U

Saturday, November 2nd, 2024 9:13 PM

Agents not verifying callers with 2FA

I have had my password and account compromised over 5 times this year.  In every case it is because someone has called into comcast support to impersonate me and the agents are not using the 2FA setup on my account to verify that the caller is legitimate.

Additionally, my account was supposed to be flag so only 2nd line agents could make any changes.

So, what is going on with agent training that they are not going through the 2FA to verify the caller?

Official Employee

 • 

1K Messages

20 days ago

 

user_uurpqt We appreciate you bringing this to our attention as we will use this for an opportunity to improve. Did you recently have this issue or did this happen today? 

 

3 Messages

20 days ago

It happened today (Nov 2nd) from someone in India.

Multiple times on the the 19th of Oct from someone in Jarkarta.

The 16th of Sept.

The 12th and the 18th of August.

Prior someone was calling in from the Boston area and cancelling services.

In only one instance (when talking with a 2nd level tech) did any of the agents I talked with try to verify by sending a text to the phone # I have on file. 

Instead they sent the text to the phone number the impersonator gave them, if they bothered at all.

What is more infuriating is that once the first agent didn't do what they were supposed to, all of the information that your agents use to verify a caller is in the account.

So, if someone compromises the account they have access to all of the items the agents use for verification (last digits of social, credit card, etc.).

A very poor security system especially in light of the fact that almost everyone in US has had their Social Security # compromised due to a massive data breach a couple of months ago.

 

Official Employee

 • 

2.5K Messages

@user_uurpqt The best course of action, in this case, would actually be to report this to our Customer Security Assurance. You can contact them calling CSA directly at Toll-Free Number: 1-888-565-4329.

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick

3 Messages

That did nothing.  They promised my account could only be changed by second level contacts, but that turned out to be untrue.

Official Employee

 • 

2.4K Messages

Thanks for reaching back out user_uurpqt! Our CSA department would be the right department to reach out to in order to ensure that your account security is secure and if you believe that there has been any fraud on your account. We take account security very seriously, and they would be the experts to assist!

 

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick
forum icon

New to the Community?

Start Here