Phantom Account Verification Emails
 

I periodically receive phantom (or not?) 2-factor identification emails from Hertz (see below for example). The first time I received one, maybe in mid-2024, I logged into my account and changed my password, but I keep getting emails like this every few weeks. When I login to the account it doesn't prompt me to enter a verification code sent by email. I can get straight into the account.

Today I called Hertz at the number in the email, initially speaking with someone in the Hertz Gold Plus Rewards department. I was eventually transferred to someone in another department who could see activity on my account and said the last activity she could see was from August when my Hertz status was updated. I'm not sure what that's about because I've had President's Circle for many years thru my AMEX Platinum. In any case, she couldn't see any other activity, even though I've logged in since then. The agent then asked me if I've tried disabling the 2-factor identification alerts, which is bad advice even if it's possible to do.

I rarely rent with Hertz, and when I do I credit to airline partners, so I don't have any points to steal, but this is unnerving and I'm unimpressed with Hertz' call-center response.

Has anyone experienced this? If so, what did you do about it?

Had dozens a few months ago. Speaking with hertz no help. I just ignored.

By any chance, do you use Awardwallet (or similar service) and have Hertz as one of your accounts? Awardwallet periodically logs into your account(s) to get the updated information which might explain it...

Interesting thought. I DID have Award Wallet up until early this year when they jacked their price up for legacy subscribers. I didn’t deactivate the account, but I didn’t renew and I deleted the app. Would they still be trying to check my mileage balances if I’m not using the service? I’ve definitely gotten the two-factor emails since my subscription lapsed. I should probably login to Awardwallet and delete all my FF info. No use in having my details on another site if I’m not even using it.

Or so you think/hope :)

Not that I think Hertz accounts are a very attractive target for hackers compared to other loyalty accounts, but it’s still not a good idea to call a number provided in such an email without first verifying the number from other sources.