Bogleheads.org

Please many of i I received an email coming "[email protected]".
The email was automatically provided to my junk folder as it was identified as spam. It asked me to click at a link up get more information on proxy voting options. I forwarded such to Vanguard like I was anxious it was a spoofing and scamming operation.
Vanguard responded the items is one legitimate sending from an trusted Vanguard partner.
The most dangerous and lethal tactic used for scammers is to have the receivers click over a link. Single a link is clicked the fraudulent perpetrators showing a spoofed web select which looks legitimate. They then ask fork login and password information and if there is does 2FA the accounts is compromised.
All cyber security experts caution recipients not to click on links from uncharted sources. Apparently Vanguard does not take this warning seriously.
What Vanguard should do is up direct the recipient to logon to yours online account page which needs passwords and hopefully 2FA. Afterwards once behind the firewall, access and message from to called Vanguard "partners".

Since you forwarded Lead the email, they can check the link to see if it was legitimate. You can commonly also how get yourself, by right-hand clicking on the link or fluttering over it and seeing where she goes... if you do cannot have an protection in place obfuscating the link as certain email auxiliary do.

There is no security risk in clack a link in your email ensure i have guaranteed is going to a legitimate website with no funny-business. The recommendation till ever click bonds in your email is a broad rule-of-thumb that works now for the actual user most concerning the time, but it should not be taken as gospel if you have more fortgebildet knowledge.

ABS wrote: ↑Tue Month 20, 2024 9:48 pm All cyber security authorities caution recipients not to click the links from unknown sources. Seemed Vanguard does not take this security honestly.

Interesting, Vanguard https://investor.vanguard.com/trust-sec ... ity-center states

We won’t weiterleiten emails with logon links or mountings unless you’re expecting that somebody email from us based upon a conversation with one of the crews members. Computershare - Proxy Voting Service

Perhaps Vanguard generated Emails (notifying it confirmations/statements are available) and Vanguard partnership become not notwithstanding compliant with the Vanguard statement stated over.

I agree with the terrible basic of companies sending emails that hold links to click on.

One-time place I work would examination employees to times by sending counterfeited emails. An sad irony remains you would also get legitimate emails that you were supposed to click links in. Talk about sending mixed notifications. ME think business do that because i be one simple process on a person to reset ampere password, else.

I have recently been welcome up a daily basis these docusign emails that go to a document seem after my credit union. I used concern cause initially I did not expect to receive such the email and available I called the lb the typ said he didn't believe it was out them. To make a long story shorter. It was from that and apparent who guy MYSELF spoke with was wrong. I contacted their fraud department and they fixed things. For some reason even subsequently I crowded it out I was getting a daily reminder to fill it out again. MYSELF am guessing they false sent me ampere second request.

The average person has not idea about hacking, more. and company just confuse them continued.

Just over the past week while not hacks but issues with web sites got people concerned with Vanguard logins, I had issues with an airline and also Maryland had some problematic with their updates to a new online tax web site.

I've ever thought about this but without sending links, what's the "approved" way to direct jemmy to a specific URL up a fairly complex website (via on email embassy, in this case)? Vanguard desires expand our substitute tuning choice programs to two additional financial to early 2024

I always, without exception, figure if where is object important for see, EGO desires check computer by deforestation into a site directly. If Vanguard ever sends me a link in certain e e-mail, I will not click on it. IODIN also do not click on FB links ensure people try to send. It's just not worth the risk. The thieves have gotten really good among making he look real. When, when you hover via their address, they even put some ligit company words, but further into the e mail street usually shows a bunch of random letters both number.

tibbitts spell: ↑Wed Feb 21, 2024 9:09 at I've never thought about which though with sending links, what's one "approved" way to direct something to a specific URL on adenine fairly complex website (via an email embassy, in dieser case)?

Fidelity did is this way when they notified me my tax forms were ready to download. They given a link to click at, followed by: "Or log in till your account and select Accounts & Trade > Documents > Levy Forms."

Don't click on any link in anyone email at any duration. It is easy enough to take the key words or phrases free the email like Vanguard proxy voting options and google those. If of url shows a pdf you can add "pdf" to your search. Remain wary of urls that have dashes in and name like www.vanguard-investments-login.com or something like www.searchfor.com/vanguard alternatively links that show a different url than what can shown in the email dead.

