Checklist: how to understand that a message from a bank is a fake

Carding Forum

Professional
Messages
1,245
Reputation
3
Reaction score
445
Points
83
PaySpace Magazine has analyzed the fraudulent message.
How to understand that a message from a bank is a fake.
On Friday, August 21, the editor of PaySpace Magazine received a message from an unknown number about a “successful payment” in the amount of UAH 1282.11, carried out from an unnamed bank card. The editorial board of the magazine decided to parse this message in detail, explaining why the scammers sent it.

1. Message from an unknown number

The smartphone did not identify the "bank" number, which usually happens automatically even when receiving advertising messages from financial institutions whose client the recipient is not.

2. Text with errors

The swindlers assure that it is possible to call the numbers indicated in the message “without kokhtovno”. At the same time, the supposedly free call will be made from the Lifecell number to the number of another mobile operator Vodafone - indeed, at such a moment you feel like a special client!

3. The message is different from a typical bank SMS

If you regularly receive messages from the bank, you roughly know how they look and what information they contain. Consider, for example, real bank SMS from PrivatBank and Raiffeisen Bank Aval about the successful withdrawal of funds and compare them with a fake message.

This message from the bank indicates:
  • Date and time of the operation;
  • Several digits of the payment card from which the funds were debited - in Bank one first and two last digits are usually indicated, in Raiffeisen Bank Aval - the last four digits of the card. In addition, Raiffeisen clarifies the name of the payment card - in this case, it is a Visa Fishka card;
  • The product or service for which money was debited from the card (in both examples, the purpose of the payment is indicated: in the case of PrivatBank, this is payment for medical services by Smart Medical Center, in the case of Raiffeisen - the purchase of products in the Novus supermarket);
  • The amount remaining after the operation on the card.
In addition, all withdrawals from the card (including those that were rejected by the bank) are indicated in the bank's Internet banking or mobile application.

4. Social engineering

What is the point of sending such messages? The potential victim is frightened with a non-existent write-off of funds, in order to then elicit information about the card. Fearing for the safety of his money, a person calls a "free" number, where an operator who is ready to help may ask for the card number, expiration date, PIN-code or CVV2-code of the card, password for mobile banking and passwords received in SMS. In general, everything you need to actually write off funds from your card.

This is what such a conversation might look like.

How does a manipulative message differ from a real SMS bank? Consider another message from Raiffeisen Bank Aval with a reminder to pay off the debt that is not credited to the recipient. The text of such an SMS indicates the amount of the debt with a request to repay the loan and the bank's contact phone number (the free phone number of the RBA department for credit debt), the smartphone also identified the sender - Raiffeisen Bank Aval. The only catch is the lack of debt. After a call to the bank, it turned out that the financial institution sent an SMS to the recipient, since the borrower (close relative) indicated the recipient as a guarantor for the loan.

What to do if you receive a message from scammers

If you doubt that the message about "successful withdrawal of funds" or any other SMS came from your bank, you need:
  1. Check the balance in Internet banking, the bank's mobile application or at an ATM;
  2. Call or write in support of the bank - look for contact numbers and other communication channels only on the official website of the bank.
Remember, bank employees never ask for information about the card details (CVV2-code, card expiration date) and do not ask the client to share personal data. Read more about how to avoid card fraud in the PaySpace Magazine article.
 
Top