Follow
bunq, rumour
Word on the grapevine is that Bunq's app uploads contacts to their server for a "find friends using Bunq too" feature, and that the corresponding checking API is being used by phishers to laser-target Bunq users for phishing campaigns
bunq, rumour
@marlies There are very recent reports of people getting inundated right after opening an account, so it's possible that they're just working off an append-only database of known customers, maybe?
bunq, rumour
@joepie91 extremely plausible
bunq, rumour
@joepie91 could also just be said API still returns true for ex customers because well bunq are prutsers (english is lacking this word imo)
bunq, rumour
@marlies No disagreement there, from everything I've seen so far 🙃
bunq, rumour
@joepie91 this sounds extremely plausible tho i get the feeling the phishers got their hand on an older data leak as i’ve been flooded with attempts but stopped being a customer two years ago