PIN codes & Password phishing

 

Everyone believes they use a "safe" PIN code for there numerous bank cards and credit cards.  Well the reality of that is, hardly anyone uses a complete random 4 digit code.  Most of the masses will choose combinations that consist of Birthdays, Phone numbers, SIN numbers, Kids birthdays, your address, or numerous other means of creating a code that we will remember.  We do this because it is a lot easier for us to recollect a number if it associated with something we know or use daily.

 I'm bringing this up, as there have been a few "frauds" out there, where cards were stolen and the PIN numbers were guessed rather easily with other information that was taken at the same time, or even "creeped" off of social media accounts. This is a common form of a "Social Engineering" type of attack/hack, or what ever you would like to call it.

I'm sure we have all seen these numerous photos, meme's and quizzes all over different social media apps:

 

  

Yes, these are all social engineering attempts. There actually may be a minute amount of actual quizzes out there, but it has become impossible to tell the difference.  The best way to avoid giving out ANY information about yourself, do NOT participate with those types of posts. 

 Now, some more information on those PIN codes. The unfortunate thing with 4 digit PIN's is that it really is limited to certain number of combinations.  For the numbers 0-9, there are 10 000 possible 4 number combinations. So in reality, many of us are using the same PIN codes as many other people out there! With this low number of combinations and weak security, it makes it rather easy for almost anyone to find you on social media, read some of your answers to posts, read your info, etc. and start matching up numbers!  Below is also the most common 4 digit combinations used, and are usually the first ones a scammer or hacker will try.

 

Many banks and financial institutions are starting to not reimburse fraudulent purchases on cards that were used with a PIN that is considered extremely common, or your birthday.  Here is an article from Global News explaining it in a little more detail. Banks on Reimbursement. I guess we should start reading those terms and conditions now!

By now, you must be asking yourself, that how am I supposed to avoid all those common PIN's?  Well, we can start by changing to a 6 digit code if it is available to you. Also change the code every couple of months or so, and NEVER write it down and carry it with you in your wallet! Keep anything associated with any passwords or PIN codes out of your purse or wallet. 

It doesn't take much these days for scammers to get a hold of your information, then target you. It IS happening everyday, don't become part of the statistics! It only takes a few extra minutes or steps to keep your stuff secure. Go with it!

Stay safe!

Vince.