Chase Fraud Alert from SMS 28107

I got a fraud alert on my phone this morning from SMS short code 28107. Is this legitimate? The short story, from what I can tell, is yes.

The alert I got was:
FREE MSG: Chase Fraud-Did you use card ending xxxx for $xx.xx at INGLES MARKETS on 07/13? If YES reply 1, NO reply 2
In cybersecurity, getting these kinds of alerts is a pretty common kind of scam. Attackers will send out lots of these kinds of SMS and email and try to get you to verify your account, essentially tricking you into sharing sensitive information.

If you ever get one of these kinds of alerts, you should try to verify it independently. So I logged into my credit card account and saw that there were several purchases that morning. Looking up the name of the store, it appears to be a chain of grocery stores in North Carolina. Ok so definitely fraud.

So I responded with a "1" to the SMS message, and it said that Chase would call when a specialist is available, or call the number on the card.

There's a minor risk here with the first option, which is that getting a phone call from an unknown number doesn't mean that it's legitimate. In computer security, this is the mutual authentication problem, which is that while your credit card company can verify if it's you or not, you don't have any easy ways of verifying if it really is your credit card company calling you.

The safe thing to do here is the second option, which is to call the phone number on the back of the credit card.

Now, as someone who does research in cybersecurity, even all of this is not guaranteed. It's possible that a hacker could have intercepted my web browser request to Chase's web site, knew the last 4 digits of my credit card, knew my mobile phone number for SMS (SMS can be spoofed), and intercepted Chase's 1-800 number, but the combination of all of these is pretty low. Plus, if a hacker were skilled enough to do all of the above, they would chase after bigger fish than me.

So a new credit card is on the way, and the damage is limited, both for me and for Chase. I should also say good on Chase for having an excellent fraud detection department too. This is actually the first time Chase has warned me about possible fraud on my credit card, despite all of my travels around the world, and they got it right.

Comments

Anonymous said…
Can I use some sms tracking software get the sender information and possibly protect myself against this kind of fraud. Take a look here to understand what I have in mind
Fonss said…
I got an SMS and several phone calls about a a chase card that I don't own on the SMS and about a person I don't know on the phone messages. So very interesting. Maybe these people wanted to get me to say no, I don't know these charges, here is my account information to prove it. But there is a lingering doubt about maybe someone using my phone number to open a credit card account. I often get mail for other people's name with my actual address on there. so I am weary of identity fraud from different directions.
Stewie said…
This number is legit. A little while later, an agent called me to discuss the matter. She provided me with the information (not asked for me to give sensitive info like a scammer would) and only asked me if I was aware of the last few charges I made, which she read to me.
Anonymous said…
Definitely a SCAM!
Anonymous said…
I have received identical texts from Chase when using my Chase cards for unusual purchases.
Anonymous said…
The text from Chase is real. I did not think so, so I called Chase. I used the telephone number on the back of my card. YES, the text was from Chase. In fact, they told me that there were three occasions where SKYPE.com tried to get money but Chase did not honor it because the address they provided did not match with mine. So it is best to respond to the Chase warning.
Unknown said…
Are you Chase Cardholder and searching for the CHASE CARD ACTIVATION?
ell, this post will guide you on How to activate Chase Debit Card |
Credit Card? Chase credit card is a popular option
because they are easy to use and manage


chase credit card login
Unow22 said…
03.58-AM-768x449.png 768w, https://www.laweekly.com/wp-content/uploads/2021/06/Screen-Shot-2021-06-18-at-11. It will be a little expensive, for sure Visit: https://www.urineworld.com/
Activatecard said…
Thank you for posting such a great information

Chase Card Activation

card activation
Abni Rajput said…
Hey, nice blog, I found many things that are very informative, I also found related to sms fraud detection. You can visit for information.
Abni Rajput said…
This comment has been removed by the author.
Unow22 said…
Employers have to pay a lab to provide drug test results, so they’ll generally only make the investment in a drug test if they’re planning on hiring a prospective employee. - okeyprog. And reflecting upon this data I suggest sell this one product, I will tell about it in a nutshell. However, some states have legislation that protects prospective employees in some industries who test positive. Learn about your local laws here. No, gender and sex have no bearing on the outcome or preparation for a drug test. Although men generally require a longer time to detox than women, that is due to the greater average weight amongst the male population. You’ll need at least 30ml for a standard drug test or 45ml for a collection by the Department of Transportation; federal employers have stricter guidelines.
Richard said…
Dui lawyer in Virginia,This Site use to good.

Popular posts from this blog

How to Fix a Jammed Toyota Camry Trunk

Web 2.0 and Research

NYTimes: It Takes a Cyber Village to Catch an Auto Thief