In an early-alert sign, The Bank of Hawaii is warning of a spate of scam phone calls that are spoofing the caller ID of the bank’s real call center, the Honolulu Star-Advertiser reports. The bad guys are likely to repeat scams like this nationwide or even worldwide, so it pays off to watch for this.
The scammers are posing as the bank’s fraud center and asking recipients to verify their Social Security number, date of birth, and debit card PIN. The Bank of Hawaii emphasizes that it doesn’t ask for personal information via phone calls, emails, or text messages, and recommending that anyone receiving such a call should hang up the phone immediately.
Caller ID spoofing is easy, and can be done with many free tools online, so the caller ID display shouldn’t be treated as a verification that the person on the other end is who they say they are. You should immediately be on guard if someone begins asking for information over the phone. If a company or government agency calls you and asks for information, you should hang up and call the company or agency using the contact number on their website or the number printed on the back of the card. In most cases, the call will turn out to be a scam.
Organizations should have processes in place to prevent sensitive data from being exfiltrated over the phone. New-school security awareness training can teach your employees to be extremely suspicious the moment someone asks for personal or sensitive information over the phone. The Honolulu Star-Advertiser has the story: https://www.staradvertiser.com/2019/11/20/breaking-news/bank-of-hawaii-warns-of-vishing-scam/
