How money is stolen from bank cards. Working schemes.

Tomcat

Professional
Messages
2,688
Reaction score
1,015
Points
113
Have you issued a bank card? Congratulations, you are being targeted by scammers.

If you think that no one will deceive you, danger can creep up unnoticed: a harmless call on a familiar bank number can easily turn out to be fatal.

Even a simple situation like selling a smartphone through an advertisement site will turn into a nightmare if you don’t keep track of your SIM card. They won’t come up with anything now for the sake of your card data.

We reveal new and old working schemes.

You are offered to connect an overdraft​

Fraudsters hack the account of a bank group administrator on a social network and/or write on his behalf.

For example, you want to activate an overdraft. Under this pretext, a bank representative contacts you and lures you with card information. Then he steals the money.

Remember: bank representatives will NEVER solve your problems on social networks . Unless they ask how to contact you. Further, all contacts with them must be carried out either through the bank’s application or via a confirmed phone number of the financial institution.

They transfer money to you, but the bank requires you to confirm your identity​

A potential buyer who wants to pay for an item seems to have sent you money.

But since he is a legal entity (not a citizen of the Russian Federation, a client of another bank), the bank employee requires additional information: CVV/CVC code, banking password and one-time code that will be sent to the smartphone.

Then everything is the same: the money disappears from the account.

Classic: the bank calls and blocks the card​

The simplest scheme assumes that the attacker has your card number and phone number .

It’s very easy to get data: for example, offer to pay for a product you sell on Avito on a card, and then refuse, or screen an ad for collecting donations for food for homeless cats.

In a couple of days you will receive a call “from the bank.”

The name can be easily determined by an advertisement or in the application of the bank that issued the card. When you enter your card number, it is usually displayed so as not to confuse recipients.

A person who introduces himself as a bank employee will report that the card is blocked due to “potential fraud.”

Typical bank call center. But scammers are not calling from there.

To unlock it, you need to answer the questions: when, where did you open the card, what is the balance on it, where was the last time you paid, and so on.

Then they will definitely find out the CVV/CVC code on the back of the card, the expiration date and the password for Internet banking. They will also ask you to enter a code that the bank will send to you on your mobile phone.

Then they will simply withdraw money from your account. Or they will buy cryptocurrency with them to make it harder to find the ends.

This scheme is already 10 years old, but it still works. Not with you, but with relatives who are far from the Internet, with retired neighbors, etc.

They take your passport data and reissue the SIM card​

Continuation of the previous method.

They may ask you to name the two numbers you call most often. This will allow you to reissue the SIM card linked to the Internet bank, and then change passwords for it and steal your money.

Moreover, recently hackers were able to gain control over bank numbers and began calling clients from them. New level, however.

Submit a loan application and take your million​

Another method of scam begins with advertising on entertainment sites and social networks. To get a loan on favorable terms , you need to fill out a form indicating your card details.

Fraudsters explain: this is the only way to check your credit history and provide a loan . The more information you give, the higher the likelihood of receiving money.

I receive a message about winning money​

The bank held a lottery, and your card number turned out to be lucky. Or you won a-a-a-car *in Yakubovich’s voice* .

In fact, the reason could be anything: the mayor of Moscow is distributing medicines at a discount to pensioners, social security collects lists to provide financial assistance, utility companies want to return the money as a subsidy, and so on.

All that remains is to provide your card details.

All this is a scam of gullible pensioners. It’s time to publish descriptions of such schemes in newspapers.

I receive an SMS: “Your card is blocked”​

Hackers organize a mass SMS message stating that a specific bank has blocked a card (this increases the level of trust). To restore access, you need to follow the link.

There is not enough text to fit into an SMS, so the links are shortened. By clicking on it, you find yourself on a site that looks almost the same as the Sberbank or Alpha site, or imitates it. Only the address is slightly different: for example, allfabank or sberonlain.

The website asks you to fill out a card unlock form. They ask you to indicate its number, expiration date and other information. They promise to send an SMS to confirm the action.

Naturally, the SMS comes from your bank. But when you enter the code, scammers enter the Internet bank. Can you guess what happens next?

You are using a fake bank app​

The story is approximately the same as in the previous paragraph. Only what leads to a fake site is not an SMS, but malware.

Another option: the virus replaces the login window in a real banking application in order to steal the password for online banking.

Everything is clear here. Don’t install just anything on Android; use only official banking apps from Google Play and the App Store. No .apk and .ipa from file hosting services.

You are offered to speed up a stuck translation​

The fraudster, who received your card details in a correspondence on an advertisement site, says that he will pay as a legal entity / from a card of another bank. Because of this, the money will not come immediately.

