Hacker News new | ask | show | jobs
by kijin 3998 days ago
Possible scenario:

Cardholder changes his phone number, but telemarketers keep calling the old number. The person who now has that number receives a bunch of calls asking for the cardholder, collects a fair amount of information about him, and figures he could impersonate him.

Yeah, that sounds a bit far-fetched. But remember that when people change their phone number, they usually don't remain available at their old number for long. So someone at the old number claiming to be the cardholder could have been a red flag, too.

In fact, in the couple of years since I've had my current phone number, I've managed to learn a fair amount about the person who had that number before me, mostly via telemarketers. Where they lived, where they were planning to relocate to, where they used to shop, what their interests were, etc.

Anyway, Amex should have called the new number on the account to see if they get the same person. Unfortunately, they seem to have trusted caller ID too much, even when it was obvious that at least one of the people they were talking to was an impostor.