Hacker News new | ask | show | jobs
by copo233 1685 days ago
I don't even have an account with Robinhood. I've never done any business with them but somebody else set up an account with my email address. After taking way too long to have my email removed from that account, they now managed to give it to some criminals as well.
2 comments

I get emails from legitimate companies (including Wells Fargo, a major U.S. bank) meant for others, because they never validated the email address their customers gave them.

Email Address Validation is not "yep, that looks like an email address", it's "let's send a confirmation email and have them click on a link".

Please do NOT trust users when it comes to email addresses!

This is why you verify email addresses. Especially with financial institutions.

Mint used to send me somebody else's statements. I don't understand how companies in sober industries can be this reckless.