Would You Have Fallen for This Phone Scam?
Summary: A KrebsOnSecurity reader's wife was targeted by scammers who spoofed her mobile number to pull her last three Citi transactions from the bank's automated phone system, then used those details plus a spoofed bank caller ID to earn her trust. The caller relayed her security-word answers to a second fraudster posing as her on a parallel call to Citi, and the pair requested an overpayment reimbursement of just under $4,000 before her inbox flooded with newsletter sign-up messages meant to bury the bank's notification.
What's compelling: Gemini Advisory estimates 13 million stolen CVV records are for sale on the dark web, and more than 40 percent of those listed over the past year included the cardholder's phone number - the exact combination that let this scam work. The Citi fraud department employee who insisted the call was genuine because it came from the wife's mobile number shows the control your bank relies on can be defeated by caller ID spoofing alone.
Read the original at Krebs on Security ↗
- Topics
- Fraud & Scams
- Related
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AI Cyber Risks · Nov 13, 2026Three People Arrested for AI-Enhanced Impersonation Fraud Cyber Risks · Nov 11, 2026Medicare scam calls, texts and ads: What to watch for this Open Enrollment Cyber Risks · Oct 14, 2026