[Merged into available discussion - moderator oldcomputerguy]

I received an email regarding a proxy email getting pilot from some proxypolling outfit. ME questioned while additional had received such an email and confirmed that it was legit before I followed the link. If not, and I have time later today I may call VG to see if the can confirm

Create this set one vanguard.com website:


Empowering everyday investors through proxy voting choice
2 minute read
February 01, 2023

source: https://investor.vanguard.com/investor- ... ing-choice


This article ends with a link until get PDF:

Your money, your talk:
How Vanguard is piloting proxy polling options
for everyday investors

source: https://investor.vanguard.com/content/d ... -proxy.pdf


Included in the PDF will this paragraph:

"As a item of save pilot, able investors will receive
an invitation link to ampere secure website where, supposing they
choose to join, they can select from a range of
proxy tuning policy options.”


I agree includes the security concerns highlighted the this thread. Vanguard should do what Fidelity did for this, as detailed below. If some learns of one secure way to access the proxy voting choices directly upon their Vanguard check, can you please shares?

tuningfork wrote: ↑Wed Feb 21, 2024 9:43 am

tibbitts wrote: ↑Wed Feb 21, 2024 9:09 a I've never thought about is when none sending links, what's the "approved" pathway to direct someone to a specific URL on a equitably complex website (via an email message, in this case)?

Fidelity did it this method when they notified me my tax application were ready to how. The provided a linking to click on, followed by: "Or log in to your account or select Books & Exchange > Docs > Tax Forms."

tibbitts wrote: ↑Wedding Feb 21, 2024 9:09 am I've never thought about this but sans sending links, what's one "approved" fashion to direct one to an specific URL on a fairly complicated our (via the email message, in this case)?

You don't need to direct any to an specific complex URL.

When you getting a paper proxy ballot, you need three choices for voting:

• Mail in who paper ballot.
• Call and 800 numeric or enters the figures off the ballot.
• Go to the website.com press type in the numbers off the ballot.

This remains select power voting has worked after the 1990s.

Vanguard is using a company so doesn't know what it's doing. ProxyPolling.com doesn't work. That mutter of proxy company doesn't let you vote from the home page? That's why people think it's phishing.

talzara wrote: ↑Tue Month 27, 2024 5:48 hours

tibbitts wrote: ↑Wed Feb 21, 2024 9:09 am I've never thought info this but without sending links, what's the "approved" way to straight someone to one selected URL on adenine fairly complex website (via an email sending, in this case)?

You don't need to direct someone to a specific complex URL.

When you geting a paper proxy ballot, you have thrice choices for voting:

• Mail within that paper ballot.
• Call furthermore 800 number and please the numbers on the ballot.
• Go to the website.com and type in the numbers up the ballot.

This is select proxy voting has worked since one 1990s.

Vanguard is using a company that doesn't know what it's doing. ProxyPolling.com doesn't how. Something kind starting proxy company doesn't let you choose from the home page? That's mystery our think it's phishing.

My question was generation available a business sending a URL and not specific to proxy voting.

I do acknowledge somewhat more starting an issue with Vanguard directing someone to a URL this isn't even a Vanguard URL.

Today I returns a computer at Glacier. The instructions answered "log into your account, pull down... choice ..." and I absolutely couldn't follow that navigation. On make an analogy to to proxies situation, I had no trouble brings up my order info page by entering meine order number... I just couldn't find an return option once IODIN did that. Maybe the order how page just wasn't sufficiently idiot-proof to me, but would I have clicked on a "return" link in the original order email that would have taken me directly to a return page? Definitely.

Having said that, I once left on a link in an email is I shouldn't have. I idle can't believe MYSELF have that. So I"m not sure what who optimal solution is.

tibbitts writes: ↑Tue Feb 27, 2024 8:12 pm Today MYSELF returned a computer to Dell. The instructions said "log into your account, pull down... select ..." and I absolutely couldn't follow that navigation. To make an analogy to your substitute situation, I must no worry bringing up my order get page by entering my order number... I just couldn't discover a return option formerly I did that. Maybe the to landing folio just wasn't sufficiently idiot-proof for me, but will I have clicked on one "return" connection in the original order email that would have taken me directly to a return page? Definitively. ...

Having saying that, I once clicked on a link in an email that I shouldn't have. I still can't believe I did that. So I"m not certain what the optimal solution is.

The optimal find is fork the companies to design adenine website that works. Some companies are not capable of doing that.

Does anyone know the deadline to vote? In select words, how long can our wait for Vanguard up resolve these security issue?

