Depends on the service. If an attacker takes over your account and changes your name to theirs, they get the degree/certificate/award, or they pickup your purchase, etc. Or the reverse, they change their name on their account to yours and collect your payments, etc.
1
Still, I would like some kind of way online to change name / surname. It is annoying when you officially change it, but cannot do that online. It could be possible to attach a document and human review this, compared to calling support to another country can be costy.
1
1
Also - it is always possible to confirm with email or phone, by sending a code to enter. There is always a way, you just need some creativity :)
1
Oh I agree, it just gets tricky for sites obligated to validate real names (eg KYC in banking). For sites that don’t have those obligations, then it’s a matter of preventing fraud. Absent those concerns, sites should make it easy, lots of reasons why names change.
1
1
I don't feel a phone call is safer from fraud than email or web login, but I'm not very educated on that issue either 😕
1
I thought about the same! Social engineering is most of the time the point which is easiest to exploit. You can even have more options how to safely check while on site than on phone.
1
1
True, a phone call doesn’t in itself stop fraud, but the benefit of a phone call is that it can be recorded, so you’ll have a fraudsters voice, plus you can validate other factors such as the phone number, voice, etc, and it prevents abuse at scale - can’t be automated.
1
1
Depends on the threat model, but some companies use “voice prints” for phone authentication, some require you call from a known number, and similar. And some will require you show up in person if there’s a physical location (eg local store, bank, etc).
Jun 7, 2019 · 9:53 AM UTC
1


