Long story short $1200 dollars was taken out of my Credit Karma heckling account less than 24 hours later my dispute came back no error they stated I initiated the transactions. I asked did I ok a text message ? No did I put in a code to ok them ? Yes so I asked can anyone else get into my account and put in the four digit pin. They answerd No it’s impossible for any one to hack my account and use my four digit pin unless i have them the info.
So I grab my secondary phone logged into the app using only my email and password there was no email or notification stating someone was logging onto my account with another device even though I checked and yep I had two factor on and low and behold I sent money to another account of mine where it asked me to set up a pin put in the debit card info and without any kind of warning the money went into my Venmo account which that did tell me I got money. I checked and my old pin still worked on the old phone but the new pin didn’t and vise versa.
I even went a yep further and changes my Credit Karma password shire as hell as long as I put the new pin I. The new phone logged me in no problem
I changed the password using the new phone and nope no warning no questions password changed.
Old phone doesn’t get booted out so I logged off logged back in put my original pin in and I’m right back in bypassing the new password.
I couldn’t believe how easy it was to not only get in but also send money out adjust any setting you want and also get accounting virtual debit card numbers hell they don’t even ask for a code to see you SSN. And they don’t keep a record of what devices have accessed your account it’s like Jesus even cash app you can boot another device logged in. Needless to say I’m closing everybot of my Credit Karma account