How scammers steal card money. A chip is not a panacea: how money is stolen from bank cards. Benefits of bank card insurance


dollars!

  1. and skimming, when fraudsters use readers that are placed on ATMs in order to copy data to make a duplicate of your card (you do not notice them, just insert the card into the ATM, and you are already in the hands of a fraudster, so you need to be extremely careful using street ATMs, where it is easiest for a fraudster to place a reader on an ATM)

In this case, the pin code can be filmed with a mini camera or peeped by one of the scammers, but withdrawing money from such a duplicate is not a problem even without a pin code!

  • and phishing, when your data is simply stolen via the Internet, or they slip you a fake bank page, where you enter your data, transfer it to the same scammers or SMS from number 900. There are many ways (we will write about each separately to warn you that most about the possibilities of scammers and how to protect yourself in these cases).
  • In this article I will talk about a way how they can steal your money from a Sberbank card, which few people know about, and I myself recently stumbled upon it ...


    Having only your Sberbank card number on hand (they are the most vulnerable in this regard), scammers already have the opportunity to steal your money!

    This acceptance applies to Visa Classic and MasterCard Standard cards, all those that can be used to pay on the Internet. Payroll cards such as Maestro and other Momentum are not subject to this technique!

    And the thing is that Sberbank has implemented the ability to transfer money from card to card knowing only its number, everyone actively uses this when settling among themselves.

    It is also possible to find out the name of the cardholder, just make a transfer of the minimum amount through Sberbank online, and in the process of transfer, the last name, first name and patronymic of the person to whom you are making the transfer will come out.

    Thus, knowing the card number, and finding it out as easy as shelling pears, one of the ways is to agree on the purchase of goods on Avito with the condition of transferring to a Sberbank card, the attacker already knows the number and can find out the full name through the online account and pay for any purchase from your card on those payment gateways where CVV (CVC) entry is not required and the MasterCard SecureCode control code is not required.

    Free legal advice:


    Amazon.com, for example, is served in this way, requiring only the card number, owner's name, and expiration date to complete the payment.

    How everything happens with the “help” of Avito!

    • Everything happens as follows, the scammer first needs your card number, he can get it both on Avito (and similar resources), for example, he will agree to buy a phone or other thing with you (if you put up some item on such a service for sale) and ask you for a card number to pay with you (allegedly it will be more convenient for him to purchase your item), and in another way, for example, remember your card number or record it on a micro camera when paying in a regular store, cafe, etc. P.
  • The second step is for the scammer to find out your full name, here it can work as a question to you, to whom to transfer money, thereby. having extracted information from you in a conversation, and the above-mentioned option with transferring money to your card from your online account (he doesn’t even need to complete the transfer, you just need to get to the moment of data verification).
  • Next, the fraudster needs to translate your full name into transliteration, that is, bring your data into the form as it is written on your card, which will not be difficult for him using any online transliteration service.
  • Everything, now the crook is prepared to go spend your money, and for example, goes to the Amazon.com store, where the CVV card (the code that is on back side your card) is not asked when paying for an order, there is no transfer to SecureCode, Sberbank one-time passwords are also not requested. Voila, and you have almost become a victim ... it remains only to find out only two parameters, this is the type of card and the expiration date of the card, and then your money will go uphill.
  • It will not be difficult to find out the type of card, having the card number in front of your eyes, since the number of the international card payment system VISA consists of 16 digits (four groups of four digits) or 13 digits (the first group of four digits and three groups of three). At the same time, VISA card numbers always start with the number “4”, MasterCard card numbers always start with the number “5” and consist of 16 digits, and Maestro card numbers start with the numbers “3”, “5”, “6” (in most cases in Ukraine from the number “6”) and can consist of 13,16 or 19 digits. Therefore, to estimate information by card number to what type your card belongs is a matter of five seconds ...
  • The last step will be the selection of the expiration date, but here, with a simple enumeration, this can be achieved by spending some time making more and more new purchase requests, because the terms for issuing cards are usually 3-4 years, usually for 12 months of the year, this is no more 36 options for enumeration, all the more there is no fool protection, no captcha, no input restrictions, sort through the options until the card is added, it’s not long, 10 minutes maximum, 36 enumerations, and all your money “flew away”!
  • Such a seemingly innocent act, the card number was reported, can lead to financial losses commensurate with the balance of the card, and it can be anything and it’s good for another 500 rubles, and if a thousand rubles ...

    To protect yourself not with such calculations, you can use Cirrus / Maestro Momentum cards for them, which are issued by Sberbank, they are unsuitable for payments on the Internet and fraudsters will not be able to use this loophole even knowing the number and name of the owner.

    Be careful, take care of yourself :)

    And remember, it’s easy to get hold of your data by giving just a card in a cafe for payments, while it is carried back and forth, all data can be rewritten, scanned, you can completely read your card through a special device, and then issue a duplicate of your card in artisanal conditions, and in this case, the scammer will even have the CVV (CVC) code of your card ...

    Free legal advice:


    WANT TO WIN A CASH PRIZE?

    We do giveaways every Wednesday!

    Click the button to receive a coupon to enter the draw every Wednesday until your coupon is played!

    * Coupons are needed in order to use them to participate in drawings on Wednesdays with valuable prizes (the more coupons, the more chances to win valuable prizes).

    **Passwords are needed so that if your coupon wins, you can present your password and collect your winnings.

    Free legal advice:


    With Avito they asked me to give the card number for the transfer, then until what date the validity period. When he asked for three digits, he alerted me. What should I do now?

