Local 12: How scammers try to beat two-factor authentication

With two-factor authentication, a second form of identification is required to access an account. Often, this is in the form of a one-time security code sent via an email or text message.

Scammers who have account log-in information will attempt to log in, triggering a two-factor authentication notification. They’ll also contact the account holder, posing as the institution associated with the account, in an attempt to get the account holder to reveal the authentication code.

So, it’s important for users to be diligent about their online security and not assume that two-factor authentication will protect them from all scams, said Jacques Bou Abdo, an assistant professor in UC’s School of Information Technology.

“The illusion of security you get from enabling the two-factor authentication is an illusion, and the user has to be really due diligent whether he has the factor authentication or not when he deals with the system,” Bou Abdo said.

See more from Local 12.