Scammers Are Using Fake SMS Bank Fraud Alerts to Phish Victims, FBI Says
If you get an SMS message supposedly from your bank about a fraud alert, be wary. The FBI has issued a warning about cybercriminals circulating fake fraud alerts to trick victims into handing over their cash.
The scheme tries to scare you into believing the scammers are representatives of your bank. An automated SMS message will appear on your phone, claiming to be a fraud alert from a banking institution. It’ll then ask if you recently made an instant payment in the thousands of dollars.
If the victim responds to the message, the scammers will then proceed to call back by spoofing the 1-800 number from the banking institution. They’ll then claim they work for the bank’s fraud department and do so while speaking in English, without a discernible accent.
To fool their victims, the scammers will resort to researching their victims’ histories to learn their past addresses, Social Security numbers, and the last four digits of their bank accounts. “In many cases, the cyber actors engaged with victims for several days,” the FBI notes.
Once the trust has been established, the scammers will tell victims the fraudulent charge was made on their bank account through a digital instant payment app. "These payment apps are meant for the quick transfer of funds between registered users, with only the recipient's email or mobile number needed to initiate an instant payment transaction," the FBI said.
The scammers will then walk the victim through the various steps to reverse the payment. But in reality, the cybercriminals are trying steal the funds.
“Using the bank's legitimate website or application, the actor instructs the victim to remove their email address from their digital payment app,” the FBI said. “The actor, after asking
Read more on pcmag.com
