Guide
Anti-phishing codes: what they prove, and what they cannot
A missing code means do not act on the message. A correct one proves less than people think.
Custodial accounts.
Permissions, not promises.
Series II
None of these attacks break anything. They arrive as a message, a call or a customer service request somewhere else entirely, and they work by supplying a reason to act quickly.
Entries
Guide
A missing code means do not act on the message. A correct one proves less than people think.
Guide
The code, the sender domain, the link, and then checking the claim inside the account instead.
Guide
Four openings, what each is building towards, and a sentence that ends the call.
Guide
A customer service request, granted by someone who believed a story.