    Hello, knowing the card number, the name and surname of the owner, the expiration date, you can pay in some online stores. Knowing the CVC code or the code from SMS, you can pay anywhere on the Internet, an attacker can link your card to his account, transfer your money to himself. Call the bank support, clarify this point.

    If I gave the account data, expiration date and bik, can they hack me and transfer money?

    Hello, knowing the card number, full name, validity period, you can pay in some online stores. Knowing the CVC code or the code from SMS, you can pay anywhere, link your card to your account, transfer your money to yourself.

    A friend asked for a card number to transfer money from a Yandex wallet, well, knowing him for a long time without fear, he gave the card number, I received an SMS and I wrote him an SMS, after that he wrote “I was hacked” and deleted the page, after a couple of hours I went to Sberbank online and my money was in place, should I be afraid of anything?

    Free legal advice:


    The card number alone is not enough to access Sberbank online.

    that is, I can not be afraid, for my money?

    If you did not give your full name, term and CVC, then you can not be afraid.

    Didn't you think to call a friend and clarify if he wrote you a request?

    Leave your comment Cancel reply

    Attention! Applications for checking sites are accepted in the "Question-Answer" section; comments to other articles and sections will not be moderated. In order to leave a request, go to the "Question-Answer" section!

    Free legal advice:

    Four ways to steal money from a plastic card, even without the knowledge of the owner. What to do to avoid this?

    Now, with the holidays approaching, many believe that it is better to take money on the card with you in order to avoid theft of large amounts of cash. But are plastic cards really safe? Is it worth keeping large sums of money on them? How to protect yourself so as not to become a victim of fraud?

    It is difficult to imagine a more convenient means of payment than a plastic card: you can not carry cash with you, and pay only as needed. At the same time, you can track your payments on the Internet and keep statistics on expenses.

    Unfortunately, there are not so few ways to use money on someone else's card and they are not as complicated as it might seem. common man. Everyone knows the rule: “Do not keep the pin code of the card next to it” and consider the implementation of this rule sufficient. However, it is not.

    How can you steal money from a plastic card?

    Free legal advice:


    • Use a card with a pin code (password). The owner of the card wrote its pin code on the card or put it in the wallet, and lost the card with the wallet. An attacker can withdraw cash from an ATM at any time. If the bank offers to come up with a pin code yourself, do not write easy-to-guess passwords: the year of your birth (your documents may also be in the hands of a criminal), simple sequences of characters like 1111.
    • Use the card without a password: here are several ways to steal money:
      • Using your card to make payments at a store that does not require a PIN code, when the criminal is impersonating the cardholder;
      • Use of card data (card number, holder's name, expiration date and CVV code on reverse side cards (last three digits) for payments via the Internet. This data is enough to pay with your card. For example, this data is requested by hotel booking sites or hotels themselves in order to make a hotel reservation. At the same time, you do not know which employees work at the hotel, and how securely the hotel email is protected. That is, the data can be used in the future. You will already leave the hotel, and in a year some amount may disappear from the card, or 200 rubles each may disappear from time to time, and you will not even see this and take no action. The same thing in a restaurant or cafe: to pay with a card, you hand it over to the waiter, and he takes it to the cashier and only then returns it to you. What is he doing at this moment with the card?
      • Scanning the magnetic tape and making a copy of the card. This is a technically complex, but also quite a working way to steal money from a card. In remote ATMs, in unreliable stores, attackers install additional equipment that reads the pin code and card. Therefore, always use ATMs installed in banks where there are video cameras.
    • Writing off money by virus applications on smartphones and tablets. A program can be quietly installed on the device that remembers the login and password for entering the Internet bank and blocks SMS messages coming to the number used in the tablet. Thus, money can be debited, and the user of the account will not see any SMS messages about it. To protect yourself from this type of theft, you need to install an antivirus program on the device and do not use a SIM card with a phone number in the device.

    As you can see, there are many ways, and they are not very complicated, especially with card data: telling someone the card number and full name of the holder - put the security of their funds at risk.

    Rules for the use of plastic cards. How to protect yourself from theft of money from the card?

    • Never keep the PIN code of the card next to the card itself, but rather remember it.
    • Never share your PIN code with anyone, including employees of banks, shops, colleagues and even relatives. Are you sure that your friends will be able to ensure the security of the card and pin code just like you? Many banks allow you to make several cards for one account with a spending limit: if you need to transfer the card to other people, just make a separate card for them and set a limit.
    • Never share your card details with anyone: by phone, email, etc. If you need to use maps on the Internet,
      • firstly, use only trusted stores and trusted payment systems;
      • secondly, it is advisable to have a separate card for making such payments and replenish its balance only as needed. For example, you book a hotel for a few rubles, went to the terminal, replenished the card for this amount, and entered data on the Internet.
    • Do not lose sight of your card, do not let it be carried away, taken away, etc. For payments in shops and cafes, it is also better to use a separate card, on which large amounts of money will not be stored.
    • Enable SMS notification of all card transactions. As soon as you see incomprehensible payments, immediately block the card. To do this, keep at hand the phone numbers of your bank, by which you can block the card.
    • If you need to give your card number over the phone (to your bank staff), then make sure that no one is listening in on you.
    • Keep all receipts that the ATM gives you as proof of transactions.

    Of course, banks must ensure the safety of funds on the card, but if the owner himself behaves carelessly, then no security systems will save him. Be vigilant when using your cards, use the services that banks offer to track the movement of funds.

