@coldfusion wrote:
@Aim_High wrote:I think those may be the two most important government websites to secure for fraud purposes.
I'd argue that login.gov and id.me are the two most important given that multiple agencies have either transitioned or are in the process of transitioning to require use of one or the other authentication service. I know that SSA now supports both, the IRS supports id.me but has work to do before they can fully support login.gov.
Good point @coldfusion. I didn't specifically mention it but I used ID.me to login IRS and modified my SSA sign-in to the newer login.gov format which they are in the process of an eventual mandatory conversion, from my understanding.
@AndySoCal wrote:I agree it is very important to secure /freeze your financial information banking, brokerage, PayPal etc. I have setup 2 factor authentication where possible. It is also important to secure your computer ie firewall and antivirus malware software installed and an active subscription for the software.
No amount of technology can stop a consumer from clicking on a link in an email or text message. Sometimes the link navigation will be blocked. I wish people would check the email before they click on the link. Look at the senders email address does it match the bank it is coming from. I.E If the email is purported to be from Chase Bank does the senders email say @Chase.com it is fraud. If there is no senders email address it is fraud. My email provider gives me ability to see the email header. I use that information to find out what domain the email came from. The most popular was outlook. I found an email address to report these fraud emails I included the email header showing it came through their domain. After reporting 20 to 30 emails no fraud emails from the outlook domain. The fraudsters started using the Google domain so I started reporting those as well. Now no fraud emails. I also report fraud text messages as well. Be safe and secure.
Even if the eMail domain looks official (@chase.com, @citi.com, etc), it still may not be legit. If they're asking for sensitive info over eMail, it's a scam. Look at the security campaigns for your FI. For example, NFCU advertises something like "NFCU will never ask for your login info, password, or xyz". Only dispel sensitive info over an official message portal or after calling the # on the back of your card, where they can transfer you.
