August 12, 2005

Stupidity revealed in the "safe" approach

More on identity theft in this article in Techtree (India): Fax-Back Phishing Scam. The details:

The e-mails direct users to a Microsoft Word document hosted on a website and urge them to download a form, fill it out with their bank account details, including credit card numbers, PIN information and login details and fax it to a toll-free number.
Notwithstanding that it may end up being stupidly easy to track down the end-point of that fax number [of course, the fax could be acting as nothing more than a re-router and putting the scanned data onto the Internet before it's transmitted to safety . . .], the part I love about this scam is it's Aikido-like approach.

People think that sending information over the Web is dangerous. Sending that same information by fax, we perceive, is far safer. One scepticism-obstacle down, so the only thing the phisher needs to do is be suitably convincing with the come-on. They use the perception of danger online to move people to do the same stupid thing offline. [Then, of course, they'll blame the Internet for the ID theft (see post immediately below).]

Posted by Grayson at August 12, 2005 07:43 AM