    12+ Mass media registration certificate: El No. FSot 20.08.2010 Issued by the Federal Service for Supervision of Communications, Information Technology and Mass Media.

    Editorial address: Nizhny Novgorod, st. Rayevsky 15-45

    Free legal advice:


    Founder address: Nizhny Novgorod, st. Rayevsky 15-45

    Founder, Chief Editor: Pashkova Ekaterina Ivanovna

    Contacts: ,

    Copying site materials is strictly prohibited, regularly monitored and prosecuted.

    CriminalNews

    1000 and 1 way to steal money from a Sbe card.

    • Like
    • I do not like

    Free legal advice:


    Keeping money in Sberbank seems to be the most reliable option, while the Central Bank closes several banks every day. The Green Elephant will certainly not lose his license. But often the Green Elephant turns out to be more dangerous than the Green Snake, and his clients are left with zeroed accounts. If a bank’s license is revoked, you get up to 1.4 million from the DIA, if fraudsters withdraw money from your Sberbank accounts, the chances are 50/50.

    Grandfather's pension was withdrawn even before he received a debit card, and a young mother who sold a stroller on Avito was withdrawn all the money from the deposit. In times of crisis, the theft of money from the accounts of Sberbank takes on a massive character. Let's see how money is most often withdrawn, who is to blame for this - Sberbank, customers or cunning scammers. What you need to do in order not to become a victim of intruders, as well as where to run if money is rapidly leaving your account.

    Skimming - everything is more sophisticated

    Skimmers are readers that scammers install on ATMs in order to create a duplicate card and withdraw money from it. In addition to a duplicate magnetic strip, scammers seek to get a PIN code, most often with the help of a microscopic camera. However, even without a PIN code, card data can be used to withdraw funds from it.

    Why are more stolen from Sberbank customers?

    Free legal advice:


    “I was at work when I received a message that my Visa card was blocked. I immediately called Sberbank and they told me that the card was blocked due to possible fraudulent activities. Of course, I went to the bank, wrote an application for reissue and calmed down. About disappearance Money I found out 2 days later, when I discovered that a significant amount of rubles appeared on the Momentum card, which I managed to withdraw, the scammers closed the deposit on the passbook, while Sberbank withdrew its commission 9434.62 for the early termination of the Manage deposit agreement, and transferred,44 on the Momentum card, scammers withdrew 5 times 3,000 rubles, then chopped rubles, rubles - all withdrawn rubles. "

    A large number of ATMs and customers leads to the fact that they often become victims of fraudsters, but there are other objective reasons.

    It would seem that the chip on the card should protect against skimmers, because it is more difficult to copy. All cards in Russia are equipped with chips, but not all ATMs read them. In most Sberbank ATMs, you can just withdraw money from a duplicate card without a chip. Even if it is not possible to withdraw money, using a duplicate card, fraudsters can connect their phone number to a mobile bank, get access to the Internet bank and one-time passwords to confirm transactions.

    Cases of skimming in recent times become more frequent and the victims are customers of all banks. However, access to the Sberbnka card gives access to all customer accounts and allows you not only to reset the card, but also withdraw money from the deposit, savings book and credit card.

    How to protect yourself from skimming?

    Free legal advice:


    • Choose ATMs in a bank branch, and not in a dark corner of a store or on the street.
    • Inspect the card reader and keyboard and refuse the operation if something is loose, traces of glue are visible, or the appearance of the ATM is suspicious.
    • Cover the keypad with your hand when entering the PIN code.
    • Read the article on how to identify an ATM with a skimmer.
    • At the first suspicion that the card has been compromised, call the bank and block the card.

    What to do if your money is stolen?

    If the money has already been stolen, after blocking the card, it’s faster to run to the bank and write a statement.

    Will the money be returned?

    In most cases, Sberbank returns money if you are a victim of skimmers, and you still have the original card. The main thing is to apply for a refund immediately. But keep in mind that the actual return period may take from 45 days to six months.

    Phishing and social engineering

    Free legal advice:


    A classic example of phishing is when you receive an e-mail from a bank, follow the link and you get to a completely different site, which is very similar to the bank's site. The login and password immediately go to the attackers, and the money flows into their pockets. The internet bank login page can be spoofed if your computer or smartphone is infected with viruses.

    However, today's customers of Sberbank suffer more not from hackers who create fake pages, but from those who swindle data to access the Internet bank by cunning. For example, you may receive an SMS about blocking the card. You make a phone call from SMS, and a scammer picks up the phone and asks you to enter a one-time password to confirm your identity.

    Another common situation: a buyer with Avito wants to send you an advance payment to a Sberbank card. You report the card number and its validity period, after a while the buyer calls back and asks for a code from SMS, citing various reasons - the money went to the wrong place, he withdrew instead of sending and wants to return ...

    Why does this happen more often in Sberbank?

    “I decided to log in to Sberbank Online, but I couldn’t log in, because Sberbank apologized for engineering works and promised to resume work in the near future. At 13.30 I logged into Sberbank Online again. This time everything was fine, I received an SMS about successful login, but a window opened asking for my personal data (due to a failure in the bank's security system), I entered it, because everything happened on the official website of Sberbank. And then something started. A window opened asking you to cancel the operation (I was sent an SMS with a password to cancel). I wanted to call Sberbank, but a man called me, introduced himself as an employee of Sberbank and said that there was a failure and you need to follow the instructions that appear on the screen and come via SMS messages. Since one matched the other, I entered the password to cancel the operation. The window fell out again, SMS came again, this happened three more times. unable to stand it, I left Sberbank Online, tried to log in again, but could not. Then I called the bank employee who called me, but his phone was blocked. I checked the phone with the Sberbank phone, and it turned out that it differs from the Sberbank one by one digit. Sberbank has a zero after six fives, but here at the beginning. I got through to Sberbank and then they killed me on the spot. ABOUT 700 THOUSAND RUBLES LEAKED FROM MY CARD!”

