It started yesterday, a few spam emails and a text message about a password or login attempt. Later I tried logging in my bank app, locked out.

I have accounts with two separate local banks, checking and ATM card. I started with one bank in the morning. They said I was locked because of suspicious attempts, someone actually called with a fair amount of my information. They hung up with the bank operator when they couldn’t get by the security questions.

The same attempt happened at the other bank, and also my cell phone company. With the cell company they said I(me) wanted a lost phone replaced.

In all attempts, no $$ was lost, no strange charges on any credit cards. This was the most serious attempt I’ve ever had. Yes, my credit has been ‘frozen’ for years.

So after dealing with the banks, one a new account & card, I’ve been changing usernames and passwords, setting up even more alerts.

I never click on any links, never pass info to unsolicited callers or emails. I also seldom log onto financial accounts away from home.

I did have one suspicious email from a Gmail account, blocked. I also noted a ‘recovery device’ with my email that I didn’t recognize, removed.

I think they have most of my info, DOB, SS number, address, and a few account numbers. I have my added alerts set up, will keep a closer eye going forward.

I guess I was kinda wondering what would be the likely leak with my info? I’ve never had this level of an attempt before.

They mentioned I could move to a new email account, doable but would take a good bit. The one even mentioned a ‘factory reset’ on the phone, then reinstall apps & info.

That sounds like you’ve been specifically targeted or that a phishing email got through and you got compromised.

When I got an email from my credit union saying my attempt to connect an external link failed, I called to let them know I haven’t tried to connect any external account. They gave me a new everything: checking account, savings, credit card, and even new membership number.

The member number was the kicker for me since I’ve had it since early 90s and had it memorized.

I would suggest going to the three credit agencies and freezing your credit reports. No new financial accounts can be opened unless you unfreeze your credit reports.

I would also advise paying for a password manager. Besides remembering the password, it can recognize a legit website and only allow your password to be pasted.

quote:

I would suggest going to the three credit agencies and freezing your credit reports.

The OP stated in his post that his credit has been frozen for years.

quote:

Yes, my credit has been 'frozen' for years.

The security questions are pretty predictable. What was the make of your first car? On what street did you grow up? Who was your best friend growing up? What was your first pet's name? I make answers up, and keep a list for each account.

A lot of times that information can be found directly or indirectly on social media. Even on this site, though it wouldn't be as easy as facebook etc.

Especially those list of questions type of posts on social media. What was the #1 song when you graduated high school? That gives them some data.

If you're on a special interest forum (guns, guitars, motorcycles, dogs, home town, etc), a scammer can post as a regular member and ask innocent sounding questions to get info from you.

Don't use the same user name across different platforms where additional info could be found and linked to you.

Lock down the privacy settings wherever you can.

Be hyper alert about phishing. Trust nothing you didn't initiate, and even then be careful not to click on links.

Data is a product easily purchased.

I had an debit card from local bank hacked. Happened 2nd time with the replacement. I've never used the ATM, or the card, and was still in possession of it. I insisted the bank call me to explain. I learned it was not their only complaint. IT dept tried not to say exactly what or how, but I got to read between the lines that they suspected the card issuer, or hacked the data transmission to them. Asked them not to replace that card.

I will admit in the past I used similar usernames then passwords for various sites. Not as bad as the same for all, but not a whole lot of variety.

I will continue to lock things down, set alerts, change a bunch of log-ins. Things did work as advertised, though it could of turned for the worst.

quote:

I make answers up, and keep a list for each account.

Never use a debit (ATM) card. Pay with cash as much as possible.