Security Alert for a scam in Bizum posing as Social Security
Bizum: This is how the Spanish PayPal for mobile phones works, which is sweeping our country
Agents assigned to the
Technological Crimes
Group of
the Judicial Police
of the Higher Police Headquarters of La Rioja, alert of a specific type of Scam, through the application of '
Bizum
'.
The key to its success is the immediacy and simplicity of payments, for example between individuals you can spend money in 3 seconds.
When the amount is small or the person to whom money is passed is habitual,
there are banks that do not request any extra pin
.
But yes in large quantities.
Typically, Bizum sends a message with a code to the interested party that they have to enter in order to close the operation.
The maximum amount that can be sent per day is 1,000 euros, but
you can receive up to 2,000 euros
.
Precisely the speed of shipments and these small amounts have made Bizum
an easy target and now it has been involved in different forms of fraud
.
This is the new scam by Bizum
One of the most widespread forms of fraud, reported this week at the La Rioja Superior Headquarters, is the procedure by which an alleged buyer, in this case of a vehicle, contacted the seller of the same, stating that He was interested in his purchase, indicating that he would pay him as a "reservation concept" the amount of 400 euros through the Bizum application, the seller accepting the procedure, although the alleged buyer instead of making the payment, instead sent a request for money with the aim that its victim is the one who sends said amount, accepting it the seller and transferring the amount of 400 euros to the buyer.
Subsequently, the seller, realizing the error, tries to contact the buyer and he does not give any signals, so he has no way of returning the money, going to these police offices with the aim of filing a complaint.
Another of the most widespread examples is where victims receive a phone call from their phone company (supposedly) to lower their bill or offer them gifts.
If they accepted the offer, they have to provide their bank accounts or cards.
The scammers then associate those cards or accounts with Bizum.
As a PIN number is needed to carry out the operations, he has to get the victims to provide it unconsciously, believing that it is a code to activate the operator's offer.
Once they have the phone number, account or card and the PIN, the transfers are made.
Scammers persuade customers to provide their banking credentials, "abusing their good faith."
And with them, subsequently, they operate on your behalf, making transfers from their accounts or with Bizum as the case may be.
TIPS TO AVOID FALLING
It is very easy to follow certain recommendations so that criminals do not deceive you: If bank details have been provided, you should contact the bank directly to take the corresponding security measures and thus avoid additional charges being made.
Regularly monitor what information exists on the Internet about oneself to detect if private data could be used without consent.
If you have installed a program as indicated by the alleged operator, it is advisable to uninstall it and analyze the device with disinfection tools to assess that there really is no risk to later file a complaint at the nearest National Police Headquarters.
'PACKAGE SHIPPING SCAM
'"Good morning, dear customer: Your order was delivered on xxx at the collection point. Check where you can pick up your packages: Link.
"It is recalled from the Higher Headquarters that the scam consisting of receiving an SMS in which they notify of the receipt of a package impersonating a logistics company is being received again and they invite the recipient to install an app to find out where, supposedly, is the package. (Correos, FedEX, DHL, etc). Once this Trojan infects the terminals, it is established as the default application for SMS in order to control it, access the contact list and cause the automatic forwarding of SMS-type messages .
People who are infected with this type of malware, without the owner of the phone noticing, send an SMS to all the contacts in their agenda a message simulating a parcel company with a link. The recipients receive the message in their name (with the one that appears in the contacts of the infected person) and if they proceed to enter the required data through the link, they are also infected, with the possibility that, depending on the message, the data that has entered are banking and suffer, a posteriori, a card charge or access to their online banking.
Another method, very similar to the previous one, is the sending of a falsified SMS sent to the mobile phones of citizens on a package pending collection, which contains a link whose query triggers the download of a malicious application intended to access the terminal data.In this case, the message warns that the receiver has a few hours to confirm the sending through a mobile message, since otherwise, it will be returned to the sender.
After that, a supposed code is received that will have to be sent to a supposed email address.
Finally, it turns out to be an illicit subscription to Premium payment services on various websites that result in fraudulent charges on bank cards or surcharges on telephone bills for receiving premium SMS messages.
ADVICE
In addition to asking companies about those SMS, there are several steps you can take to find out if that tempting message you have received is phishing.
One of the things you can look at is how it is written, since if it includes misspellings or nonsensical phrases it is very likely that it is not a real message.
You can also follow these recommendations so that you do not get caught with this case of scams:
Take a good look at the phone that sends them to you.
Check that same phone number on the Internet beforehand and check that it is legitimate.
If not, you may see warnings on the Net about possible fraud or other scammed users.
Look at the address of the web to which it redirects you. Normally these types of notifications come with a link in which they ask you to enter your data. If the web address of this web page is not of the legitimate company, be careful because it may be similar but never the same: it will include hyphens, numbers, a few more letters, words such as "online", "purchase" that make it look like the original. Go to the original website and compare the domain addresses.
If an institution is supposedly contacting you by phone, ask them to send you a personal email with the same information, tell them that you will attend to them later and check the phone number on the Internet.
In any case, no company or institution should ask you for personal or banking information by phone if you have not been the one who requested the service from the real company.
Check with the sources before giving your data.
These messages convey urgency so you don't have time to react.
Take your time to make the appropriate personal checks, the services that require something from you, they will always give you time for it.
If something is urgent, be suspicious.
According to the criteria of The Trust Project
Know more
Internet
'We have your porn collection' technology: the new favorite form of extortion on the Internet
TechnologyTelegram also has viruses: be very careful with this new scam
TechnologyGoogle tests its new technology to record user data and advertise
See links of interest
Holidays 2021
Home THE WORLD TODAY
Rafa Nadal - Carlos Alcaraz, live
Chelsea - Real Madrid, live