    Free legal advice:


    A large number of clients who did not choose the bank themselves are pensioners, payroll clients. Often these people are not very technically savvy, which means it is easier to confuse them in order to get the right information. But there is another reason.

    Knowing the card number and the phone number to which it is linked, you can register again with Sberbank Online - the fraudster only has to receive codes from SMS. You can create a payment template and withdraw money from it without SMS confirmation. It is especially dangerous that through Sberbank online scammers get access to all accounts, and not just card ones.

    How not to fall for the bait?

    In order not to become a victim of scammers, you need to be very careful and suspicious:

    • When entering the Internet bank, pay attention to the correct spelling of the site address and a secure connection - https://online.sberbank.ru/
    • If, when entering the Internet bank, you need to enter something other than your login and password / one-time password, this is not the Sberbank website.
    • Do not tell anyone the codes from SMS, no matter what they say on the other end of the wire. Sberbank never requires codes to cancel or cancel an operation - there is simply no such possibility.
    • Do not tell your card number to strangers, and do not tell anyone the expiration date and never - to send a transfer from card to card, you do not need its expiration date.
    • If you get a call from Sberbank, tighten up - it's your "privilege" to call the call center and wait on the wire. Sberbank calls only if it wants to sell you something.

    What to do?

    Free legal advice:


    Block the card, write a statement to the bank and the police.

    Will the money be returned?

    If you yourself reported the code from SMS to the attackers, then you gave them your consent to write off. In this case, Sberbank will not return the money.

    It is enough to know the card number

    The card number, its validity period and CVV code allow you to pay for purchases via the Internet and make money transfers through special services. The card number can be compromised, for example, when paying in a cafe, when the waiter took your card behind the bar to pay. People easily communicate Sberbank card numbers to each other to send transfers from card to card, for example, when making purchases on Avito, From hand to hand or on forums. If you used an ATM with a skimmer installed (see the first paragraph), the card data will also fall into the hands of hackers.

    Free legal advice:


    Knowing only the card number, attackers can pick up the expiration date and make a purchase on some sites that do not require a CVV code (for example, Amazon.com), in addition, the code on the back of the card is not required for small payments, for example, to pay for a cell phone. connections. Not small amounts are spent on the phone numbers of Beeline subscribers from Sberbank cards.

    Most online stores accept payments through the 3D-secure protocol. In this case, the operation must be confirmed with a one-time password from SMS. But first, it is required not everywhere. Secondly, a number of cases have been recorded when attackers somehow obtained one-time passwords. Either a leak on the side of the bank, or on the side of the operator ...

    Why is Sberbank more dangerous?

    “My story is this: on a free site, I wrote an ad for the sale of a baby stroller. Today a young man called and said that he was ready to buy this product, but would pay by transfer to a Sberbank card. He asked me to dictate my card number, since she gave me her husband's card number, there were about 500 rubles. So they just said the card number, as on tel. husband received an SMS that the amount of 7 rubles. 50 kopecks, was withdrawn through RUS MOSCOW BEELINE MTOPUP. Naturally, I immediately guessed what was the matter, but after 15 seconds, 100 rubles. left, then again 200 and again 100. So we have 75 rubles left. on the card!

    Sberbank customers suffer more often due to the fact that it is very convenient to transfer payments from a card to a Sberbank card without a commission on the card number. Via internet banking or ATM. Therefore, the card number is disclosed to each potential buyer.

    Free legal advice:


    • Do not disclose your card number to third parties.
    • Do not make purchases in suspicious online stores, so as not to compromise the number.
    • Block the card if it is lost.
    • Set limits on spending transactions on the Internet and a ban on payments abroad.

    If the money was taken

    Write a statement to the bank and to the police.

    chances of a return

    If there was a transaction with 3D-secure, the bank will not voluntarily return the money. If not, most likely the decision will be in your favor.

    Free legal advice:


    Mobile banking is a black hole

    Here we will focus only on Sberbank.

    The Sberbank mobile bank package is an SMS informing about all transactions plus the ability to send short commands to special numbers for making payments (for a phone, transfer from card to card, etc.). The economy package only informs about the entrance to Sberbank online, sends one-time passwords and also makes it possible to make payments via SMS, but with a higher commission. Connecting a mobile bank is a prerequisite for accessing remote banking services (to Internet banking, in other words). Another mandatory condition is the presence of a card and the conclusion of a UDBO (universal banking service agreement), which links all your accounts and binds them to a number mobile phone. This is where miracles begin.

    Another number may be linked to the mobile bank - not at all the one indicated in the written application or differing from it by one digit. As a rule, here the error of the employee is accidental or deliberate.

    Having become the “happy owner” of someone’s mobile bank, a person can gradually withdraw money to his phone. And the owner of the account will not even suspect this, because he does not receive SMS messages.

    Free legal advice:


    Perhaps, when you received the card, you did not write an application for connecting a mobile bank. And yet it was connected to a number unknown to you, not without the participation of bank employees.

