Hello nice people,
I’ve been using NiceHash app for some time 5-6 years ago. (It was a simple app for mining cryptocurrency and you get paid in bitcoin on their wallet, then you could transfer bitcoin to another wallet.) It was working fine until they got hacked (or fooled us) and lost all crypto. Luckily I didn’t loose much like some guys did. I decided not to use the service anymore and I’m still receiving stupid e-mail newsletters. I tried to unsubscribe and It asks me for login, I know password, but don’t have 2fa anymore. Also I don’t have backup 16 words.
Now support told me that this is the only way and I feel ridiculous about taking selfie just to unsubscribe. Am I protected against this somehow? I live in Europe and I think Nicehash is located in neighbourhood.
And of course I never wanted to subscribe…and I don’t think I ever verified account with a document.
What are my options other than just filtering that shitty domain as spam?
edit: typo
Nothing says decentralized currency like having a corporation that controls your assets 😋
Don’t point out how all their bullshit requires middlemen and accounts holding their currency to make it work. That makes it looks silly. Almost like it’s just more complicated harder to use money that people can more easily steal from you.
I love talking to tech recruiters… We are a defi startup revolutionizing the financial world… “Cool, so distributed smart contracts, zero knowledge open source swarms?”… no, we run a centralized website where people give us money and we do a thing for them…
Putting the central back in defi. It’s almost like their is willful ignorance in what their own words mean.
Using buzzwords to describe doing something people have been doing for decades or centuries is all the newer big tech companies seem to do. They’re just fancy new middlemen with a shiny interface for us to use.
A requirement beyond an email address to unsubscribe from an email newsletter is illegal in most western countries.
What’s wrong with filtering their domain?
That looks like a proper request to disable 2FA. Their problem is requiring login to unsubscribe from newsletter emails, which is total BS.
If support won’t take your email out of their list, just block the address / domain and move on, I guess.
I wouldn’t give them any extra personal info after what happened.
Additionally use any report functionality at your disposal, which may cause some mail providers to block them or cause them to offer proper opt out in the future.
All marketing emails are supposed to have a simple opt out without needing anything other than your email address.
It’s probably not for marketing emails. They probably require login to disable account alerts. Imagine a threat actor gets access to your account, turns off transaction alerts so you aren’t notified, then transfers out all your crypto.
I’m certain the marketing emails don’t require login to unsubscribe.
Unsubscribing and disabling 2FA seem like two different things.
GDPR allows for the company to verify your identity before proceeding with deletion. Source: https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/dealing-citizens/how-should-requests-individuals-exercising-their-data-protection-rights-be-dealt_en
[The company] can ask [you] for additional information in order to confirm the identity of the person making the request.
Also, Im not trying to delete account (but that eould be ideal), Im just trying to unsubscribe. I guess it doesnt matter here FML 😂
They can’t ask for more information than what they needed to create your account.
But maybe they’re seen as a bank and then they have to confirm your identity with a copy of your id.
Ive never heard of bank asking selfie. I wouldnt even provide ID, but that would make bit more sense
KYC (Know Your Costumor) Here you have a small overview.
When you create an account online, a selfie along with a copy of your id is deemed minimal verification.
Thanks for the link. Feels bad tho 😭 gdpr gave me Accept/Reject cookies and some more pain as a bonus it seems 😂
GDPR didn’t give you cookie banners, it’s shitty websites that do.
If they were to just follow activated “Do not Track”-Preferences, they wouldn’t need to ask, instead they would deactived them by default. Or you could just not use cookies, it’s not like somebody forces you to give cookies out to your website’s users.
