Wait, the guy said he received a call from the 1 800 number that is on the back of his card. How is that possible to fake? Shouldn’t that number show up too on his cell?
Ok, so pretty much treat all phone inquiries as potential bogus. Only accept emails or texts that say call your credit card company, your account may have been compromised.
Learn from Hollywood: don’t call me. I’ll call you.
Well, the one time my card called me it was to report that someone had tried to charge something from overseas and it looked suspicious. They said to call the company back and report if legit or not. They closed account and fed ex’d new card. Worked out…
You are learning to be a gigolo?
Yep. No security at all on the control plane that carries your caller information. And it is just a plain datafield in the bearer cap that says what your number is. So you can put any number you want to override. Never trust caller id