this post was submitted on 15 Mar 2024
209 points (97.3% liked)
Technology
59312 readers
5268 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The real answer here is to have decent digital ID as 2-factor authentication.
This scam would be practically impossible in Sweden with BankID for example.
Adding multiple factors to authentication just adds another step to the scam, it doesn't make it impossible by any means.
For BankID it somewhat does, because only registered services can make the request - so they'd need to register a scam service and then use that. Which also makes it an easier job for anti-fraud police.
So it'd be a lot more complicated.
Like obviously at a certain point if someone is willing to do everything they can - then they will be scammed, see this for example: https://www.bbc.com/news/uk-england-leeds-67208755
But the more steps there are, the higher the chance the person realises it is a scam.
"A chain is only as strong as its weakest link" - We are the weakest link in any security chain, and always will be. Social engineering is one hell of a drug.