Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Meta is using my 2FA to call and sell me

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 84 posts

Re: Tell HN: Meta is using my 2FA to call and sell me

#11

Post by cmatthias »

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received.

I would suggest sending a demand letter to Meta's legal department offering to settle for somewhat less than $1500 per violation. Here's an example: https://www.junkfax.org/w/images/0/0b/SampleDemandLetter.pdf

If they ignore you, be prepared to file a local case in small claims court (which you can do yourself without an attorney). The court can force them to pay you if you present evidence of the calls and the law(s) or regulations that were broken.

Disclaimer: I am not a laywer and this is not legal advice, but I have collected money from TCPA legal settlements in the past, each without needing to go to court.

Re: Tell HN: Meta is using my 2FA to call and sell me

#12

Post by ignite »

cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

I thought that companies you are doing business with are allowed to call you. He has an account, they can call.

Also not a lawyer.

Re: Tell HN: Meta is using my 2FA to call and sell me

#14

Post by minraws »

gamegoblin wrote: post #7

I have a feeling that Meta has some kind of internal system for slurping up everyone's contact info, and that some kind of bugs/criteria occasionally cross some streams. Meta recruiting somehow got a hold of my name@amazon.com employer email -- which I have never posted publicly -- and started sending me recruitment emails to my work email. This struck me as incredibly unprofessional, though I understand it's almost…

generally most people check company then do,

- firstname@company.email

- firstnamelastname@company.email

- firstname-lastname@company.email

- firstname.lastname@company.email

from the recruitment side, cause I have asked this question to my company's HR... :P

hackers do it as well hence why I am always stressed about phishing, though recruitment mail on professional ids is still rather rare, recruiters also prefer to use personal email if available or so I have heard from a subset of them.

Try checking if it maybe some kind of phishing scam, I have seen those a lot, recruitment phishing is like the most common case of successful phishing.

Re: Tell HN: Meta is using my 2FA to call and sell me

#16

Post by MAGZine »

gamegoblin wrote: post #7

I have a feeling that Meta has some kind of internal system for slurping up everyone's contact info, and that some kind of bugs/criteria occasionally cross some streams. Meta recruiting somehow got a hold of my name@amazon.com employer email -- which I have never posted publicly -- and started sending me recruitment emails to my work email. This struck me as incredibly unprofessional, though I understand it's almost…

services like apollo or hunter.io

some bdr signed into an account, gave up an email address book, and that information was given to these companies who do "give me a name and a company, and i'll give you their email" services.

Re: Tell HN: Meta is using my 2FA to call and sell me

#17

Post by cmatthias »

ignite wrote: post #12
cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

I thought that companies you are doing business with are allowed to call you. He has an account, they can call. Also not a lawyer.

The TCPA requires express written consent to send marketing messages or phone calls to any personal phone number. Legal precedent dictates that online, this usually takes the form of a specific checkbox on the form where you're giving your phone number saying that you agree that the company can use the phone number for marketing purposes. I doubt Meta collects this type of express written consent for your 2FA phone number, but I guess it's possible.

There indeed used to be an exemption to the law involving an existing business relationship, but 1) this was only for residential land lines and never applied to cell phones, and 2) it was revoked on October 16, 2013. [1]

[1] https://tcpablog.com/new-tcpa-regulations-take-effect-on-oct...

Re: Tell HN: Meta is using my 2FA to call and sell me

#18

Post by nicolashahn »

It's more likely that you gave your phone number out somewhere more sketchy. The personal email thing sounds like straight fraud.

As someone who works for Meta and and sees all the privacy trainings and the hoops you have to jump through to do anything with user data anymore at this company, someone is definitely getting fired for this if it was indeed Meta's fault and intentional.

Re: Tell HN: Meta is using my 2FA to call and sell me

#19

Post by foobarian »

izzydata wrote: post #6
toomuchtodo wrote: post #2

https://reportfraud.ftc.gov/

Assuming this kind of thing is fraud how does it manage to even happen at a company as large as Facebook? Is it on accident through some reckless merging of databases or is it on purpose and they think they are just too big to care about laws? It seems like Facebook must know what the law is.

Seems like a case of scraping the bottom of the barrel in a panic
Post reply on HN