Recently, I have seen more and more phishing for Venmo credentials. Venmo does use SMS messages as a “second factor” to confirm logins from new devices but does not appear to offer additional robust authentication options. The 4-digit SMS PIN and the lack of additional account security may make Venmo users an attractive target.
Article Link: https://isc.sans.edu/diary/rss/29542