How a Simple 2FA Scam Almost Fooled Me – Lessons from Mark Wheatley, CEO of CSI Tech Corp.
My name is Mark Wheatley, and as the CEO of CSI Tech Corp, I’ve dedicated my career to helping small businesses and nonprofits protect their digital assets. But even with my background in cybersecurity, I once found myself nearly falling victim to a clever 2FA scam. Here’s my story and what it taught me about staying vigilant in today’s cyber landscape.
A few years ago, I received a call from someone claiming to be from AT&T support. They spoke clear English, asked all the right questions, and even had my address. Everything seemed legitimate—until they asked me for the code I’d just received as part of a two-factor authentication (2FA) process. They claimed it was to “validate my phone number.” That’s when my skepticism kicked in. I asked, “You called me on my cell number…why do you need to validate it?”
The response? A swift “F-off” before they hung up. I had almost been duped, but that moment became a powerful lesson in how even the most advanced security measures like MFA (Multi-Factor Authentication) can be exploited by cybercriminals.
Fast forward to today: a frantic call from one of our clients brought back this memory.
The Client’s Story: A Modern Take on the Same Scam
Our client, a small business owner in Minneapolis, was selling items on Facebook Marketplace. A potential buyer contacted them, asking for a 2FA code to “validate” the phone number used for their exchange. Trusting the buyer, the client took a screenshot of the code and sent it over.
The buyer disappeared.
Our team worked to determine which account the code may have been tied to, but the scammer had already vanished. This incident highlights a growing trend: cybercriminals are constantly evolving their tactics to bypass even the most robust security measures.
Cybersecurity Lessons for Small Businesses and Nonprofits
As someone who has nearly fallen victim to a similar scam, I know how easy it is to let your guard down. These bad actors are targeting small businesses and nonprofits in Minneapolis, St. Paul, and across Minnesota, knowing these organizations often juggle limited resources and time.
At CSI Tech Corp, we specialize in protecting organizations like yours from exactly these types of threats. Here’s how our services can help:
Managed IT Services for Small Businesses in Minnesota
We ensure your systems are up-to-date, optimized, and secure—so you can focus on your business without worrying about vulnerabilities.
Cybersecurity Services in Minneapolis
From phishing simulations to advanced threat monitoring, we help you stay one step ahead of hackers trying to exploit MFA or other security protocols.
Cloud Solutions for Nonprofits in St. Paul
Your organization deserves secure, scalable cloud services that protect sensitive donor and operational data while optimizing collaboration.
Incident Response for When Things Go Wrong
If a breach occurs, our team responds swiftly to contain and resolve the issue, minimizing damage and downtime.
Custom Application Design
Secure applications are essential for small businesses and nonprofits. We design tailored solutions with built-in protections against modern threats.
Why Vigilance Matters in Today’s Cybersecurity Landscape
Scammers know how to prey on trust. They mimic reputable organizations, use their own security tools against you, and exploit human error. Whether you’re running a small business in Minneapolis or a nonprofit in St. Paul, vigilance is your first line of defense.
Remember these key tips:
- Never share 2FA codes with anyone, no matter how legitimate they sound.
- Question any unexpected requests, even from people you trust.
- Work with IT professionals who prioritize your security and educate your team.
How CSI Tech Corp Can Protect You
At CSI Tech Corp, we’re dedicated to empowering small businesses and nonprofits with IT solutions that prioritize safety, efficiency, and peace of mind. From managed services to cybersecurity and cloud solutions, we tailor our approach to meet your unique needs.
Stay Secure – Reach Out Today
If you’d like to learn more about how CSI Tech Corp can protect your business, reach out to me, Mark Wheatley, and my team today.
Call to Action:
📞 Call us at 952-928-1788 or
📩 Email us at
Let’s secure your future!