    If there is written confirmation that the number turned out to be different, the money will be returned to you, but you will have to prove it.

    It often happens that SMS came and came, and then once - and stopped. Program crash or? In any case, a reason to be wary and go to the bank.

    A second number can be linked to the mobile bank. You can connect the second number through an ATM, for example, using a copy of the card (see the first paragraph). In this case, the first - the main number will no longer receive messages.

    You changed your phone number or the operator transferred it to another subscriber, but you did not write an application to disconnect the old one and connect the new number. Or the employee accepted the application for disconnection, but forgot to press the key.

    Free legal advice:


    Perhaps you closed all the cards and lost your phone, and a year later you got a Sberbank card again. This is where the old number surfaced, which you have already forgotten about. Withdrawing money through old numbers linked to a mobile bank is quite common.

    Please note that when changing your phone number, you need to write 2 applications! To disconnect the old and connect the new. Otherwise, up to 8 phone numbers can be linked to the mobile bank!

    The sad news is that the bank will not return the money withdrawn in this way. The only option is if you can prove that the application for disconnection really was, but the employees did not disconnect the number.

    Why does this happen more often with Sberbank clients?

    SMS informing and mobile banking are arranged differently in different banks, but Sberbank customers suffer more often for several reasons:

    • It is very easy to make payments for large amounts through mobile banking. In this case, you do not even need to know the card details.
    • It is difficult to resist the temptation to withdraw money from someone else's card if you receive SMS messages day and night, even if you did not initially plan to rob someone.
    • Employees receive bonuses for connecting additional services, so they also connect a mobile bank to those who did not ask.
    • Mobile banking is connected to everyone and everyone, although it is mainly used by scammers.

    New trend - SIM card replacement

    Your SIM stops working, money disappears from your accounts, and then it turns out that someone got a new SIM card in one of the offices of Beeline, MTS or another operator ...

    Sometimes attackers already have your passport data (the leak may be in a communication salon), card number (skimming) and access to Sberbank online, sometimes they use a mobile bank to withdraw what they can through it, then connect the Internet bank and withdraw rest.

    Money is withdrawn very quickly through services for transferring from a card to a card of a third-party bank (it is enough for a fraudster to know the card number and choose the expiration date), to a prepaid Kukuruz card (you need to know all the card details), to a Sberbank card (you need to have or restore data to enter Sberbank Online).

    Interestingly, Sberbank blocks the card only the next day. Of course, there is a huge hole here on the side of mobile operators - they reissue cards using fake passports, powers of attorney, pension certificates without an application, without trying to contact the real owner of the SIM card. Yes, and employees are often involved. But Sberbank is not without holes.

    “They stole money from my wife’s card. Everything, like the same poor fellows: someone comes to the mobile operator and changes the SIM card for himself. Then the person loses contact with the bank, while the attackers transfer money to Corn (in my case, to Novosibirsk). The next (.) day, Sberbank sends an SMS that the account is blocked. But there is no more money on it. The login password, according to Sberbank, the attackers knew.

    Why Sberbank?

    • When replacing a SIM card, the phone number remains the same, but the IMSI code of the SIM card changes. By law, banks must track it, but this process works very crookedly - they block access to Sberbank Online for those who have not changed the SIM card, or they block it 3 months after the replacement, and the number of frauds associated with replacing the SIM card is growing rapidly. There is an opinion that checking the IMSI code in Sberbank is simply disabled, while it works fine in a number of other banks.
    • For some reason, the rapid withdrawal of funds from all accounts with several transactions does not arouse suspicion in the bank and does not lead to timely blocking of the card. This suggests that the anti-fraud system is working very poorly.

    What to do?

    The procedure for the victim is standard - blocking the card, applying to the bank, and then, most likely, to the court - to the mobile operator and to the bank.

    Will the money be returned?

    They rarely return voluntarily, the practice is contradictory through the court. If fraudsters used your login and password to access the Internet bank, then the money will most likely not be returned.

    An 18-year-old waitress from a Moscow restaurant took pictures of customer cards and, using their data - full name, card number, expiration date and CVV / CVC code, paid for her purchases in online stores. This is one of the last, but far from the only case. Judging by the news feeds of Russian and regional media, almost every day at least one Russian faces a similar problem - theft of money from bank card. Sravni.ru gives instructions on how to return funds stolen by scammers.

    Who will the bank return the money to?

    By law, the bank is obliged to return to the client the money illegally debited by fraudsters from his card, subject to two conditions:

    • the client did not violate the rules for the safe use of the card;
    • the client informed the bank about the unauthorized transaction no later than one day after receiving the bank's notification of such an operation.

    But all this will fade into the background if the bank itself did not inform the client about the operation. The fact is that the bank is obliged to notify customers free of charge of any card transactions, the method of informing is prescribed in the contract (this can be SMS notifications, emails, informing through the Internet bank, etc.). If this condition is violated, the credit institution is obliged to compensate its client for losses in full.

    What to do if money is missing from the card?

    As Alexander Borodkin, head of the VTB 24 plastic card department, told Sravni.ru, it is impossible to cancel an unauthorized operation, but it is quite often possible to return funds to a client. It is only important to react quickly.

    And you can do it like this:

    Step one. Urgently call the bank (the phone number is indicated on the back of the bank card and on the official website of the credit card), report unauthorized debiting of money and block the card. Fraudsters can try again and steal from the card again.

    Step two. Write an application to the bank to protest an unauthorized transaction. But you should hurry - you need to have time to leave a claim during the day following the day when the fraud became known.

