MyMoneyBlog.com

I came across this r/FidelityInvestment Reddit post today about how a Fidelity user had their account compromised (and also eventually restored). In the discussion about how the hackers might have gained access to the account, I learned about some new dangers. I’m not a security expert, but this is my understanding after reading about “pass the cookie” or “cookie hijacking” attacks. The FBI also put out this alert Cybercriminals Are Stealing Cookies to Bypass Multifactor Authentication.

First, obviously phishing is a very common attack nowadays, and for example, if you enter your Fidelity password on a website that looks like the Fidelity login page, then they have your password. But if you have 2FA, you are still protected, right?

A different danger is that malware or a malicious website may use “cookie hijacking” to steal the cookies in your browser that make it appear that you have logged in before. If you use the “trusted device” feature where they bypass the 2FA/MFA (2-Factor Authentication/Multi-Factor Authentication) requirements since you are logging in from a supposedly “trusted device”, then they can now access your account without needing that text message or Authenticator code.

In some cases, if you are actively logged into your account already, malware or a malicious website can even steal your “active session” cookie that makes it appear that you’ve already logged in and passed the authentication checks. Because the website thinks you’ve already logged in, they don’t ask for anything at all.

Here are some actionable steps to maintain the highest security:

1. Only log into sensitive financial accounts using devices where you know the operating system and web browser are secure and updated.
2. Don’t log in from public WiFi, even with https://. If you do, at least use a VPN.
3. Turn off the “trusted device” feature that removes 2FA or MFA if you are logging in from a “trusted device” with the proper browser cookie. This is more hassle, but basically you always want to require more than one factor.
4. Don’t check the “Remember me” box when you log in on a sensitive site.
5. Log in to do your financial business, and then immediately manually click “log out” to delete that active session cookie on both your browser and the external server. Do not stay logged in while you visit other websites, or wait for the system to automatically log you out after 15 minutes or so.

Turning off the “trusted device” feature was the last thing I needed to do in order to score an “Excellent” score on my Vanguard security profile as well. 😎

(Update 7/13: There are additional new deals on July 16th, which is even higher demand. One has a cost of $755.95 and a profit of $244.05 per order. Basic deal structure is the same. Sign-up for an account below to get the details. Good luck!)

New deal July 21st, 2026. The US Mint regularly releases limited-edition coins to collectors. The coin sets are often limited to one per household, but end up with a market value greater than the initial cost. PFS Buyers Club is a website broker that recruits regular folks to buy their allotted coin set with a set markup amount, with the agreement that they will sell only to PFS Buyers Club. For example, you might pay $300 for a coin and they’ll agree to pay you $350 for it – a fixed profit of $50.

On Tuesday, July 21st at 12:00 pm Noon Eastern Time, there is a new guaranteed profit opportunity. A limited edition American Eagle 2026 One Ounce Silver Enhanced Uncirculated Coin will be released then, with a purchase limit of ten (10) per household.

PFS will pay you a fixed commission of $104.05 for 10 coins (must be exactly 10), on top of your cost for the set. The total paid is $1,800. The cost of each order of ten coins will be $1,690. After including the $5.95 shipping charge, each order’s total will be $1,695.95. If you subscribed to these or have already made three purchases with the Mint this year, you should get free shipping.

You’ll also earn credit card rewards on your ~$1,700 purchase (worth another ~$34 at 2% cash back), or also possibly satisfying the requirements for some $500+ value credit card bonuses. This makes the total net profit safely around $138.

Note that the eventual value of the set may exceed that elsewhere – you may see a higher bid on eBay, for example – but if you want to make that bet, don’t promise to sell to PFS Buyers Club. Just buy it on your own and try to sell it yourself. Keep in mind that eBay seller fees can be quite high (13.25%+ of the final selling price + PayPal fees), and you’ll be responsible for other costs like the proper shipping with adequate insurance. PFS Buyers Club will send you a free prepaid mailing label (including tracking and insurance) and pay you via eCheck, paper check, or PayPal. Even as an experienced eBay seller, I still prefer a low-stress experience when dealing with these types of valuables. You don’t have the risk of a price drop, or a random eBay user who claims never to have received your coin.

My past experience. I have used PFS successfully several times since 2021. Everything has gone smoothly each time and I have been paid my money in full without issue. The amount of communication was great and in fact better than expected; I was kept up-to-date every step of the way.

The total time commitment was the stop at the Fedex store to drop off the box with prepaid label. The eCheck option worked great – I printed the check out at home and deposited immediately via mobile app. PFS has a very solid reputation online. Their success has spawned many competitors, and some may offer you more money than PFS. I have nothing positive or negative to say about the competitors, as I have never used them. As always, I try to write based on my own personal experience. However, if this is your very first deal, I would consider PFS because they have the longest reputation and a time-tested process. I think it’s a good setup for beginners (well, those who are good at following directions) and folks who want minimal risk like myself.

If this interests you, you can sign up to join PFS Buyers Club here to see the details on the current offers (there may be another deal coming up soon on 7/16). Sometimes these deals fill up, so I would sign-up (it’s free) and opt-in sooner rather than later. You can still opt out of the deal until an hour prior to the coins going on sale. They will provide very detailed instructions. Follow them carefully, and it was pretty easy for me as a first-time buyer. If you use that link, I will receive a referral fee the first time you successfully sell your coin for a profit. Thanks for those that use it, and for those that already used it years ago! You’ll also be notified for future deals, some of which have very little upfront notice.

(p.s. I don’t write about coin deals often, the last one I wrote about was back in 2022 I think, this one just seemed to be a good mix of profit and spend. Some deals require a huge upfront purchase, and others the profit is under $100 and not worth my time.)