Phishers use IVRs for phishing!

This week I received a text message from an “Unknown sender” and it read:

“This is an automated message from Franklin Bank.Your ATM card has been suspended.To reactivate call urgent at 866-545-2647”

Being the curious little monkey that I am, I just had to call it. So, the first thing I did was find a phone which did not display an external caller ID (ANI). After finding a phone I called the number above. I was greeted by an automated voice asking for my credit car number, my expiration number, and my 4 digit pin. I entered random information. After it was trying to verify my information, it asked for it again. However, this time it said it could not verify my account at this time and to call customer service representative… however it didn’t provide me with a number.

This is a scam, although I must say a some what ingenious scam. First, there’s an automated voice which answers the call, this can’t be tracked to any one person which might throw of a caller because of an accent or tone of voice. Second, is very similar to text messages received from various financial institutions. Finally, they have a toll free number which they provide for you to “activate you call”. Pretty cool, huh?

I think I’ll set something similar up at my home and even have it go to a web service to verify the credit card number is of the correct format just to say I can. :-)

~david