Inexplicably received the verification code of communication travel card (suspected risk of identity information disclosure)

Recently, I received a confusing email titled "Verification Code of Communication Travel Card". I have never applied for such a card, so I have questions about this email. Then, I began to think about the possible reasons and solutions. This paper will introduce in detail the problems I encountered and the countermeasures I took.

1. Found the problem.

The moment I opened the mailbox, I was a little confused when I saw the title of this email. I have never applied for communication with travel itinerary, and I have never received the relevant verification code. The sender of this email is not anyone or organization I am familiar with, which makes me more worried about whether my personal information has been leaked.

2. Analyze e-mail content

I opened this email with only a short line: "Please use the following verification code for verification: XXXXXX". This verification code seems to be used to verify whether I am the real applicant of the card. But I haven't handled the communication with travel itinerary, so this verification code has nothing to do with me.

Find a solution

Faced with this problem, I decided to take a series of measures to protect the security of personal information. First of all, I decided not to click on any links in the email to avoid falling into the trap of phishing websites. Secondly, I will contact my bank and the card issuer of the communication itinerary card, tell them that I didn't apply for a card, and ask them to verify whether someone is using my identity. Finally, I will change my password and enable the dual authentication function to increase the security of my account.

4. Contact with banks and issuers

I got in touch with my bank and the card issuer of the communication itinerary card at the first time. I explained to them in detail the situation that I received the verification code, and asked them to verify whether anyone used my identity to apply. They said they would investigate as soon as possible and contact me when the results came out.

5. Change the password and enable two-factor authentication.

In order to further protect my personal information, I decided to change my password immediately and enable the dual authentication function. I chose a strong password, including letters, numbers and special characters, and made sure it was different from other websites' passwords. After the dual authentication function is enabled, every time I log in to my account, the system will send a short message verification code to my mobile phone to ensure that only I can log in.