The UAE Telecommunications Regulatory Authority (TRA) has warned of a new way to defraud Internet users through the use of a “verification code” or so-called one-time password, explaining that this code reaches the user after conducting personal or banking transactions or following the registration on the sites. And access personal accounts on social networking sites
The Commission stated that some persons contacted the users and asked them to disclose the verification code, claiming that they were from certain parties, stressing that the code should not be disclosed to anyone, whatever it may be, and whatever information he said about whom he claims to represent.
The organization «Communications» in awareness bulletins on its pages on social media, the risk of sharing information about the verification code with any other person, pointing out that any other person to obtain the verification code of the user enables him to impersonate the user in various transactions, especially financial, access To his personal data and accounts, which poses a risk to him.
She pointed out that the arrival of a verification code to any person meant that that person was the only one authorized to carry out such personal treatment only.
The CITC stated that the Law on Combating Information Technology Crimes provides for the punishment of anyone who has seized for himself or others unlawfully for money or benefit by using any fraudulent method or taking a false name, and impersonating an incorrect position through the internet or electronic information system.
At the same time, she advised the organization of communications to use a different password for each account. If an account is compromised, the hacker will have only one account with a combination of symbols, including lowercase, uppercase, numbers, and shapes.
The Commission called on users of «Instagram» and «Whatsapp» and «Snapchat» and other social media, using the feature «2-step verification» or two-factor authentication.
However, it showed that it is a feature available on some social media, in order to secure personal accounts and protect the information and personal data on it from theft and penetration, as well as to ensure that the login only through the original user.