Agree. Also, as far as texts, I don't delete the legitimate (that I have authorized in my settings) text history on my phone for notifications from my accounts, and thus, when I receive a security "notification" text from one of those entities, my first clue that it could be fake is when I try to scroll up and all my previous legitimate notifications are not there (i.e., if it came from a brand new number in my texts list, I will not trust it, and will verify by calling a known number and attempt to login on the app or at the known www. address I normally use). Either way, I'm not clicking any links in emails or texts.
I went through my text list and added these known text numbers to my address book so that in the future when I get a legitimate text it will appear as e.g. Fidelity Security rather than a string of digits which may or may not be from the genuine article.
I disagree. From the OP:
But it is a one time code, not your password. Why is this a problem?
That has ALWAYS been the correct process. There is no substitute!
It was about a year ago. I don’t remember the exact solution.
You should never share your code. I was on with Fidelity and I needed to remove the transfer lockdown. The rep said she couldn’t do it and waited for me to 2FA the process. She never asked for the code.
And YOU want to be MY latex salesman..
Even that isn't always safe. If they take your card back to somewhere other than right in front of you, they can scan it in a moment. That happened to me once when I was at a seafood counter at a beach town. I was buying 2 dozen oysters. Handed them my card, they went to the back, bought them out in a box and handed my card back. That night, got a call from the cc company, did l just pay $800 for drinks at a bar in NYC? No, but I did buy oysters at that time in Bodega, California. They froze the card and sent me a new one the next day.
I get those infrequently as well.
I also do this.
Because if you are being scammed they can use the one-time code to get into your account. The rule, including at Fidelity, is to not share that code. But now Fidelity has created an exception to the rule, meaning you need to think whether you should share your code when it's requested, meaning you can get that wrong and end up being scammed.
Haven't had it in years, but every single time my credit card was compromised, I was able to trace it back to a time when I used it in a restaurant and the waiter disappeared with it for a few minutes until bringing it back to me with the receipt.
I think that’s a good idea. DW was buying a mattress at a department store. Fidelity texted me to authorize. I could see the past alerts so I know it was legit. There was no phone number associated with the text (AFAIK), just the 5 digit text number. I added it to my contacts as Fidelity Fraud Alert. They declined the purchase even though I replied promptly. Then another text instructing me to resubmit the purchase.
