Good evening. How are you? It’s a pleasure to be here. My name is Timothy. I am working on your internet connection. We’ve been having some outages in your area. I’ll just need to verify some information to make sure your service is not disconnected due to inaccurate data.
I see here your email address is you@them.com. I searched our compilation of data breaches and found your email address in four of the breaches. Do you have accounts with Sears, AT&T, CubsFans, and the public library? … You used the same password on all of those accounts. I was able to use that password to log in to your internet account as well.
I see here that your favorite pet is Rupert. How is Rupert doing? … Oh, I’m sorry to hear that. He sounds like a lovely pet. I’m sure you miss him dearly. Did you get a new pet? … A cat this time? Nice! Let me guess, you named it after your mother’s maiden name. … Randolph? Oh, of course. That’s not good for a female cat. You’re right, Sassie is a better name. I’ll just note that in your file.
Well, I think I have everything I need here to make sure your internet is not disconnected. I’m going to send you a confirmation on a text message. Could you please check your phone and tell me the confirmation number? …
No, I can’t see your phone. Could you please look at it and tell me the confirmation number? … No, this is not a scam. I need you to confirm our conversation to prevent your internet from getting disconnected. Just tell me the confirmation number so we can maintain your connection. …
My name is Timothy. I work with your internet company. Now I need you to tell me the confirmation number. It expires in three minutes. … I don’t know the name of your internet company! How would I know that? Now just tell me the confirmation number before it expires! … You are causing problems. If you do not tell me that confirmation number, I will have to disconnect your internet service. … I already told you, this is not a scam! Now do what I say or I will clean out your bank account.
CLICK.
CONGRATULATIONS
Not only did you enable Two Factor Authentication (2FA), but you also stopped a scammer from trying to talk you out of your 2FA code. 2FA tells your institution to ask your permission IN THE MOMENT, even when the correct password is provided. If you have not enabled 2FA on your important accounts, then scammers who found your login will be able to log in without your permission. Make sure to set it up asap.