15

A loan company said they needed my logins to my account and got a couple closed and also logged into my id.me and got it locked. Do they need my username and password? He said that he needed another because they couldn’t verify my identity.

12
  • 12
    No loan company could ever need your account logins… check that with your bank. What does 'an has got a couple closed an also logged into my id.me an got it locked…' mean, please? Again, they do not need your username or password. Again, what does 'an said he needed another cause that couldn’t verify my identity' mean? It seems to suggest the scammer asked you to change your login details and share the new ones but is that what you meant? Sep 27 at 20:32
  • 10
    There are legit lenders, mortgage brokers etc in Aus that make these requests. The answer is still to say no, and supply actual needed details through a pdf copy of statements. Ts & Cs from EVERY BANK in the world include 'Do not disclose password/PIN (etc) to anyone'.
    – mcalex
    Sep 28 at 8:01
  • 3
    In the US, loan companies make use of credit reporting services like Equifax, Experian, and TransUnion to verify your suitability. They never need direct access to your financial accounts, although they might ask for a copy of a recent statement.
    – Barmar
    Sep 28 at 14:26
  • 2
    @Vilx- Unless they're en.wikipedia.org/wiki/Plaid_Inc. who financial institutions partner with for some reason in subversion of the very simple and wise advice you're giving. See also security.stackexchange.com/questions/186709/… Sep 28 at 17:48
  • 6
    Venmo asked me for my bank password when I signed up. Like, actual Venmo, not a scam site designed to look like it. They wanted to verify that the account was legitimate. I said no, and they took my account number instead. Took nearly a week to verify (they claimed the password would be instantaneous), but I'm still glad I did it the slow way. It's absolutely bonkers, but "legitimate" organizations are doing this now. And we should work hard to reject it with all the force of a hurricane. Sep 29 at 3:25

1 Answer 1

102

No. Anyone who asks for your username and password is very likely a scammer. Access to id.me is especially valuable as it would allow the scammer to essentially steal your whole online identity. Make sure you safeguard it and not share it with anyone.

Whatever passwords you already gave them - make sure to change them ASAP while they still haven't taken over those accounts. It may be too late. In any case, contact the fraud departments of these services to inform them that you've been hacked and to have them lock your accounts.

4
  • 7
    I feel "very likely a scammer" isn't strong enough. There is literally no situation where anyone would legitimately need to ask for the login credentials for any service.
    – Criggie
    Sep 29 at 11:16
  • 7
    Today, in "is this a scam"... the answer is the same as always. Yes. Sep 29 at 15:16
  • 4
    @Criggie I see you haven't seen the alleged not-scam that is Plaid. Sep 29 at 20:52
  • Plaid falls in the same category as giving my stock broker direct access to debit from and credit to my bank account. It's not good, but it's not completely illegitimate, and there are mechanisms to enforce accountability and prevent/fix abuse. There really should be better answers, and there are better answers ... but they would gave higher costs than running it through Plaid so folks have resisted implementing them, feeling the customers wouldn't pay enough more to cover those costs.
    – keshlam
    Oct 1 at 4:37

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .