investiage twilio nigeria sms fraud - Githubissues

GoodDollar / GoodServer

Backend to support the GoodDAPP

MIT License

13 stars 13 forks source link

investiage twilio nigeria sms fraud #322

Closed sirpy closed 3 years ago

sirpy commented 3 years ago

see email sent from twilio

currently we dont do any SMS verification unless users are using mobile login. so why would they try to fraud?

[x] verify mobile verification is off (ie no mobile required for signup)
[x] investigate server logs, check mobile verification requests
- there should be basically 0
- if there are requests, analyze for patterns (ips, frequency, country)