{"id":8607,"date":"2020-11-23T16:25:37","date_gmt":"2020-11-24T00:25:37","guid":{"rendered":"https:\/\/socialcatfish.com\/blog\/?p=8607"},"modified":"2020-11-23T16:29:52","modified_gmt":"2020-11-24T00:29:52","slug":"does-two-factor-authentication-really-protect-your-account-how-scammers-can-get-around-this","status":"publish","type":"post","link":"https:\/\/socialcatfish.com\/scamfish\/does-two-factor-authentication-really-protect-your-account-how-scammers-can-get-around-this\/","title":{"rendered":"Does Two-Factor Authentication Really Protect Your Account?: How Scammers Can Get Around This"},"content":{"rendered":"

When creating an account on Apple<\/a>, Android, or another website, they sometimes require you to have what’s called two-factor authentication on your account to protect it. They claim that this is a safer way to protect your account so that it is a lot harder for hackers to log-in and steal your information. However, there are scammers and hackers who have found a way the two-factor authentication and try to trick you into giving them your information as well as the two-factor authentication code. So the lingering question remains: does two-factor authentication really protect your account?<\/p>\n

How Two-Factor Authentication Works<\/h2>\n[aesop_image img=”https:\/\/socialcatfish.com\/scamfish\/wp-content\/uploads\/2020\/08\/Asian-man-in-darkness-using-compute-536326-scaled.jpg” panorama=”off” imgwidth=”100%” align=”center” lightbox=”off” captionsrc=”custom” captionposition=”left” revealfx=”off” overlay_revealfx=”off”]\n

Two-factor authentication is supposed to give you an extra sheet of protection on your accounts by either sending a code to your email address or phone number<\/a> or by having you memorize a PIN number to access your account. That way, if a scammer were to ever figure out your username and password, they still wouldn’t be able to access your account without the proper PIN number or access code texted or emailed to you.<\/p>\n

Are Hackers Still Able to Go Around This to Hack Accounts?<\/h2>\n

Absolutely. Just because you have two-factor authentication on your account doesn’t guarantee that your account is 100% safe. It’s just meant to make the account safer by adding an extra passcode onto your account in case someone else happened to get your password.<\/p>\n

Obtaining your username and password is easier than one might think since data breaches<\/a> make it easier for scammers to hack into your account without two-factor authentication. Because hackers are so desperate to get into your account, they are still able to come up with scams and malware to steal your passcode and gain access to your account anyway.<\/p>\n

Ways Hackers Are Able to Obtain Your Two-Factor Authentication Code<\/h2>\n[aesop_image img=”https:\/\/socialcatfish.com\/scamfish\/wp-content\/uploads\/2020\/08\/Criminal-hacking-password-on-laptop-520601-scaled.jpg” panorama=”off” imgwidth=”100%” align=”center” lightbox=”off” captionsrc=”custom” captionposition=”left” revealfx=”off” overlay_revealfx=”off”]\n

Phishing Text and Emails<\/h3>\n

Scammers send phishing<\/a>\u00a0emails and\u00a0text messages<\/a>\u00a0with a fake website saying that your account was compromised. When you click the link, it looks like the actual website they are talking about, so you enter your name, password, and code sent to your phone. They then take this information and log in to your account, changing your information and locking you out of your account.<\/p>\n

Man-in-the-Middle Attack<\/h3>\n

This happens more-so when using public Wi-Fi networks<\/a>. You log-in to your account with your username, password, and code texted<\/a> to you, thinking that only you can see this information. However, what you don’t know is that there’s a scammer who has hacked into the public network and is using a website to steal information that you can see off of your device. It basically records your screen and shows the information to the scammer so they can log-in to your account, locking you out.<\/p>\n

Port-Out Scam<\/h3>\n

Scammers search the dark web<\/a> for your personal information, then call your cell phone company<\/a> pretending to be you. They say that they need all your text messages to go to a different phone and verify that it is indeed you calling using your information.<\/p>\n

The phone<\/a> company transfers your phone number to that device, and the hacker receives the text message with your passcode to get into your account. The hacker then accesses your account with your username\/password they got from the dark web and your access code that they were able to get through your phone<\/a> company. They then lock you out of your account.<\/p>\n

Fake Bank Phone Calls<\/h3>\n

A scammer calls you pretending to be your bank and masks the Caller ID<\/a> to look like its actually your bank calling. They tell you that your bank account has been compromised and need to access your account to fix it. They ask for your OTP (one-time passcode) to enter your account. Once you give them the passcode, they tell you it’s fixed and hang up on you.<\/p>\n

In reality, they changed your information so that you can’t access your account, and moved your money into another bank account created in your name. Then, they transfer your money to their personal banking account, stealing your hard-earned cash.<\/p>\n

How to Avoid Two-Factor Authentication Code Scams<\/h2>\n[aesop_image img=”https:\/\/socialcatfish.com\/scamfish\/wp-content\/uploads\/2020\/08\/Cybercrime-520563-scaled.jpg” panorama=”off” imgwidth=”100%” align=”center” lightbox=”off” captionsrc=”custom” captionposition=”left” revealfx=”off” overlay_revealfx=”off”]\n