5 new scams exploiting biometric authentication for banking transactions

Since the end of last year, many security experts have predicted that cyber attacks will increase in 2024 and mainly target smartphone users. The reason is that in the context of strong digital transformation as it is today, smartphones are increasingly important to many people in both life and work, so they have also become an attractive 'prey' for cybercriminals.

Fraudulent appropriation of assets through biometric authentication of banking transactions.

Below are 5 online fraud tricks that the Information Security Department has just recommended Vietnamese Internet users to be more vigilant about:

Impersonating bank employees to trick authentication instructions to appropriate assets

Taking advantage of the regulation requiring updating biometric data on online banking applications that took effect from July 1, in recent days, some subjects have impersonated bank staff to proactively contact users and commit fraud and property appropriation.

Specifically, when contacting banking service users, the impersonator asks the victim to provide personal data such as home address, photo of both sides of the citizen identification card, bank account information. In many cases, the scammer also lures people to make video calls to collect the victim's voice, facial expressions, and gestures. After successfully stealing data, the subject will easily log in to banking applications, make online payments and make money transfers from the victim's account, appropriating assets.

Impersonating bank employees to trick authentication instructions to appropriate assets.

In addition, some subjects also trick people into downloading fake applications containing malicious code via links attached in messages. When the victim downloads this application to the phone, the subject will easily monitor the operations that the victim performs on his device, thereby exploiting more important information.

In response to the above new scam, the Information Security Department recommends that people be vigilant when receiving messages or calls instructing them to update their biometric data. When contacted by individuals claiming to be bank employees or police officers, people should verify their information. People should also not click on strange links or install applications from unknown sources.

Talking to VietNamNet reporter, information security expert Vu Ngoc Son commented that scammers are often very quick to respond to hot events and phenomena; They often very quickly come up with scam scenarios exploiting hot events and phenomena to maximize the possibility of users 'falling into traps'. For example, in the past, when network operators standardized subscriber information, or when it was time to declare personal taxes, there were many subjects impersonating network operators and tax authorities to trick users into installing similar fake applications.

“To prevent this, users should call the bank's customer support center themselves at the officially announced phone numbers, not install strange applications and not provide OTP passwords,” expert Vu Ngoc Son recommended.

Installing fake online public service application, 1.2 billion VND was appropriated

A resident of Trung Hoa ward, Cau Giay district ( Hanoi ) has just been scammed out of 1.2 billion VND by a subject impersonating a police officer, with the trick of instructing the user to install a fake online public service application. This fake application was sent by the scammer via a link attached in a text message, after contacting and informing the victim that the victim's identification account had an error, and that the application must be installed to receive remote support. When the victim followed the instructions, the scammer would gain control of the device, thereby stealing money from the victim's bank account.

Installing fake online public service application, 1.2 billion VND was appropriated.

It is worth mentioning that the trick of installing fake public service software has been continuously warned by the authorities, but up to now, there are still people who have been scammed out of billions of dong. The Information Security Department recommends that people do not access strange links. When receiving notifications related to the use of public service software, people should only download applications from official sources such as AppStore and CH Play. In case of detecting signs of fraud, people need to quickly report to the authorities.

Seizing billions of dong by the disguised trick of 'Easy work, high salary'

A woman living in Chon Thanh town ( Binh Phuoc ) has just been scammed out of more than 2.3 billion VND by a bad guy, through a disguised scam called 'Easy work, high salary'. Specifically, the guy made friends with the victim via Telegram, then introduced the victim to a part-time job at home - 'listening to assigned songs, logging in and voting for singers', with a promised salary of 35,000 VND/vote. After agreeing to participate, downloading the fake Zing MP3 application and depositing money to perform the tasks as lured by the guys, the victim had all the money transferred stolen.

Giving advice to people to be vigilant against invitations for 'Easy work, high salary', experts from the Department of Information Security also reminded people to absolutely not transfer deposits or pay participation fees without verifying the identity of the subject. Realizing signs of fraud, people need to save conversations and information of the subject, then report to local police to promptly prevent fraudulent behavior.

Impersonating the Anti-Fraud Center to defraud and appropriate property

According to the Information Security Department, the Ontario Provincial Police (Canada) recently warned about fraudulent tricks impersonating the Canadian Fraud Prevention Center - CAFC. Specifically, the subject first impersonates bank employees, credit card providers or e-commerce platforms to approach and notify users that their accounts have been hacked and there are signs of suspicious transactions. Then, the subject sends emails with the CAFC logo to increase credibility, asking victims to provide personal data, bank information and conduct transactions, stealing money.

Not only that, scammers also tend to impersonate investigators working at CAFC, targeting victims of fraud, promising to help them recover their lost money. The subjects will ask the victims to provide information to serve the investigation process, from which they commit acts of property appropriation.

To prevent this, the Information Security Department recommends that people be vigilant when receiving messages or emails from any unit or organization; Do not provide personal data information; Do not transfer money when receiving a request; At the same time, it is necessary to check and verify messages and emails through electronic information portals and official phone numbers.

WhatsApp scam warning

WhatsApp is a popular online chat application, widely used by people of all ages around the world. Therefore, this is also an extremely convenient platform for subjects to commit fraud and property appropriation. Through this online chat platform, subjects are using many fraudulent tricks such as impersonating relatives and friends; Notifying participants to receive winning gifts; Trick to upgrade the application; Request to enter a confirmation code...

To avoid scams via WhatsApp, the Information Security Department recommends that people be vigilant when receiving messages from strangers; Do not click on links attached to messages, do not provide personal information, and do not transfer money at the request of strangers. When receiving messages asking for loans, people need to carefully verify the identity of the sender through the information on the personal pages of those accounts.

Source: https://kinhtedothi.vn/5-chieu-lua-dao-moi-loi-dung-xac-thuc-sinh-trac-hoc-giao-dich-ngan-hang.html