Just realized two-factor authentication saved my account last week after a phishing attempt

I got an email from what looked exactly like my bank asking me to verify my login. It had the right logos and everything. I clicked the link and entered my username and password without thinking. But then the 2FA code came to my phone and I stopped because I hadn't requested it. I checked the email address more carefully and saw it was off by one letter. Has anyone else almost fallen for one of these fake bank emails lately?

2 comments

2 Comments

willow73214d ago

Yeah that email trick is getting really common. I saw a news report saying those phishing emails get more convincing every year. The logos look perfect and they use the same fonts and colors as the real bank. You did the right thing stopping when that 2FA code showed up. I heard the bad guys are even starting to fake 2FA prompts now by calling people pretending to be the bank.

the_ryan14d ago

Read an article that said some of these phishing gangs are buying domain names that look almost identical to the real bank's URL. Like they swap a lowercase L for a capital I or use a .net instead of a .com. If you're not paying close attention you'd never catch it.