Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm going to correct myself. My family member didn't get scammed!

There is a government agency cold emailing people, telling them to fill out a form that that asks for Bank Name, Account Number, and Routing Number.

https://imgur.com/a/5loIfnW

Way to teach people to be safe.

At the same time the IRS is telling people to avoid scams by not clicking links in emails: https://www.irs.gov/newsroom/irs-issues-warning-about-corona...



> https://imgur.com/a/5loIfnW

That looks super shady.


Genuine question here: since the domain name is *.sba.gov, wouldn't that be enough to consider this legitimate?


I don't know the specifics here but many official sites also can have compromised parts, e.g. a subdomain with an old wordpress install or similar can get taken over.


Probably but I’d still prefer a link to a www.sba.gov page that links to this form.


The banking system (checking in particular) is hopelessly dumb, but that information is printed on every check. It isn't top secret.


True. The form also asks for SSN, DOB, address, phone number, etc.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: