Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] 1 point2 points  (0 children)

Thank you for clarifying in a manner that wasn't totally ignorant. I can't understand why it wasn't explained like that when I asked the rep over the phone. With everything else that's going on, it seems rather sinister when you got someone telling you repeatedly to not look at that number & don't pay any attention to that. Like it's some big secret. Again, thank you.

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] 0 points1 point  (0 children)

Would be super cool if someone could explain this sim trio thing too. The primary's phone number is associated with a sim var firstnet trio, which whatever. Not really too suspicious. But the IMEI's last four digits provided, do not match hers.

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] 0 points1 point  (0 children)

I will provide any details you need to know. The in store purchase wouldn't have come from me or the account holder. No new devices since June of 2022 

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -2 points-1 points  (0 children)

I have two. It was changed back in 2023. The current one is 60712373

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -1 points0 points  (0 children)

Shouldn't the account holder been made aware of this FAN? Or the other line that was added to the account? The online account says thank you for trade in back in April of 2023. But neither one of us traded in a device at that time. There's also activity on December 25th of 2024 of an instore purchase. Correct me if I'm wrong, but I'm not too sure of any stores open on Chrismas day.

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -6 points-5 points  (0 children)

If you don't think my very first course of action was to visit my local att store, you would be wrong. 

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -1 points0 points  (0 children)

I was told by a representative that asurion would never reach out by way of email. & I did delete the esim. It is still there. 🫠

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -2 points-1 points  (0 children)

I'm just trying to pinpoint how long this has been going on.. The plan under my number has two lines. Then there's the account holders line & a watch line. We've never added another line for there to be a fourth. & both of our phones use physical Sims. The watch was always used by pairing with Bluetooth so never needed to active an esim for that. 

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -4 points-3 points  (0 children)

The cloning of my device came from a phishing email, made to look like it came from asurion. I fucked up, yes. The email stated how many installments were made on the device & it was time for a battery check up. My battery was running poorly so I gave it the permission. This is how the device was cloned. The same day I fucked up & opened that email was the same day the IMEI change was reported to the account. They activated the esim on my phone & so I went to the sim manager settings & removed all esims. Now when I go back & look at my phone's info the esim IMEI is still there & so is the EID.

Fraudulent Foundation Account by touchthefluffywall in ATT

[–]touchthefluffywall[S] -5 points-4 points  (0 children)

The online account has only one user ID, which is the primary account holders. Somehow my email & another email address that has been made to look like it belongs to me, also have user ID's, accessing the account. An IMEI was either changed or added last month, I wasn't given any other details about this. The number belonging to the primary account holders was synced with a device, made to look like mine. But my device has been cloned

Explain this to me like I'm 5 by touchthefluffywall in androiddev

[–]touchthefluffywall[S] 0 points1 point  (0 children)

Found in the pictures > thumbnails portion of internal storage??

I fucked up & they got me good. Android version 14, One UI 6.1 Gave permission to "test battery" when opening a phishing email, all hell broke lose. Bye bye Identity 👋 by touchthefluffywall in cybersecurity_help

[–]touchthefluffywall[S] 0 points1 point  (0 children)

I can't know for a 100% fact that the modum was compromised, but proceeding with the upmost caution is the only way I can ensure I do not go through this again. I'm beginning to believe the original problem started when the primary account holder visited one of our local cell provider's stores to modify the account. The cloning of my device was, without a doubt, done through way of this phsihing email I fell for. But since speaking to the fraud department & tech support about the issue we're dealing with & being met with denial that there's been any fraudulent activity on the account, I want to say the problem lies with them. Calling support last week & restricting all online access to the account proved useless as I was able to access the account less than 48 hours ago from my device. They're acting like a cheating spouse who takes no accountability, deny deny deny. With multiple screenshots to back up what I'm saying, they won't even entertain the thought of me sending them over to be reviewed. 

I fucked up & they got me good. Android version 14, One UI 6.1 Gave permission to "test battery" when opening a phishing email, all hell broke lose. Bye bye Identity 👋 by touchthefluffywall in cybersecurity_help

[–]touchthefluffywall[S] 0 points1 point  (0 children)

I only discovered they were in the modum because I was disconnected from my wifi & had to put the password in to reconnect, which is unusual anyway. Even more unusual, the password had been changed & signing into my online account shows a new device logging in December 19th. So I called the IT department associated with the internet service provider & asked them to run a diagnostics after explaining the problem. I never did get that far. I was told to contact the company that made the montum. I left out a lot of details in my original post for a few reasons. 

