Hi everyone,

Has any of you received a lot of suspicious OTP attempts these last few days ?

Some of these I don’t even have an account with them. I heard of my colleagues with +41 had it a few years ago…. Attached you will see the messages. Do you think I should contact my operator? What should I do ?

Thanks a lot for your precious help. Im not really getting anxious about this because I usualld use my email to create accounts…

Have a great end of the week !

https://i.redd.it/zmy1h4ix448g1.jpeg

Posted by Competitive-Let-5535

4 Comments

  1. Not sure if I’m reading this right but I think this is SMS and you’re talking about your mobile operator? I doubt they will give a shit.

    I think your best bet is to check haveibeenpwned.com. If there are leaks then update all your passwords.

    Other than that I think the best strategy is to remove SMS 2FA where you can. It’s generally considered insecure since your mobile operator is now in the critical path. These companies are not optimized for competence and don’t give a shit about you. There have been a lot of systematic issues with it (e.g. look up SIM swapping).

  2. maybe your email/one of your accounts has been compromised? I’d try to change password just in case

  3. Carbonaraficionada on

    Just block and report. The operators can’t do anything. These messages originated from SIM farms, fed with lists of literally millions of legitimate verified live phone numbers, which are owned and operated (usually) within close proximity to major cities worldwide by international crime cartels (usually based out of Cambodia). Don’t reply, don’t click anything in them, don’t forward them or delete them, just go to settings, click Report and go through the spam process to block the source number and register the spam with your provider. If you’re concerned, try being more careful about the information you post online in future, such as who you give your personal details to, what you include in your CV etc, and think about doing a dark web or data breach search for your email addresses, to change any passwords which might have been leaked. Always use 2fa (not the SMS-based model) or passwordless login whenever possible, and continue reporting any calls or messages which you feel are suspicious so your operator can do their job on their side. Operators try and some are quite good, Swisscom is relatively proactive about it, but depending who you’re with these messages have a tendency to multiply like flies.