Mr Tinmouth wanted to open a business account to deal with the income and expenditure of some properties that he was letting to tenants.
He applied to Barclays, but the process dragged on and eventually he made a complaint on Twitter.
He even posted an email that he received from the bank which he felt was unprofessional and had to confirm was genuine. The bank urged him to delete this public post.
All this information, together with some personal details that were already available about him online, was enough for fraudsters to mimic the bank and appear to know details of the case.
Reason #7,003 not to use Twitter.
(Score: 1) by nitehawk214 on Thursday November 29 2018, @08:14PM (1 child)
My guess is the bank doesn't use email as a communication method outside of "you have a message waiting for you, please log in to our website to retrieve it", like pretty much every other bank on earth, and especially big ones.
"Don't you ever miss the days when you used to be nostalgic?" -Loiosh
(Score: 2) by urza9814 on Friday November 30 2018, @03:20PM
Then why would he tell him that it contains sensitive information and that he should delete the tweet? And how would that provide any information usable to scammers? If reading someone else's email gives you enough information to commit this kind of fraud, then there is something wrong with that email.