    According to Borodkin, this can be done by phone or at a branch, depending on each specific bank.

    You can find out if the bank accepts claims by phone or if you need a written application from the client left directly at the bank's office, you can contact the call center operator of the credit organization through which the card was blocked.

    But many experts still advise you to personally come to the bank so that the cardholder has a certified copy of his application in his hands (a bank employee must put a mark on the acceptance of the application on it). It will come in handy if the case goes to trial.

    Step three. Immediately contact the police and file a statement about fraudulent activities.

    Step four. Wait for the results of the bank's investigation and the return of the money.

    How long does it take for the bank to return the money?

    The question is difficult. The bank is obliged to consider the client's claim within 30 days, but the terms for the return of money are not specified in the law. In some cases, customers have to wait only a few days, in others - several months.

    “The process is lengthy and takes from one to several months. Do not forget that in addition to the bank and the payment system, law enforcement agencies are also involved in it, which start a criminal case, search for criminals, take the case to court, etc., ”explains Alexander Borodkin.

    In what case can the bank not return the money?

    If the bank refused to compensate the client for the stolen funds, then he has evidence that the client himself is to blame for this. And it’s not at all about the fact that the card owner himself was in collusion with fraudsters, he simply violated the rules for the safe use of a bank card. For example, scammers called him and, posing as bank employees, "fished out" confidential information: login and password for entering the Internet bank, password that came via SMS, CVC code, PIN code, etc. Or, say, the client lost the card, but did not notify the bank and did not block it.


    Another reason for refusal is that the client violated the deadline and did not file an application with the bank about the theft of money from the card within the day allotted to him by law after the fact of fraud became known to him).

    What to do if the bank refused to return the money?

    Go to court and challenge the decision of the bank and the payment system.

    How to protect your card from scammers?

    “Put it in the safe and never take it out. But seriously, there are a lot of security enhancements for using the card (chip on the card / SMS notifications / 3D security, etc.), there are tools for 100% return of stolen amounts (insurance), there are tools for limiting the amount of spending (limits on the card) . And many other tools that you should check with your issuing bank, ”recommends the head of the VTB 24 plastic card department.

    Tips Compare.ru:

    • do not disclose confidential data to anyone (PIN code, data for entering the Internet bank, passwords for confirming transactions that come via SMS);
    • do not answer SMS and do not call back the number indicated in the message if they ask for personal data on the card or they come from a number different from the one from which the bank usually writes to you;
    • install an antivirus on the computer from which you log into the Internet bank and update it regularly;
    • cover the keyboard with your hand when entering a PIN code at an ATM or paying for purchases with a card in a store, cafe;
    • check the ATM before use for suspicious overlays on the keyboard, card reader;
    • do not use the card to pay in dubious online stores (often scammers launch fake sites that look very similar to well-known resources);
    • set limits on the card for cash withdrawals and for non-cash payments;
    • it is better to have a separate card for paying online and store a small amount of money on it;
    • if the phone number to which the mobile bank is connected, the SMS notification is attached, changes, then you must immediately notify the bank about this.

    It is difficult to imagine a more convenient means of payment than a plastic card: you can not carry cash with you, and pay only as needed. At the same time, you can track your payments on the Internet and keep statistics on expenses.

    Unfortunately, there are not so few ways to use money on someone else's card and they are not as complicated as it might seem to an ordinary person. Everyone knows the rule: “Do not keep the pin code of the card next to it” and consider the implementation of this rule sufficient. However, it is not.

    How can you steal money from a plastic card?

    • Use a card with a pin code (password). The owner of the card wrote its pin code on the card or put it in the wallet, and lost the card with the wallet. An attacker can withdraw cash from an ATM at any time. If the bank offers to come up with a pin code yourself, do not write easy-to-guess passwords: the year of your birth (your documents may also be in the hands of a criminal), simple sequences of characters like 1111.
    • Use the card without a password: here are some ways to steal money:
      • Using Your Card to make payments in a store that does not require a pin code, when the criminal impersonates the cardholder;
      • Use of card data(card number, owner name, expiration date and CVV code on the back of the card (the last three digits) for payments via the Internet. This data is enough to pay with your card. For example, this data is requested by hotel booking sites or hotels themselves to make reservation of a hotel room. At the same time, you do not know which employees work at the hotel, and how the hotel’s e-mail is securely protected. That is, the data can be used in the future. You will already leave the hotel, and in a year some amount may disappear from the card, or periodically disappearing rubles at 200, and you don’t even see it and don’t take any action.The same thing in a restaurant or cafe: to pay with a card, you pass it to the waiter, and he takes it to the cashier and only then returns it to you.What he does at this point with the card?
      • Scanning the magnetic tape and making a copy of the card. This is a technically complex, but also quite a working way to steal money from a card. In remote ATMs, in unreliable stores, attackers install additional equipment that reads the pin code and card. Therefore, always use ATMs installed in banks where there are video cameras.
    • Writing off money by virus applications on smartphones and tablets. A program can be quietly installed on the device that remembers the login and password for entering the Internet bank and blocks SMS messages coming to the number used in the tablet. Thus, money can be debited, and the user of the account will not see any SMS messages about it. To protect yourself from this type of theft, you need to install an antivirus program on the device and do not use a SIM card with a phone number in the device.

    As you can see, there are many ways, and they are not very complicated, especially with card data: if you tell someone the card number and the full name of the holder, you endanger the security of your funds.

    Rules for the use of plastic cards. How to protect yourself from theft of money from the card?

