I just fell for a scam on the phone with a person impersonating my phone company.
Long story short, I fell for some stupid discount thing and gave them access to my mobile carrier account. The thing you log in to see your plan, edit things, etc. They changed the email and password and I was locked out.
Of what they asked, here's what I gave:
- Login credentials and 2FA for the account. (I'm an idiot)
- Postal code/address (still an idiot)
Then they asked for my ID/driver's license, at which point I realized it was a scam. I told them I wasn't going to give that and then they hung up on me.
I got it all resolved at the store and with anti-fraud over the phone, and had the account deleted/reset back to my email. I have to reopen the account, which I will do soon. But what I'm concerned about is if they have or had access to my SIM or anything of the sort. (Like would they have been able to receive 2FAs going to my phone from just having access to that account?) The store employees told me I should be fine, but I am still curious.
One employee said that if they had my ID on top of everything else, they might have tried opening up a new account under my name, etc. But I still don't really understand the point of the scam. They hung up on me. So what can or could they have done?
Thanks again.