Today for my podcast, I read How I Got Scammed, originally published in my Pluralistic blog. It’s a story of how the attacker has to get lucky once, while the defender has to never make a single mistake.
This is my last podcast before I take off for my next book-tour, for my new novel, The Bezzle. I’m ranging far and wide: LA, San Francisco, Seattle, Vancouver, Calgary, Phoenix, Portland, Providence, Boston, New York City, Toronto, San Diego, Salt Lake City, Tucson, Chicago, Buffalo, as well as Torino and Tartu.
My first two stops are Weller Bookworks in Salt Lake City on Feb 21 and Mysterious Galaxy in San Diego on Feb 22, followed by LA (with Adam Conover!), Seattle (with Neal Stephenson!), and Portland. The canonical link for the schedule is here.
I wuz robbed.
More specifically, I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened. And then he tried to do it again, a week later!
Here’s what happened. Over the Christmas holiday, I traveled to New Orleans. The day we landed, I hit a Chase ATM in the French Quarter for some cash, but the machine declined the transaction. Later in the day, we passed a little credit-union’s ATM and I used that one instead (I bank with a one-branch credit union and generally there’s no fee to use another CU’s ATM).
A couple days later, I got a call from my credit union. It was a weekend, during the holiday, and the guy who called was obviously working for my little CU’s after-hours fraud contractor. I’d dealt with these folks before – they service a ton of little credit unions, and generally the call quality isn’t great and the staff will often make mistakes like mispronouncing my credit union’s name.
That’s what happened here – the guy was on a terrible VOIP line and I had to ask him to readjust his mic before I could even understand him. He mispronounced my bank’s name and then asked if I’d attempted to spend $1,000 at an Apple Store in NYC that day. No, I said, and groaned inwardly. What a pain in the ass. Obviously, I’d had my ATM card skimmed – either at the Chase ATM (maybe that was why the transaction failed), or at the other credit union’s ATM (it had been a very cheap looking system).