Cops warn public of digital ID fraud to Android users

[reader]

From Bangkok Post

he Cyber Crime Investigation Bureau (CCIB) is warning people over a new form of cyber scam in which Android smartphone users are duped into believing they were updating their ThaID app in way that allows the scammers to remotely control their phones and steal their money.

The CCIB was alerted by the Department of Provincial Administration (DPA) that many people have fallen victim to the ruse, said Pol Col Kissana Phathanacharoen, spokesman for the CCIB.

The department is responsible for the ThaID app, a mobile phone application that allows Thai citizens to substitute their ID with a digital version which they can use to receive government services or for identify themselves in certain situations such as when boarding a plane.

 

 

All victims had received an SMS with a link directing them to add a fake ThaID official Line account and were lured into believing they were chatting with a DPA official, said Pol Col Kissana.

During the chat, victims were tricked into giving personal information, six-digit phone passcodes for iBanking apps, and instructed to install an APK (app package) file that let their phones be remotely controlled, he said.

The scammers used this access to transfer money to bank accounts, he said.

These online scammers often change their tricks as they keep conning people, he said.

In the past, they posed as officials from various government organisations and companies including the Revenue Department, Department of Special Investigation, Department of Lands, Provincial Electricity Authority, Provincial Waterworks Authority, Thai Lion Air and Thai Life Insurance.

The CCIB has asked people not to click on links sent via SMS. DPA does not have a Line Official Account and does not have a policy to send SMS messages to people, he said.

[PeterRS]

3 hours ago, reader said:

During the chat, victims were tricked into giving personal information, six-digit phone passcodes for iBanking apps . . .

I doubt if I would fall for such a scam, but you never know. I seem to be one of the few who refuse to do banking on my phone.

[Ruthrieston]

I am also reluctant to download my bank app on my phone.

[omega]

I'm not sure why you are reluctant to do so. Many modern smartphones are very secure for most people.

In every story of a scam you will ever read, you will notice the common element: the victim was tricked into giving information they should not, and following the scammers instructions on installing software that gives the scammers access.

The best defense is essentially being aware of those facts. If someone asks you for sensitive information, this should put you on guard and make you think about how genuine they are. If they ask you to install software, this should raise all the red flags.

These are not high tech criminals. The people with the skills to hack phones are either working for state-level actors, cybersecurity companies or they're ransoming companies for $$millions.

[PeterRS]

9 hours ago, omega said:

I'm not sure why you are reluctant to do so. Many modern smartphones are very secure for most people.

And when my phone gets lost? I can't imagine the hassle required to reinstate banking details.

[omega]

4 hours ago, PeterRS said:

And when my phone gets lost? I can't imagine the hassle required to reinstate banking details.

Obviously I can't speak for your bank, but I'd imagine there would be more hassle if your bank debit card was stolen.

Most banks that offer a banking app will also have a website that you can use to access your account and/or offer telephone banking services. Usually you will have one set of credentials to access your bank account via a banking app, online or telephone.

If your phone is lost or stolen, you can still access your bank account via the website or by calling them. The loss of your phone shouldn't cause your bank to want to change any details.

[vinapu]

On 7/24/2023 at 11:12 AM, PeterRS said:

 I seem to be one of the few who refuse to do banking on my phone.

You are not alone

[reader]

From The Thaiger

Online fraudsters prompt call for halt on unauthorised bank transactions

The Minister of Digital Economy and Society (DES) strongly urged banks to halt unauthorised transactions following a request by their customers. This suggests an effort to mitigate the financial damages inflicted by online fraudsters on unsuspecting victims.

The directive comes in light of the recent enactment of the Royal Decree on Cyber Crime Prevention and Suppression, which came into effect on March 17. The new regulation grants banking institutions the authority to suspend accounts that are suspected to be conduits of online fraudsters. Importantly, this action can be taken without requiring an official order by law enforcement agencies or the affected clients.

Hence, DES Minister Chaiwut Thanakamanusorn highlighted the need for banks to devise mechanisms that aid clients who seemingly have been the victims of scamming.

His admonition arrived following the unsettling account narrated by noted TV news anchor Paweenamai Baikhloi, who spoke about losing over 1 million baht to online fraudsters who posed as officials from the Department of Land. Confirming these details, Paweenamai submitted her complaint to the Phasi Charoen Police on August 9.

According to her account, she was approached by the scammer on Line, which is widely used by Thais for potential fraud because of its anonymity. The perpetrator claimed to be an official who needed to verify her tax details. The scammer was able to extract private information from her after stating the particulars of the land she owned.

Despite successfully fooling her at first, the online fraudsters raised Paweenamai’s suspicions after instructing her to open a link and download a file, which he portrayed as the Department of Land’s official application.

Although she then ceased to comply with their instructions, the criminals by then had emptied her three bank accounts of over 1 million baht, reported Bangkok Post.

Narrating the ordeal, she revealed that upon realising her predicament, her bank initially rejected her plea to freeze her accounts. She was told that only a police complaint could precipitate such action. By the time she managed to gather all the necessary documents, a devastatingly colossal six hours had passed, and the online fraudsters had already deprived her of the funds.

DES Minister Chaiwut cautioned everyone not to hit any dubious links shared via Line chat by these online fraudsters, especially if urged by unknown people masquerading as public agency workers. He reminded that all government departments have been asked not to directly contact their patrons via personal calls.

He further advised individuals to stay informed about the correct websites or software applications of public agencies and banks. This practice can greatly reduce the risk of such scams conducted by online fraudsters.