Wise.com sends email asking to give personal info to third-party
wise.com
wise.com
Cyberscout is also a legit company and the email is send by the official Wise mail (in my case). Besides I got the exact same pop-up within the Wise app. Just be careful, scammers will be using this method soon probably. I applied for the free dark web monitoring account, but didn't upload any documents, just basic info. It's performing a scan right now.
1. I don't understand what "dark web monitoring" means. It could mean monitoring for my data appearing on dark web, or monitoring my activity on dark web or many other things... It just sounds very dangerous and shady. 2. "Enrol" is spelled "enroll". Usually scammers write in poor English.
The linked help article is about the breach that was found and how they, due to this, are offering this service now. The email also contains the deadline. Altogether it just sounds like a phishing attack more than a legit email from Wise.com.
The email contained this link https://bfs.cyberscout.com/activate (an unknown third-party) and an activation code for my account to use on that service.
Wise instructed me to use the activation code and submit my personal data to "enrol in free dark web monitoring". This sounds like a terrible practice. Normally financial and other institutions tell you to never submit your personal data to third-party. Also email "from" field can be faked (more-less). A better approach, in my opinion, would have been to ask customer to login into their Wise.com account and find the activation code there. Am I overthinking this?
To me this seems like a security issue, because an unsuspecting inexperienced customer will consider it perfectly normal to have to add their data to third-party websites when (a hacker masquerading as) their financial institution asks them to.
I then called Wise support, and they confirmed it's a legitimate email. The support guy seemed a bit bamboozled by my question, but he looked it up and said it's a legitimate email from them.