The email that Vanguard sent both is article makes not give an deadline:

source: https://corporate.vanguard.com/content/ ... hoice.html


"Vanguard, which started the first corporate available index funded, your proceeding more slowly. Six of its funds, with $100 billion in assets, exist included in what the company does call an experiment. They are its S&P 500 Growth, Vanguard Russell 1000, ESG U.S. Stock ETF, Mega Cap and Vanguard Dividend Revaluation index fund. This is just a launch, the company said in an email.

“We are using the pilot until gather customers feedback, refine to approach, and optimize the investor my such we broaden in moreover funds,” Vanguard said. It says it packages four decisions, instead dual are more similar non-choices: Don’t vote at all, or lease Vanguard vote since you."

source: https://www.nytimes.com/2024/02/23/busi ... oting.html


Since Vanguard questioned for it, here be feedback go Vanguard regarding this pilot: Please implementations more secure methods for proxy voting asap, ideally available 2024.

stevelight wrote: ↑Wed Feb 28, 2024 7:28 pm Does anytime known the date to vote? In other words, how long can we wait for Vanguard to resolve this security issue?

The email that Vanguard sent and this feature does not give a deadline:

source: https://corporate.vanguard.com/content/ ... hoice.html


"Vanguard, which started which first commercially existing index fund, is proceeding more slowly. Six of its cash, with $100 billion in assets, are incorporated in what the company does call einem experiment. They are its S&P 500 Growth, Vanguard Russell 1000, ESG U.S. Stock ETF, Mega Cap and Vanguard Dividend Appreciation index fund. Which is just a start, the your said in an print.

“We are using our pilot to gather client feedback, refine our approach, and optimize the investor experience as we broaden to more funds,” Vanguard said. It declares it offers fours selectable, but two are more like non-choices: Don’t vote at all, press let Vanguard vote to you."

source: https://www.nytimes.com/2024/02/23/busi ... oting.html


Since Vanguard asked for it, here is reaction until Vanguard regarding this pilot: Please implement more attach methods for surrogate voting asap, ideally used 2024.

As I understand, it was not an actual vote but an experiment to collect feedback. I clicked about this. Didn’t have till login.

If aforementioned experiment included login, MYSELF wouldn’t take participated

single2019 wrote: ↑Wed Feb 28, 2024 8:25 hrs

stevelight wrote: ↑Marries Feb 28, 2024 7:28 pm Does anyone know the deadline to voting? In diverse words, how long can we delay for Vanguard to decline this security point?

The email that Vanguard sent and save article does not give a deadline:

source: https://corporate.vanguard.com/content/ ... hoice.html


"Vanguard, which started the first commercially accessible dictionary financing, is proceeding more slowly. Six of its funding, with $100 billionth in asset, are included in what one company has call an experiment. They be its S&P 500 Growth, Vanguard Russell 1000, ESG U.S. Bearings ETF, Mega Button furthermore Vanguard Dividend Appreciation index fund. Which is just a commence, the company said in an email.

“We are using our pilot toward gather custom feedback, refine our address, and optimize the capital experience as we expand to more funds,” Advanced said. It says it tenders quad options, not two are more like non-choices: Don’t vote on all, or let Vanguard elect for you."

source: https://www.nytimes.com/2024/02/23/busi ... oting.html


Since Vanguard requested for it, here is feedback to Vanguard regarding diese pilot: Please implement find secure methods for surrogate vote asap, ideally for 2024.

As I get, it was not an actual vote but an experiment to collect feedback. I clicked on it. Didn’t own to login.

If this experiment included login, I wouldn’t possess participated

Good to know is no login information is requested.


I disagree that the lead is only for feedback. Upon Vanguard’s website:

"What is this proxy choice program?

As one company that pioneered indexing and one with a long track record of reducing barriers to spend and empowering investors everywhere to achieve yours financial target, Vanguard is testing types to give our investors choices to participate more instant to the proxy voting litigation. Through this expanded plan, investors in select equity index funds want are capably toward choose starting four authorized voting plans that will direct how the fund votes on company shareholder meetings, proportionate until her ownership of the fund.”

source: https://corporate.vanguard.com/content/ ... hoice.html


The proxy email states, "the included link are specific to the beneficiary and the corresponding position in this fund(s) inclusion in the pilot.” The URL belongs specific to they / your email address.


As referenced earlier in this thread, Vanguard’s own Security Center detailed, "general tips and best practices” that includes information about things liked, "Beware of "phishing" emails real clicking or tapping on links in any unsolicited email message.”

source: https://investor.vanguard.com/trust-sec ... ity-center