    • Never keep the PIN code of the card next to the card itself, but rather remember it.
    • Never share your PIN code with anyone, including employees of banks, shops, colleagues and even relatives. Are you sure that your friends will be able to ensure the security of the card and pin code just like you? Many banks allow you to make several cards for one account with a spending limit: if you need to transfer the card to other people, just make a separate card for them and set a limit.
    • Never share your card details with anyone: by phone, email, etc. If you need to use maps on the Internet,
      • firstly, use only trusted stores and trusted payment systems;
      • secondly, it is advisable to have a separate card for making such payments and replenish its balance only as needed. For example, you book a hotel for 20,000 rubles, go to the terminal, top up the card for this amount, and enter data on the Internet.
    • Do not lose sight of your card, do not let it be carried away, taken away, etc. For payments in shops and cafes, it is also better to use a separate card, on which large amounts of money will not be stored.
    • Enable SMS notification of all card transactions. As soon as you see incomprehensible payments, immediately block the card. To do this, keep at hand the phone numbers of your bank, by which you can block the card.
    • If you need to give your card number over the phone (to your bank staff), then make sure that no one is listening in on you.
    • Keep all receipts that the ATM gives you as proof of transactions.

    Of course, banks must ensure the safety of funds on the card, but if the owner himself behaves carelessly, then no security systems will save him. Be vigilant when using your cards, use the services that banks offer to track the movement of funds.

    So, let's talk about 9 ways to steal money from your card

    skimming

    One of the most common ways to steal money from a bank card is to copy it. And for this, skimming was invented. With this method, thieves copy the data of a bank card (more precisely, only the magnetic tape from it) and then they can make a copy in order to then withdraw money from it.

    For copying, a special device is used - a skimmer. It is a small pad on the ATM card reader. As a rule, this overlay is almost imperceptible. Often, an overlay keyboard is also added to it, which should “remember” the entered password. Or scammers install a small camera aimed at the keyboard. She can look whatever she wants. By the way, the skimmer can be installed anywhere - on the door of the bank, if you need to enter it with a card, at terminals for paying for services and goods (for example, in a cafe), and so on.

    There are several ways to protect yourself from skimming: carefully inspect the terminals and ATMs into which you plan to put your card. If there is something suspicious in them - for example, the card reader is suspiciously dangling, or the keyboard is skewed, or something extra sticks out on the case - then it's better to look for another device. Most often, skimmers are installed in outdoor ATMs and standing indoors without cameras and security. Therefore, it is better to walk to the nearest bank and withdraw money from local terminals. By the way, some banks reward those who find skimmers. So you can call the hotline and describe the problem.

    social engineering

    As you know, the human factor can destroy even the most secure system. And scammers take advantage of this. They often brazenly deceive people, taking advantage of the financial illiteracy and gullibility of a person.

    The most common way: scammers call the victim and pretend to be bank employees, police officers, tax authorities - and anyone else who may be interested in a bank card. And under a plausible pretext, they demand to give their full name, card number, CVV / CVC codes, expiration date, and so on. And as soon as the victim names the information, she can say goodbye to the money. Because you can “take away” them even without an SMS password, if you find a way. By the way, in some cases, this can also be done on trading floors - for example, if you are selling something, then a “buyer” can call and ask for data in order to throw money off. In this case, you can only give the card number. And that is undesirable. And often calls are replaced by SMS messages with a request to call back.

    In order not to become a victim of social engineering, remember: you should never give bank card details! Anyone, even her number. And you should not call back the numbers from the SMS - either they will withdraw money from the phone, or they will try to breed it for the above information. A bank employee will not ask for this data - he does not need it. In rare cases, it may ask you to give the last four digits of the card number and the code word - no more! And other services do not even have the right to require such information. So no need to be deceived. Any request for card details is a blatant fraud that will lead to the theft of money. And if you are selling something, then it’s better to get a separate card for receiving money from buyers (and immediately remove or transfer them from there) or link it to a phone number - you can also send money using it.

    "Letters of happiness" to mail and email

    Another way that allows deceivers to play on human gullibility and inattention is to send letters. In this case, the offender can impersonate anyone - for example, a bank representative. Or for a well-known brand that decided to send you (and only you) a delicious discount on their products. Or anyone else.

    How does this happen? The scammer sends a letter to a potential victim. In it, he describes what he generally needs. For example, if this is some popular store, then the letter will describe in great detail and enticingly what benefits the buyer will receive. If the bank - then the text will contain threats to block the card, account, withdraw all the money and set the collectors. Etc. And at the end there will be a link to a fraudulent site where you will need to enter bank card details or (even more brazenly) login and password from your online bank account.

    In order not to become a victim of “letters of happiness”, never follow suspicious links from letters and do not enter any data from a card, personal account, and so on on strange sites. To receive discounts, verify your identity, and so on, you do not need a password from your personal Internet banking account or plastic card data.

    Phishing attacks

    A subspecies of social engineering, designed as an independent method of deception. Aimed at the inattention of users who rarely check the address bar of the site when entering data.

    When using this method, scammers will force you to enter your card details on a fake site at any cost. This can be done in various ways. For example, you stumble upon an online store with attractive prices and decide to buy something there. And in the purchase form you will be asked to enter all the necessary data. Or, as a result of some actions, instead of the page of your bank, you will be taken to its exact copy. And it will be possible to notice the difference only by a small typo in the site address or a domain zone substitution (that is, instead of the usual ru or com, the address will end with su, ua, pro, and so on). For example, the site address will not look like online.sberbank.ru, but onliine.sberbank.ru, online.sberbank.su, online.sberbanl.ru, and so on. We’ll clarify right away that you can enter data on AliExpress. But only if it's really AliExpress, and not an exact copy of a Chinese online store. Yes, popular online stores can also fake for the same purpose.

