Re: "'Scammers stole £40k after EDF gave out my number"

On 2025-03-16 15:54, Newyana2 wrote:

On 3/16/2025 9:47 AM, Java Jive wrote:
 

and went on to hack ...".  Further, if you reread the original report in its entirety, how would he have persuaded EDF to give up the victim's mobile number without personal identifying information that came from access to his emails?

 "
EDF explained the fraudster had his name and email address and had asked EDF to give them his mobile number, which the company did.
 "I said, 'Why would you do that?' They said the person had gone through security. 'With a name and email address', I asked?," he said.
 "EDF said, 'Yes' - and then offered me a £50 goodwill gesture to close the case.
"

Which supports my ordering of events.

Next, how would he have been able to confirm the request for a replacement SIM without being able to reply to the confirmatory email?

Theo has replied about this, I accept that there may not have been a confirmatory email, but there must have been some other identifying information available to enable the SIM swap scam to occur.

    I think that's the critical point here: Security and convenience
are at odds with each other. If you lose your phone then you
want to get a new one quick. If you forget your email password
then you want to get around that quick. Ditto for CCs. So companies
are faced with finding a compromise between security and
convenience.

Yes, we can agree on that.
--
Fake news kills!
I may be contacted via the contact address given on my website: www.macfh.co.uk