What should I do if I fall victim to a marketing scam or phishing attack?

Use this six-step plan to reduce your risk

--

Photo by Hello I'm Nik on Unsplash

A friend sent me a text message on a Saturday morning letting me know a LinkedIn marketing scam fooled her. She had given away her home address and cell phone number. She was concerned and wanted my advice on what to do. In this post, I will share the advice I gave her.

1. Protect your mobile provider’s online account

Your mobile provider’s online account allows you to change your phone number and swap service from one phone to another. Imagine someone taking over that online account and moving the service to another phone. Now that person could get all those six-digit 2SV (two-step verification) codes for all your accounts. Any accounts protected by text message 2SV or MFA (multi-factor authentication) can be taken over too. This type of attack is called an account takeover.

One way to prevent this is to enable MFA on your mobile provider’s online account. I will expand on this later in this post.

2. Add a SIM PIN for your phone

A SIM is a physical or digital identifier that allows us to get cellular service on our mobile phones. We can add a PIN in our phone settings to…

--

--

Miguel A. Calles · Serverless CISO

Author of Mastering AWS Serverless · AWS Community Builder · Specializing in CMMC, SOC 2, serverless & engineering.