims who dial it will be automatically connected to their bank's fraud prevention service.

BBC News
@shoq I used Zelle once to accept a payment then turned it off. Banks should never phone customers and should say that explicitly.