My Caller ID was Spoofed in a Phishing Attempt.

[MilesColtrane]

Got a call today from "American Express". (yeah, right)

Caller ID said American Express and the 800 number, I later found out, was indeed an Amex customer service line.

But, the guy on the other end immediately asked for my card number. Suspicious, I told him, "You're calling me. You should have my number in front of you."

Then he came back with, "There's been suspicious activity on your account. We need to verify your identity with your Social Security number."

I told him no way, hung up, and called the Amex # on the back of my card.

They told me that no calls had been made to me from the number that showed up on my phone.

After all this I did a little research and found out that many VoIP applications allow you to send a fake name and number to any phone you call.

Just a reminder. Never give your info to someone who calls you.

[NYC_SKP]

1. Kicking for visibility.

Would recommend, but, you know.

Thanks!

:hi:

[MrsBrady]

2. I've heard of this going around.

I found a bunch of blog postings the other day when I got a call that said Amex.
I don't have Amex, so I figured it was a wrong number and didn't answer.
I got another call a few hours later. I still didn't answer, but got curious and found people blogging about this on-line.


One time, Bill Me Later called me after I had made a purchase.
For some reason their system created a new account instead of using the one that already existed.
I didn't have to give him any info. He just wanted to verify that I had made a purchase of _____ for $______.
He didn't ask for any info. I knew it was legit cuz he knew what I had purchased, and said he would combine the accounts into one for me.
Sometimes they do call. But you are right. He didn't need anything from me except my permission to combine the accounts.

[snooper2]

3. That's not how it works..."your" caller id wasn't spoofed

The originating calling party manipulated the invite to show the AMEX number. The name that displays on your phone is retrieved from what is called the CNAM database by the terminating switch. The name field isn't populated in the invite or messaging (depending if you are talking ISUP or SIP) until that dip takes place.

[MilesColtrane]

4. (deleted)