A Sneaky T-Mobile Scam and Lessons That Were Learned

A blog post details a vishing scam where callers impersonate T-Mobile support, leverage existing customer data to build credibility, trigger a legitimate account recovery OTP and coax the victim to share it, then attempt to collect full credit card details under the guise of discounts and free devices; it explains that such data likely comes from prior leaks or third parties and recommends defenses such as not sharing OTPs from inbound contacts, verifying via official numbers, using phishing-resistant MFA, and promptly updating account passwords and PINs.