By: +David Herron; Date: Thu, 2011-09-08 16:55
I just got a text message on my phone from "956-86" claiming to be from Citicards' anti-fraud department and asking me to call 800-386-6624, enter a pin#, and naming a possible fraudulent charge on my card. The text message itself appeared like it might be a fraud, so I do what I always do with questionable phone numbers, and do a yahoogle search and see what the phone-number-discussion websites have to say about it. I shockingly found conflicting advice, some saying that it's legitimately a Citicard fraud department phone number, and others saying that it's a phishing attack and that the "it's a legit Citicard phone#" postings are themselves bogus.
I'm happy to say that it's actually a legit Citicard fraud department phone number. That is ... I pulled out my Citi credit card, and called the phone number on the back of the card. They knew me, they knew about the potentially fraudulent activity, they named off the same details that were in the text message, then they closed the account so they could change the credit card number.
In other words - if it were a Phishing attack, then the Phisher's would have to know stuff the Citicard fraud department knew. In other words, the text message had to have come from the Citicard fraud department.