Sim swap scam

**IMHO** · 09-May-13, 10:35 AM

BANKING SCAM

You will receive a SMS from a number similar as the one that you get bank notifications from. The SMS will indicate a problem on your
account and a "consultant" will contact you.* When the
"consultant" contacts you he/she will start confirming all your
details: account number and then ask you what kind of a phone you are
using.* The fraudsters will then contact your cell phone
provider and perform a SIM Swap.* The fraudsters will then be
able to receive OTP's (One Time Pins) and/or RVN's (Random Verification Numbers) from your bank and have access to your bank
accounts.* By the time you realize that your cell number is
not working your money will be out of your account.

**ians** · 09-May-13, 11:12 AM

There are articles running on face book about this scam, but according to responses it is not possible, who knows, there is just so much crap going on in the electronic arena you don't know what to believe and not believe.

The bottom line is surely you are not that stupid to give out personal details over the phone. When the bank calls you for example, as what has happened to me, then start asking you what your account number is, come on people why would the bank ask u your account number if they phoning you, its called common sense.

**Dave A** · 09-May-13, 11:26 AM

I've had staff members wander into a branch of our cellular service provider and do a lost/stolen SIM card change/replacement without much drama. Well, let's put it this way, I've had cases where I only hear about it after the fact. Strictly speaking, I feel the service provider should revert to the account holder's official representative first before doing it.

Ultimately the concern when it comes to online banking is your security is not just in the hands of the banks and their processes - it now also relies on the security and processes of the cellular service provider.

**Pap_sak** · 09-May-13, 11:44 AM

Just another reason to bank with Capitec - they do not use a cell phone for authentication...

**ians** · 11-May-13, 07:30 AM

So what you saying Andy is it all boils down to your security network, anti virus system, firewall etc, not just giving away your details over the phone?

I had what must have been my google account hacked, they then attempted to get access to my bank account but it seemed the program you download from standard bank prevented them form gaining access because it popped up as 9 attempts. I took the computer to a company which loaded all sorts of programs and left them to clean out the computer

**IMHO** · 09-May-13, 04:59 PM

I just discovered a shop in Benoni has done network caller ID settings on my number or phone, on 3 May 13 and took out insurance for something? for R5 pm. I live in Klerksdorp and was never near this shop. I instructed, or as Vodacom calls it, escalated the case to be investigated.

People I phone all of a sudden started asking why I call from a private number. I could not correct the problem on the phone's settings and called 082111. That is how I discovered this today.

**IMHO** · 09-May-13, 09:25 PM

Now it is not just email warnings anymore.

http://www.sabc.co.za/news/a/5b17d60...passe-20130905

**Pap_sak** · 10-May-13, 09:48 AM

Decided I might as well decrease my credit at FNB - if I don't use it a figure is might be dangerous having these limits left open IF my account ever gets hacked. So called in - and was quite surprised to be asked my pin number - yes my PIN, something we are told we should NEVER give over the phone. I did not and got put through to an operator - but she wanted to put me back onto the system so that I could put my pin in. This just seems very, very dangerous in my book.... Anyway, will dump that c/ card and just activate being able to buy on the internet with my Capitec card.

**IanF** · 10-May-13, 10:15 AM

Originally Posted by Pap_sak

Decided I might as well decrease my credit at FNB - if I don't use it a figure is might be dangerous having these limits left open IF my account ever gets hacked. So called in - and was quite surprised to be asked my pin number - yes my PIN, something we are told we should NEVER give over the phone. I did not and got put through to an operator - but she wanted to put me back onto the system so that I could put my pin in. This just seems very, very dangerous in my book.... Anyway, will dump that c/ card and just activate being able to buy on the internet with my Capitec card.

I have put in a pin number on the phone keypad with FNB. This was months ago no problems yet

**Justloadit** · 10-May-13, 02:23 PM

Originally Posted by Dave A

I've had staff members wander into a branch of our cellular service provider and do a lost/stolen SIM card change/replacement without much drama. Well, let's put it this way, I've had cases where I only hear about it after the fact. Strictly speaking, I feel the service provider should revert to the account holder's official representative first before doing it.
Ultimately the concern when it comes to online banking is your security is not just in the hands of the banks and their processes - it now also relies on the security and processes of the cellular service provider.

In my experience, if you are on a Pay-As-You-Go this is a simple process to do a SIM swap, while you wait at the Vodascum shop, however, if you have a company contract SIM, you will be required to get a company letter head written request, not that this is difficult to obtain, with a copy of your ID, however if it is a personal contract, your ID is all that is required. Before the SIM swap takes place, a SMS is usually sent to the active SIM stating that a SIM swap has been requested, and if this instruction was not given to contact the service provider immediately to cancel the process.

Originally Posted by Pap_sak

Decided I might as well decrease my credit at FNB - if I don't use it a figure is might be dangerous having these limits left open IF my account ever gets hacked. So called in - and was quite surprised to be asked my pin number - yes my PIN, something we are told we should NEVER give over the phone. I did not and got put through to an operator - but she wanted to put me back onto the system so that I could put my pin in. This just seems very, very dangerous in my book.... Anyway, will dump that c/ card and just activate being able to buy on the internet with my Capitec card.

This is a standard practice with FNB cards, what actually happens, is that you have called the call centre on their number, so the route of the call is from you, you then place your request with the operator, then your call is routed to another secure server, which verifies that the current call is valid. Upon validation, it will return the call to the operator, much like when you purchase on line using a credit card, when the transaction is being made, you are routed to another secure server to make the payment details.
The secure fact here is that you made the call to the call centre, and hopefully you have used the secure number under the FNB banking page after you have successfully logged in. Now if is the other way round, where they call you, then it is a sure thing that you are going to be scammed.