Oh actually it’s worse than that. There are online companies that offer online SMS services that can receive messages from real phone numbers by essentially telling your carrier you want text messages forwarded to them. Obviously they usually make you prove that you own the number before requesting forwarding, but there’s ways around that. I’ve known several people who’ve had their online accounts broken in to because someone hijacked their phone number’s SMS in order to perform password resets or bypass 2FA.
Losers are also scamming Craigslist posters. “Oh good I’ll be available at that time! BTW, I’ve been dealing with a lot of bots on here. Can you send me the code you’re receiving right now?”
idk. After they dropped invite codes, they started requiring phone numbers for sign up.
Because those aren’t incredibly easy to spoof or anything?
You can spoof caller ID but you can’t spoof a number to receive texts to it. Can you imagine?
Oh actually it’s worse than that. There are online companies that offer online SMS services that can receive messages from real phone numbers by essentially telling your carrier you want text messages forwarded to them. Obviously they usually make you prove that you own the number before requesting forwarding, but there’s ways around that. I’ve known several people who’ve had their online accounts broken in to because someone hijacked their phone number’s SMS in order to perform password resets or bypass 2FA.
Losers are also scamming Craigslist posters. “Oh good I’ll be available at that time! BTW, I’ve been dealing with a lot of bots on here. Can you send me the code you’re receiving right now?”
(then you get a code from WhatsApp or something)
Exactly, they aren’t.
I registered with a VoIP number that a free app gave me. I doubt they’re blocking all the freely available “temp sms” numbers out there.