How do the scammers get valid authorization codes? You can't just enter a random authorization code and force the transaction through - the code has to come from the bank for the system to recognize it. If the customer hands you the phone and has you talk to a fake bank employee who then gives you an authorization code, where did that code come from?
I don't think whoever wrote the article got the whole story |