Two Fucktor Authentifuckingcation

Dear Cardholder: we are suspicious of this transaction on your card. Please click YES if this is an authentic transaction you initiated, or NO if you did not. The transaction was rejected.

——

  • click the NO button *

——

We are going to lock that account. Please click here to initiate and authenticate a request for a replacemen card. Link.

——

We are going to send a code to your phone. Please confirm your phone number.

——

No, that isn’t a cell phone, you can’t send a text to it. If you have to send a text, I’m willing to give you a cell phone number but I don’t want it entered as associated with this account.

——

We can do that. OK, I’m sending the code now. Please read it back to me…

———

928946324

———

OK thank you. Now I need to call you on the telephone. What telephone number should I call you at?

———

212-555-1212

———

OK I’m calling you now…hello? This is XXXX from ZZZZ, your code is 578465421 and you need to enter that …

———

Hmm… my screen prompt now says that phone number is not approved as registed to your account. Do you have any other phone number I can make a call to?

———

Well, you can call the same number you sent the text to. I don’t like to use it as a phone but as long as it’s only for the duration of this call, go ahead.

———

Sir, my screen prompt says that that phone is not properly registered either. And it says that’s the maximum number of attempts, so you will have to call back tomorrow to try again.

I love your title and story - so hilarious! :rofl:

One of the Red Hot Chili Peppers’ less well received songs.

I resent the assumption that every phone number is a mobile/cell number. Along with it of course are associated costs of perhaps several hundred $ for the phone as well as data fees & what have you. Not everyone can afford the luxury. However I do understand that ownership has become almost a necessity that’s been forced upon us.
I’ve had occasions that people have claimed to have sent a text confirming appointments or whatever, without giving thought to maybe, just maybe they aren’t dialing a phone capable of retrieving texts. Even if they were, it could be a couple days or so before I saw it (unless I were expecting).
I have a mobile but don’t feel the urgency to have it attached to me 24/7. Actually I rarely use the thing other than when away from my desk for several hours or more.
Just a quick rant.
And yeah, to the OP, ‘security’ has become a good source of frustration. Expect it to get worse.

Edit: A bank I use gives 3 or 4 options for security. Impressive.
Security at its most ridiculous was government. It took almost 1/2 hour to set up an account, during the course of which 3 or 4 codes had to be entered as well as other questions. A friend suffered through the same experience so it wasn’t just me.

So, someone tried to use your credit card fraudulently, and due to two-factor authentication, it’s only an annoyance for you rather than a huge tragedy?

Oh lord, here go the Luddites again. Let’s moan about how not everyone has a nearly ubiquitous, nearly 30 year old technology.

Might as well bitch about how you can’t find VCR tapes in stores anymore.

That’s what I was thinking too- they dodged a bullet more than anything else. Even if it was kind of a pain in the ass. They should be grateful, not irritated.

Something like 98% of Americans have cell phones. It’s hardly something only for the wealthy.

To me, it reads like the title of a Rick and Morty episode.

That’s not what they said, they said not every number is a cell number. I had that problem when I got rid of my land line and tried to add a cell number as my primary. They kept trying to text my land line and would not accept using my cell to get rid of a number I no longer had.

Except I’ve been screwed by not being able to get a text while being away in Europe. I tried to rent a car online in Greece a few years ago to get an email saying was this you please log in to confirm. Well since I wasn’t on my computer they wouldn’t let me log in without getting 2FA via text only. Guess who couldn’t get a text in Greece.

I find 2FA a pain in the ass sometimes, but whatever, I can’t do anything about it. But there does need to be another way to get it without a cell phone/text as that is not always possible.

@Keith1 seemed to be describing cell phones as a “luxury” that costs “several hundred $ for the phone as well as data fees & what have you” and has “been forced upon us.” As I said, almost everyone in America has a cell phone, so somehow even those on the lower end of the economic spectrum manage to afford them. (And there are low-cost options, including the government subsidized Lifeline program.)

It wasn’t so long ago that I got locked out of an account because my home phone didn’t have touch tone dialing, only the original pulse dialer.

Have you tried using a TOTP authenticator or a Yubikey?

Who was President of the United States when this happened? :face_with_spiral_eyes:

His title wasn’t president, but it was King George III. :rofl:

Bill Clinton in the late 1990s.

The house phone (and we didn’t have cells) was an old Bell-owned phone that my parents leased. I don’t think the system was updated until early 00s.

My bank is the same. The only way to login to your account while overseas is to receive a code via text message. If you’re unaware of this and didn’t arrange for it beforehand you’re locked out of banking. This bank does have an app to spit out a temporary code, except the app has never worked from day one. Last I checked it had a 1 star rating on the play store. heh,heh. There needs to be additional options. The bank I’ve moved a lot of my business to provides options besides just receiving a text.

To who commented on my post up-thread, you missed the point entirely. I can’t be bothered spelling it out.

This. Why is this such an issue? Why CAN’T we get these texts?

I had a “we’ll send you a text” problem when I was in New Zealand. I had put a travel notification flag on my card online (and verified it with a service rep) two weeks before I left but somehow that got screwed up. So my card was being declined when making hotel reservations which was inconvenient to say the least.

So I called the credit card’s international help line and they said they didn’t see the travel flag on my account. Since I was using a travel eSIM I couldn’t get the verification text. I ended up having to answer a bunch of security questions like the ones you answer to get a credit report. Major pain in the butt.

When I got home I went online to check my account and sure enough the travel flag was there…with the exact text I input I filed it before I left.

You do not need to receive any texts if you enable TOTP.

There was just a Rick and Morty episode about two factor authentication. Coincidence or did that inspire this thread?