Introduction 

Our CEO and Founder, Vince Fung, wanted to share a recent experience that highlights the importance of cybersecurity in our daily lives: a friend in Toronto recently encountered a new Uber scam that could potentially affect many unsuspecting users. A chapter inspired by this scam will appear in Vince’s next book, 101 Ways to Get Hacked. 

A Preview of Vince’s Next Book: 101 Ways to get Hacked

Story #33 – The Ride That Never Came

Mindy’s phone buzzed again, its screen lighting up the dim living room with yet another unsettling notification:

“Uber Eats – $85.50 charged.”

She felt her stomach twist, nausea rising in her throat. Joey sat next to her on the couch, his hand resting softly on her back. Neither of them spoke, but she could sense the tension in his quiet breathing. Outside, the night had long since lost the glow of celebration. Their 15th anniversary—meant to be a quiet, intimate milestone—had turned into an exhausting nightmare of calls, holds, and automated recordings telling them to please wait for the next available representative.

Mindy stared numbly at her screen as another notification chimed: “Uber – $48.20 charged.”

Her heart sank lower with every new alert. She had no control, no way to stop the bleeding. Her card details had become someone else’s free ride—literally. All she could do now was sit helplessly, watching charges rack up, feeling the sting of embarrassment burn hotter each time.

*  *  *

Just hours earlier, the evening had seemed perfect. After weeks of relentless work meetings, school events, and barely catching their breath between kids’ soccer practices and bedtime stories, Mindy and Joey had finally managed to carve out a rare, quiet evening together. It was their anniversary—15 years of marriage—and their favorite local restaurant offered the perfect sanctuary: warm lighting, familiar faces, and an atmosphere filled with memories.

Two glasses of Chardonnay had melted away the tension of everyday life, and as they stepped outside into the cool night air, Mindy felt genuinely happy for the first time in weeks. “We should do this more often,” Joey had said, giving her hand a gentle squeeze. She agreed wholeheartedly, enjoying the easy comfort of their conversation.

Pulling out her phone to request an Uber, Mindy checked their pickup point. The car was minutes away. As she tucked her phone into her bag, it buzzed unexpectedly with an incoming call. She glanced at the screen—unknown number—but answered out of habit.

“Hello?”

A friendly yet insistent voice responded quickly. “Hi, this is your Uber driver. I’m calling because your account has been flagged as suspicious. I just need to verify your phone number to proceed.”

She hesitated, confused. “Suspicious? Why?”

“Just protocol,” the voice reassured her smoothly. “If we don’t verify, I’ll have to cancel the trip.”

Joey noticed her hesitation. “What’s up?” he asked softly.

Mindy put a hand over the receiver. “Driver says our account’s flagged as suspicious.”

Joey raised an eyebrow skeptically. “That sounds off, Mindy.”

The Chardonnay dulled Mindy’s usual cautious instincts. Impatient, she whispered back, “I’m sure it’s fine. Maybe Uber changed their policy.”

Joey shook his head slightly. “I don’t know—”

She ignored his cautionary tone and gave her phone number to the driver. Seconds later, a verification code arrived via text. Mindy dutifully recited it back. “It’s 1742.”

“Perfect,” the voice replied cheerfully. “See you soon.”

But the car never arrived. Instead, Mindy found herself suddenly logged out of the Uber app. Confused, she tried repeatedly to log back in, failing each time. Moments later, her bank app buzzed—a $75 Uber charge appeared, followed by a $45 Uber Eats charge.

“Oh no,” Mindy whispered, her pulse quickening.

Joey looked over her shoulder, worry crossing his face. “What’s wrong?”

“I think—” she swallowed hard, the realization sinking in. “I think I’ve been scammed.”

Joey took the phone from her gently, his jaw tightening as more charges appeared, one after another. Mindy’s throat went dry as she watched helplessly. Calls to Uber’s customer support led nowhere, only increasing her panic. Each unanswered call, each new charge, magnified the humiliation and frustration building inside her.

Eventually, defeated, Mindy dialed her credit card provider to cancel the card. Her voice shook as she listed the unauthorized transactions, feeling the full weight of her mistake with every embarrassing detail. Joey rubbed her back gently, saying nothing as the call dragged on.

But even as the card was cancelled, Mindy knew the damage was far from over. Each automated payment—utilities, subscriptions, insurance—would need updating. Hours, maybe days, of tedious work awaited her, reminders of her momentary lapse in judgment.

The anniversary evening they’d waited so long to enjoy had unraveled into a night of helplessness, frustration, and regret. And sitting there, amid the relentless notifications that kept buzzing her phone, Mindy felt a deep, overwhelming sadness—not just for the hassle she’d caused, but because she knew something else had been taken too: her sense of security, her confidence in her own judgment.

She glanced at Joey, who offered a weary, sympathetic smile. “We’ll get through this,” he said softly, though neither of them quite knew what “getting through it” might mean or how long it would take.

As the notifications continued to arrive—each one another small betrayal—Mindy closed her eyes, wishing desperately she could rewind the evening to the moment before she answered the phone, before she’d chosen convenience over caution.

But wishes, she knew bitterly, rarely changed reality.

*  *  *

Key Recap

What Happened?

Mindy fell victim to a sophisticated social engineering scam. The fraudster pretended to be an Uber representative, tricking her into providing her personal verification code and thus gaining access to her account.

Why Did Mindy Fall Victim?

Exhaustion, alcohol, and the urgency created by the scammer caused Mindy to let down her guard and ignore important red flags. She mistakenly trusted the caller’s authority, leading her to hand over sensitive information.

How to Avoid This Attack:

  • Never Share Verification Codes: Legitimate companies (Uber, banks, email providers) never ask you to read back verification codes sent via text or email.
  • Verify Independently: If you receive suspicious calls claiming to be from a company, hang up and contact customer support directly through official channels.
  • Trust Your Instincts: If something feels off, pause and reconsider, even if it seems inconvenient.
  • Enable Enhanced Security: Consider adding two-factor authentication, and regularly monitor account activity for unauthorized access.