Phishing by phone?

[Podkayne]

I’ve received several calls on my cell phone from an 800 number recently. A recorded message says (something along the lines of “This is an important message from Chase. Please call [the number from which the call originates] extension [something.]”

I do have a Chase Visa card, but they have my home phone number, not my cell phone. I didn’t call the number, but I have a sneaking suspicion they would ask for my account number and security code and other personal information.

I did call the Chase customer service number; I got the basic account info that they automatically give you (balance, next due date, etc.) Nothing about “OMG YR ACCT HAS BEEN FLAGGED!!111!!!1” I hit 0 to talk to an “advisor”, but I got hung up on about 10 seconds into holding. Should I bother to call them again? I can find a form for reporting suspicous emails on their website, but nothing about phone calls. I imagine Chase would like to know that somebody is trying to scam their customers…or if at some point I gave them my cellphone number and this is some kind of lamebrained marketing tactic, I’d like to give them an earful.

[Jayrot]

I got a weird call from Geico (insurance) on like a Sunday morning at 9:30. The guy says:

“Hi, Mr. XXXXX. In order to prevent any lapse in your service, I need to update your contact and billing information.”

My bullshit detectors went to Defcon 5. I handled it the way you’re supposed to handle any of these kind of potential phishing problems (email or phone). I said: “Tell you what, I’ll give a call back to the 800 number I have listed for Geico and update my information that way.”

“Sure thing”, he said and I hung up. Turns out they really did need to update my information. Go figure.
I’d say call back, maybe late at night so there’s minimal wait time (they should be 24 hrs) and talk to a customer person. It’s very easy for them to pull up your account and see if there are any pending issues. Yeah they might want to know if someone is trying to scam their customers, but they likely wouldn’t do much about it.

[Rube_E.Tewesday]

Sounds like you’ve entered the world of “vishing”. Here’s a link.

http://www.internetnews.com/security/article.php/3619086

[Fear_Itself]

@Podkayne

I’ve received several calls on my cell phone from an 800 number recently. A recorded message says (something along the lines of “This is an important message from Chase. Please call [the number from which the call originates] extension [something.]”

I got the same call, only it was from Citibank, but I don’t have a Citibank card. I called them back, and they started asking for all kinds of personal ID, including my SocSec#. I told them I would not tell them anything, and they said, “Well, then we can’t help you”. I reminded them that they called me, and if they didn’t know what the call was regarding, then our business is concluded.

[Leviosaurus]

I’ve been getting a lot of recorded phone messages lately from some organization called Liberty Financial, saying I need to contact them immediately about something really important. I ignore them. If they have anything really urgent, then they can tell me in the damn message.

[Podkayne]

@Rube E. Tewesday

Sounds like you’ve entered the world of “vishing”. Here’s a link.

http://www.internetnews.com/security/article.php/3619086

I am “vishing” that they would stop calling my cell phone. They’ve called 4 times, and it’s getting annoying. I have deliberately chosen not give out my cell phone number to anyone except family or people who have a specific need to get in touch with me for a specific purpose when I’m not home, and I don’t appreciate the f’in thing ringing all hours of the day and night.

Can you get an 800 number through VoIP? Or is it possible to spoof a number when calling from VoIP? Gads, I hope not!

[Duckster]

It has been my experience no legitimate financial firm will ever call you up to verfify your personal details over the phone.

[AskNott]

Call the phone company. They’re usually pretty fierce about defending against phone fraud, perhaps more than the credit card company would be.

[spingears]

Don’t call me. I’ll call you!

[Scuba_Ben]

@Jayrot

My bullshit detectors went to Defcon 5.

Nitpick: Last time I checked, “DEFCON 5” meant “peacetime,” and “DEFCON 1” meant “World War III.” Is this still correct?

[Duckster]

@Scuba_Ben

Nitpick: Last time I checked, “DEFCON 5” meant “peacetime,” and “DEFCON 1” meant “World War III.” Is this still correct?

In the event of a national emergency, a series of seven different alert Conditions (LERTCONs) can be called. The 7 LERTCONs are broken down into 5 Defense Conditions (DEFCONs) and 2 Emergency Conditions (EMERGCONs).

Defense readiness conditions (DEFCONs) describe progressive alert postures primarily for use between the Joint Chiefs of Staff and the commanders of unified commands. DEFCONs are graduated to match situations of varying military severity, and are numbered 5,4,3,2, and 1 as appropriate. DEFCONs are phased increases in combat readiness. In general terms, these are descriptions of DEFCONs:

  DEFCON 5 Normal peacetime readiness
  DEFCON 4 Normal, increased intelligence and strengthened security measures
  DEFCON 3 Increase in force readiness above normal readiness
  DEFCON 2 Further Increase in force readiness, but less than maximum readiness
  DEFCON 1 Maximum force readiness.

EMERGCONs are national level reactions in response to ICBM (missiles in the air) attack. By definition, other forces go to DEFCON 1 during an EMERGCON.

  DEFENSE EMERGENCY: Major attack upon U.S. forces overseas, or allied forces in any area, and is confirmed either by the commander of a unified or specified command or higher authority or an overt attack of any type is made upon the United States and is confirmed by the commander of a unified or specified command or higher authority.
  AIR DEFENSE EMERGENCY: Air defense emergency is an emergency condition, declared by the Commander in Chief, North American Aerospace Defense Command. It indicates that attack upon the continental United States, Canada, or US installations in Greenland by hostile aircraft or missiles is considered probable, is imminent, or is taking place. 

During the Cuban Missile Crisis, the US Strategic Air Command was placed on DEFCON 2 for the first time in history, while the rest of US military commands (with the exception of the US Air Forces in Europe) went on DEFCON 3. On 22 October 1962 SAC responded by establishing Defense Condition Three (DEFCON III), and ordered B-52s on airborne alert. Tension grew and the next day SAC declared DEFCON II, a heightened state of alert, ready to strike targets within the Soviet Union.

On 15 November 1965 the day Strategic Air Command (SAC) postured down to defense condition (DEFCON) III.

On 6 October 1973 Egyptian and Syrian forces launched a surprise attack on Israel. On 25 October U.S. forces went on Defense Condition (DEFCON) III alert status, as possible intervention by the Soviet Union was feared. On 26 October, CINCSAC and CINCONAD reverted to normal DEFCON status. On 31 October USEUCOM (less the Sixth Fleet) went off DEFCON III status. The Sixth Fleet resumed its normal DEFCON status on 17 November 1973.

Source: DEFCON DEFense CONdition - United States Nuclear Forces

OK, so the attribution is a bit of overkill. So now you know the rest of the story.