Want faster? Go to an ATM or terminal and create a template indicating your own card and phone number.

Many terminals are designed in such a way that after creating a template, they show a window with a “Connect mobile bank” button. The attacker says that you need to click on this button and enter his number. Like, then his bank will connect and quickly process the payment.

But in fact, you are linking the card to his number. And you give him the opportunity to withdraw funds from your account.

Your bank is merging with another and you need to transfer your account​

Fraudsters are calling with bombshell news: your bank is merging with another major bank. To continue using your account, you need to provide all your card details . A new account will be opened for them.

If they call you and say something like this, hang up and check the information on the Internet on reputable sites. For example, on Banki.ru.

Someone else's transfer suddenly appears on the card​

You receive an SMS about the transfer of money to your card. The message is real, and in mobile banking you can also see that your account has been replenished.

Soon they call you and say that they made the wrong card during the transfer. Money was sent for a gift, for the treatment of a child, or to help homeless cats.

As an honest person, you, of course, step up and send money to the card whose number was dictated to you. After all, you may not even be able to see where the funds were sent from.

And then for some reason the bank blocks the card and accuses you of fraud.

What actually happened: the scammer gave your card number to a person who offered to buy a cheap iPhone / rent an apartment / give an advance for a car. He transferred the money to you, and you to the fraudster.

When the sender of the funds realized that he had been scammed, he wrote to the bank and initiated proceedings. They will demand money from you. But you transferred money to the fraudster voluntarily (and, most likely, to a stolen card).

Alas, the fraudster will almost certainly escape liability. They just cashed out money through you.

You are offered to pay for your purchases in exchange for cash​

This scheme is periodically rolled out in different supermarkets. In line, a girl comes up to you and asks whether you will pay in cash or by card.

If you answer that you will pay in cash, she offers to pay for your purchases with a card , so that in return they will give her bills. There seems to be a problem with the card: you can pay, but you can’t withdraw from an ATM.

You find cash, she pays for your purchases, the cashier issues a receipt, the girl leaves.

At this moment, the real owner of the card appears. He says that he just dropped his card in the supermarket, and a few minutes later he received an SMS about a charge at the checkout.

That means you stole his card since you just used it to pay. Return the money, or have the cashier cancel the payment, otherwise the police will be called.

Many people fall into a stupor in such a situation. Moreover, if there is a security guard nearby who does not need unnecessary problems at work.

But in vain, call the police. The fraudster will disappear into thin air instantly. Naturally, he and the girl are in cahoots.

And, most likely, this is simply cashing out money from stolen cards . At the ATM they will detect it right away, but in the store they will write it off as problems with the card if it suddenly doesn’t work.

Your data is being stolen by skimmers​

A skimmer is a special device that reads card data. It imitates parts of an ATM: a slot for accepting cards, and sometimes a keyboard. Read more about them in our article.

Skimmers are attached with double-sided tape or glue. They can also install an additional camera that will film you entering your PIN code.

The skimmer receives data from the magnetic stripe. They allow scammers to obtain information about your card and withdraw money from it. Information from the chip is usually not read.

How to protect yourself: watch carefully where you withdraw money . Skimmers are rarely installed in bank branches.

If the ATM doesn't look the same as usual, don't insert your card into it. You have only one , but there are many ATMs.

You are simply asked to give a call​

In this scheme, victims are most often found on classified ads websites. The potential buyer offers to meet, and may even offer to save money on gas so as not to have to drive across town.

You agree, a couple hundred is never too much. Money is coming.

At the appointed time, the buyer drives up, inspects the car, and in the process his phone goes dead. Asks your smartphone to call. And at the same time, his accomplice begins to ask questions to distract him.

While you are answering them, the attacker takes out the SIM card from your smartphone and replaces it with his own. After this, the buyers promise to think about it and leave.

But in reality, they insert a SIM card into your smartphone, recover your online banking password, and clean out your account.

By the way, they may try to transfer money by message from your phone. It's even easier and faster.

Instead of a summary​

While this article was being prepared, scammers probably came up with a couple of new schemes. How to avoid becoming a victim:

▪️ Never tell anyone your card details other than its number. And especially don’t take pictures of it from both sides.

▪️ If they call from the bank, call back the number indicated on the card or on the official website of the organization.

▪️ If you give a smartphone to someone, keep an eye on it. Even if it was a friend or colleague. People in difficult life circumstances will go to great lengths.

▪️ Don't be fooled by freebies. Never.

Tell your elderly relatives how money is scammed and stolen. Don’t let them lose the last one and put a big plus in your karma.

(c) Ksenia Shestakova
 
Top