What Do You Do?

in The Pub7 hours ago

Something happened yesterday and I'm thinking of it ever since. It's not something new, but it's a first time happening to me and I'm trying to learn from it and be smarter next time.

I was heading home from the grocery store, with shopping bags in my hands, when my phone rang. I saw an unknown number on the screen and when I answered, a man asked me if I am Ms ... (he said my name). I said yes I am, after which he introduced himself as an agent of the National Office for Prevention and Control of Money Laundering. I am not going to lie, it made me nervous as no one wants to be contacted by these people, neither do I, but in the same time I knew I've done nothing wrong, there's no reason for them to contact me.

marek-pavlik-cgKeZs1IR-A-unsplash.jpg
Photo by Marek Pavlík on Unsplash

After he introduced himself, he told me that it appears I deposited around $18k in my bank account this morning, a sum that is way above the normal limit, so they have to investigate. Then he asked me what do I have to say. I said "I don't have anything to say as I did no such thing." His next move was to appear surprised and told me that the day before I opened an account online and again, that I deposited $18k in that account the next morning, or yesterday to be precise. I told him it wasn't me and here his strategy changed. He said this is a huge problem as someone is using my identity, to commit financial crimes in my name. Then he asked me if I have my ID or lost it. I told him obviously I have my ID as I'm cautious. Then he asked me if I had any arguments with my coworkers or employers lately. I told him no, I didn't have any conflicts. He was really pushing it, he asked if I'm in good terms with my employer, so I told him I'm not employed.

At this point I decided to change the conversation and asked him again, what institute is he representing. He told me again, but it seemed like he was reading it from a paper or screen, which was odd obviously, because if someone is actually working for this agency, they would pronounce the name fluently.

the-metropolitan-museum-of-art-PaemurrMPdo-unsplash.jpg
Photo by The Metropolitan Museum of Art on Unsplash

Anyway, seeing he didn't get anywhere with me, he had no other choice but to tell me that the Directorate for Investigating Organized Crime and Terrorism is going to contact me so I can clarify the situation, to which I said "OK" and ended the call.

The funny thing is no matter who you talk to, everyone has a similar story, or know someone who has been scammed already one way or another. Some have lost significant amount and others have lost everything they had and this is going to get worse.

In this case I didn't lose anything, my bank account was intact, there was no additional account opened in my name as the guy stated, as I checked with the bank, but still ruined my whole day. The thing that bothered me the most is that he knew my name. Phone numbers are not secret, you can dial any number and try your luck, but when they know who's linked to that number, it indicates they have precise information. The question is how?

thomas-chizzali-EQgC9jR02QY-unsplash.jpg
Photo by Thomas Chizzali on Unsplash

Service providers all have your details, as you need to provide those when you make a contract. Data should be confidential, but unfortunately many institutions had their database hacked and from that point on, no one is safe. Recently the cadastral office's database got hacked and unofficial sources said hackers are selling data to the highest bidder. Could this be the source of information? There's no way to know, but my question is another.

After knowing what we know, how can you ever be sure the caller at the other end of the line is what they say they are? I decided I'm not going to confirm my identity from now on, but what if the bank calls and they are really who they say they are? Or other authorities? How do you handle this as you can never be sure of anything these days? I don't want to be rude to anyone ... but what's the right way to handle things?

There was a time, when people answered the phone saying their address, for the caller to know they landed where they wanted to. This was in Agatha Christie's time, but there used to be businessmen and not only, who were stating their name when they answered the phone. I guess those times are long gone.

If you're a newbie, you may want to check out these guides:

Sort:  

Through the last 10 or 15 years several companies have been hacked and lost millons of peoples info that could or could not also include mine. They always say your account payment and the such was not lost, just your name and demographics. Of course lies are told all the time so who really knows, but even with name, address and phone, if that were all, it does give scammers a starting point. I don't answer my phone unless it shows the name of someone I already have named in my phone. If it is someone else that is real, they will leave a message and I will listen later. If it seems possibly legit and is a business I know already, I will use a number I already have or look up to call back and not the one that was used to call me. Honestly, like you, I know I am not involved in anything hinky, so not calling them back or whatever doesn't give me a moments hesitation.

Now with them showing that folks can record your voice on these calls and use AI to mimic your voice and make it sound like you are saying anything they want, there is really no good reason to answer. Quite the shame for sure, but unfortunately, it is the way of things these days.

With companies losing our info all over the place, it barely matters if you are crazy good about protecting your own info. I know we still have to try.....but....all our efforts my just be in vain.

many companies have been hacked these last years , they often have your name and number if that info is out on the street because of some hacker there is not much you can do about it but to be cautius .
I keep getting emails that my subscription is about to run out or that i have only x amount of days left to pay a certain bill . and sometimes we get thos fake invoices also in the regular mail it happens, and it will get worse for sure.

I think you are right, they probably got your PII from some data breach. Even when places get hacked and the attackers don't get usernames and passwords, they sometimes still get directory information that can be used for social engineering like this.

Unless someone deliberately sold them some databases, this is the explanation I can think of. It pisses me off, but there's nothing I can do.

You have done the right, and it seems the scammers met his march. That is how they do. At times, I do wonder how they get our information do for them to act upon it.

Never answer your phone - problem solved 😆

Classic scam, they do know your name and phone cause insiders of phone companies, electric companies etc, sell your data to third parties (in black ofc not with signed contracts)