A Twitter scam has been targeting bank customers by using the quote-tweet feature, according to reports.
The scam involves a customer tweeting their bank and then receiving a reply from the scammer’s Twitter account, which invites them to call a helpline number. What makes the scam convincing is that it is highly focused, targeting customers who are already communicating with their banks.
In some cases, genuine companies may reply from a separate Twitter account, which can make it harder for customers to identify a scam.
Scammers are using non-verified Twitter accounts that closely resemble the bank’s support staff to lure customers in. This makes it difficult for customers to differentiate between real and fake accounts. Instead of using phishing links, the scammers use templated text urging users to call a helpline number.
It is unclear what happens to legitimate Twitter accounts belonging to banks and financial institutions once legacy verification badges are stripped, as they may become more susceptible to impersonation by fraudsters.
This Twitter scam highlights the importance of being vigilant when using social media, as it is easy for fraudsters to impersonate legitimate accounts.
Customers should be wary of replies, direct messages and quote-tweets directed at them, even if they seem benign.
Companies should also consider how they use social media to communicate with customers, and ensure they are taking steps to protect customers from scammers.
Finally, Twitter is undergoing a revamp of its verification policies, which may also make it more difficult for customers to identify legitimate accounts.