Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I just clicked on an api.equifax.com link in a text message

news.ycombinator.com

Post reply on HN
Print view View original

1–10 of 11 posts

I just clicked on an api.equifax.com link in a text message

#1

Post by barnabees »

I was filling out a rental application on on-site.com and a modal popped up telling me I had been texted a link and had 5 minutes to resend the link. I got a text from 32858 and it was of the form https://api.equifax.com/business/secure-mfa/v2/authentications/verification-tokens//verify. I clicked on it and it took me to a page that just had the text, "Authentication completed. Return to your application," or something like that. I don't remember what the domain was.

I couldn't find anything online about this, so I'm wondering, is this legit? Or is this somehow an elaborate ploy to steal my identity? What's also weird is that the website didn't change after I clicked on the link, but at some point I saw a back button on the page which closed the modal, and now I'm wondering if that button was there the whole time. Also, if I tap on the link again, I get redirected to secureauth.io/expired, but I can find no information about that domain online. My co-applicant never had the modal pop up and never got a text.

Re: I just clicked on an api.equifax.com link in a text message

#3

Post by ftyhbhyjnjk »

Delete your account immediately. Also, drop a message to support with this details before you delete it. Remove any/all saved credit/bank accounts details on site, if any.

The link is legitimate, but can't say the source from which it was generated. These kind of links can be generated by 3rd parties too.

Re: I just clicked on an api.equifax.com link in a text message

#4

Post by anomaloustho »

On-Site.com is a legitimate company (used to work there). They use a lot of integrations and third party services for credit/background checks. AFAIK, they were even using a vendor that would try to get court documents if records couldn’t be found for an individual.

It was subsequently acquired by Realpage. (also a legitimate company) Surprised to hear anything is still running at the On-Site domain name, but checking the WHOIS shows that the domain is pointing at RealPage servers, so it seemingly hasn’t been squatted on.

If it was legitimately the On-Site.com domain I think you’re fine. More likely just a kludgy bug.

If you have a link to the form, I can pass it along to the On-Site folks to verify.

Re: I just clicked on an api.equifax.com link in a text message

#6

Post by willcipriano »

> elaborate ploy to steal my identity

Unless you think the idea is that are going to clone you, pod people style. Nobody can steal your identity, what they seek to do is defraud a bank or credit institution, you aren't really involved besides them incidentally using your name to do so. I wouldn't worry about it unless you get a bill or have something wrong on your credit report.

Re: I just clicked on an api.equifax.com link in a text message

#7

Post by __ryan__ »

willcipriano wrote: post #6

> elaborate ploy to steal my identity Unless you think the idea is that are going to clone you, pod people style. Nobody can steal your identity, what they seek to do is defraud a bank or credit institution, you aren't really involved besides them incidentally using your name to do so. I wouldn't worry about it unless you get a bill or have something wrong on your credit report.

https://en.m.wikipedia.org/wiki/Identity_theft

Re: I just clicked on an api.equifax.com link in a text message

#8

Post by willcipriano »

__ryan__ wrote: post #7
willcipriano wrote: post #6

> elaborate ploy to steal my identity Unless you think the idea is that are going to clone you, pod people style. Nobody can steal your identity, what they seek to do is defraud a bank or credit institution, you aren't really involved besides them incidentally using your name to do so. I wouldn't worry about it unless you get a bill or have something wrong on your credit report.

https://en.m.wikipedia.org/wiki/Identity_theft

https://m.youtube.com/watch?v=CS9ptA3Ya9E

Re: I just clicked on an api.equifax.com link in a text message

#10

Post by barnabees »

MerelyMortal wrote: post #5

Sounds like they were doing a background/credit check which is pretty standard for apartment(?) rental agrements. The only question I have is: did they ask you for permission or notify that they were going to do so?

There was the modal so they did notify me
Post reply on HN