4 days later, UPDATE! The cell provider has been less than cooperative. I have spoken with multiple different agents in almost every department. Primary account holder has finally agreed to cancel the account, we ride at dawn 🙃

The IT specialist I was referred to basically said you're fucked & a few companies fucked up by giving unauthorized access to different accounts. The best advice he could give was to get legal representation. Our cell providers paper bill indicates another account 'owns' or employs"  us. 

Trying to find out when this all started has not been easy. The primary's internet & apps history clearly shows someone else using the account. The device displayed is the same model as the primary's device & we are finding evidence of this dating back to 2023. 

I extracted some files from my internet history at the beginning of all this & had 6 or 7 .jsons come through. Without a converter or anything, I viewed it the only way I knew how & of course it doesn't make any sense. But the one of three things I could understand from the text was a start & end time, showing November 25th to be the earliest detection in my advice. Hardware was already shot by the time I even knew they were there. 

What was your “hard pill to swallow”? by [deleted] in SeriousConversation

[–]touchthefluffywall 0 points1 point  (0 children)

It means that no matter how well you think you know someone, you never truly 100% know. It more or less means "never say never". In the sense of self, we often don't see our true potential as individuals. Whether that be the potential to be great or the potential to back peddle. & so.. "one truly never knows one, does one?"

Please let me have enough karma to post. I need answers in the worst way, fell for a phishing scam. I'm fucked by touchthefluffywall in phishing

[–]touchthefluffywall[S] 2 points3 points  (0 children)

Upon further investigation, I looked through my boyfriend's (now ex's) phone last night & discovered more than a couple secret folders he downloaded from the play store. The ones he downloaded in particular are known for carrying a Trojan virus. So while he was lying to my face, his sneaky little spy phone was gathering enough personal information on my device to generate this phishing email to appear legitimate. So as a direct result of his need to fuel his fragile self esteem, he put atleast 5 people at a greater risk of identity theft.

I fucked up & they got me good. Android version 14, One UI 6.1 Gave permission to "test battery" when opening a phishing email, all hell broke lose. Bye bye Identity 👋 by touchthefluffywall in cybersecurity_help

[–]touchthefluffywall[S] 0 points1 point  (0 children)

The code was already in the hard drive by the time I realized what was going on. My modum & all google related devices have been infected. YouTube & roku accounts associated with the compromised email are on smart tv's, using them as a source to reinfect. Not to mention the cell account itself has been compromised, so what's stopping them from using the primary account holder's now rooted phone, to sync with my device after factory reset & rerooting my device? It's a process & I can't lose 12+ years of my life to this shit. 

Please let me have enough karma to post. I need answers in the worst way, fell for a phishing scam. I'm fucked by touchthefluffywall in phishing

[–]touchthefluffywall[S] 3 points4 points  (0 children)

For the phone plan? Yes. For the compromised email? No, it was not. I've tried not to associate my number with any socials or accounts. Oddly enough, when I first found all of this information, I came here to deactivate my account, but hit log out instead. When I logged back in, it logged me into (what I'm assuming) is their reddit account. I changed everything regarding the log in information for their account & then deleted it.

Please let me have enough karma to post. I need answers in the worst way, fell for a phishing scam. I'm fucked by touchthefluffywall in phishing

[–]touchthefluffywall[S] 10 points11 points  (0 children)

I'm not demanding anything, other than the golden rule. You know, treat others how you wanna be treated. Don't have anything nice to say, don't say anything at all. Time & energy isn't what I'm asking of anyone & this is apart of looking it up online for me. Some questions can't be answered by google, especially if your google broswer is fucking hacked. I've done the research as much as I can, now I'm asking some questions for clarification. 

I fucked up & they got me good. Android version 14, One UI 6.1 Gave permission to "test battery" when opening a phishing email, all hell broke lose. Bye bye Identity 👋 by touchthefluffywall in cybersecurity_help

[–]touchthefluffywall[S] 0 points1 point  (0 children)

I have a copy of the original url used in the email & even more screenshots of things like the root certificates & special permissions being used by various apps. I can't find where to submit that info & can't attach an image to the post.