A service that allows you to cash out funds through a QR code has given scammers a new way to deceive people.'
Carding-fraud involving the use of payment cards or their details-is now possible both without cards and without banking details. A new type of deception is described in the Bank of Russia branch in the Vladimir region.
The loophole for fraud is related to QR codes — this service allows you to pay for purchases and withdraw cash without using a plastic card. The customer can generate a QR code in the bank's mobile app, then bring it to the ATM's scanner and receive money or pay for purchases.
Fraudsters call customers under the guise of bank employees and report that they are illegally trying to withdraw funds from their account using a QR code. To cancel the operation, you are asked to send a QR code. As a rule, this deception is carried out by users who are not fully aware that the cipher generated by the bank contains personal data and banking details.
"A QR code is a type of barcode that can be used to encrypt any data. In this case, it is actually an order to the bank to issue money without entering a PIN code. Never share a QR code with strangers, or store its image on mobile devices or in printed form. Remember that real bank employees never ask customers for a QR code, " explained Evgeny Gavrilyuk, a cybersecurity expert at the Central Bank of Russia.
Carding-fraud involving the use of payment cards or their details-is now possible both without cards and without banking details. A new type of deception is described in the Bank of Russia branch in the Vladimir region.
The loophole for fraud is related to QR codes — this service allows you to pay for purchases and withdraw cash without using a plastic card. The customer can generate a QR code in the bank's mobile app, then bring it to the ATM's scanner and receive money or pay for purchases.
Fraudsters call customers under the guise of bank employees and report that they are illegally trying to withdraw funds from their account using a QR code. To cancel the operation, you are asked to send a QR code. As a rule, this deception is carried out by users who are not fully aware that the cipher generated by the bank contains personal data and banking details.
"A QR code is a type of barcode that can be used to encrypt any data. In this case, it is actually an order to the bank to issue money without entering a PIN code. Never share a QR code with strangers, or store its image on mobile devices or in printed form. Remember that real bank employees never ask customers for a QR code, " explained Evgeny Gavrilyuk, a cybersecurity expert at the Central Bank of Russia.