    How to avoid becoming a victim of phishing? Always be very careful about the site where you pay with a card or where you enter data from it. When paying for an order in an online store, you will always be transferred to online checkout sites - for example, to Yandex. Kassa" or the like. Check the website addresses of these cash desks carefully! Ideally, it is better to use a virtual card, to which you transfer money strictly for the purchase being made - even if it is compromised, there will be nothing to take from there.

    viral infection

    Electronic systems, unfortunately, are not safe. And scammers also use this to prevent your money from staying with you. A virus can get onto a computer or smartphone in any way: you accidentally went to the wrong site, downloaded an application from a third-party source, opened an infected file ... In general, whatever you want. Viruses and spyware can be caught even on apparently trustworthy sites - for example, scammers often hack resources and put infected links, banners and redirects on them. And often viral links come in SMS messages and by mail.

    To prevent viruses from getting onto your computer or smartphone, you need to follow a few rules. First, be sure to use antivirus programs. Preferably time-tested - Kaspersky Anti-Virus, Doctor Web and the like. Free ones are rarely updated and have many security holes. Don't forget to update your antiviruses. Also, try not to click on suspicious links from emails, messages, and websites in general.

    Bank card theft

    In some cases, it is enough for attackers to gain access to the card itself in order to withdraw money from it. And no complex passwords, locks and caution will help. This problem is especially acute with the advent of cards that have the ability to pay money contactlessly.

    As a rule, scammers steal a wallet and use bank cards in stores where there are contactless payment terminals. Moreover, they buy something inexpensive - up to a thousand rubles, so as not to enter a password (this is the limit without entering a pin code on most cards).

    How to act so as not to lose money? Keep the card in an inaccessible place where it is difficult to pull it out. Do not carry your wallet in the back pocket of trousers or jeans, in outer pockets on raincoats, jackets and backpacks. In general, hide it deeper. On cards with contactless payment, be sure to set a lower limit. Yes, you will constantly have to enter a password when paying, which negates the convenience of contactless payment. But stealing in this way will be much more difficult.

    Phone theft

    The easiest way to get access to your card is to steal your phone. But it won't work in all cases. At a minimum, the fraudster must be sure that the card is connected to the number of the stolen mobile phone.

    To get access to a bank card or even a personal account in an online bank, it is enough to have a current phone number. It is not even necessary to know which bank it is tied to - you can use it everywhere, somewhere and even shoot. When a scammer steals a phone, he gets access to the victim's SMS messages. And through them you can quickly withdraw all the money to another card if the phone is tied to the card. Or “recover” the password on online banking sites and steal all the money from there.

    How to protect yourself? Unfortunately, you cannot be 100% sure that the phone will not be stolen. Even the most hidden places are not an obstacle for a professional thief. And even from the hands of a mobile phone can simply snatch and run away with it. Or simply rob - here you yourself will give everything you have, it’s a hunt to live. But you can minimize the risk of losing money. For example, do not tie your phone to a mobile bank - use online applications instead. They are all under passwords, which are very difficult to crack. Be sure to put a password on the smartphone itself - it is very difficult to bypass it. And be sure to link your Android and iOS devices to your Google and iCloud accounts, respectively. Through them, you can remotely block the gadget, and no one can use it. And never store passwords from a card or personal account on a smartphone in the form of SMS, notes, and so on - this will make it easier for fraudsters to access money.

    ATM damage

    A method that allows you to steal a card or money that the owner tried to withdraw through the device. What does it look like? The cardholder is trying to withdraw money from an ATM. But the terminal does not give them to him. That is, the slot where the bills should pop out opens and ... nothing. As a rule, after this, the person gets upset, moves away from the ATM and starts calling the bank. And at this time, a cunning scammer comes up and takes the money that the ATM nevertheless counted out, but could not give out due to the fact that the slot was blocked, for example, with adhesive tape or some kind of stick. Sometimes scammers break an ATM so that it not only does not dispense money, but also temporarily chews up the card.

    How not to fall for the bait? If the ATM did not dispense money, be sure to check if the passage for banknotes is blocked by tape or something else. It will not be shameful to bend over and shine a flashlight or at least a phone into the slot. If there is still no money, do not leave the ATM - take the check and call the bank's support service, describing the problem in detail. The same applies to non-issuance of a card - do not leave, but wait a while and call the bank. And if there is a queue behind you, then just say that the ATM is broken.

    Contactless readers

    A rather rare method, overgrown with myths and legends. Rumor has it that in large cities, people periodically walk on public transport, shops and just along the streets with a device in their pocket that can read card data using a contactless chip. It is enough to bring such a reader 5-10 centimeters closer to the card - and the necessary information will go to the scammers. And then they will make a copy of the map and use it for their criminal purposes. Or they simply write off some small amounts at high speed.

    Such a method really exists and is used. But, as a rule, not to random victims, but to those people who definitely have money on their cards. Because it is quite expensive to assemble such a terminal - you will have to spend $100 or more on components. And the risks of getting caught with such a machine are considerable. Therefore, thieves act for sure - they wipe themselves, for example, at airports in VIP areas (rarely), expensive stores, and so on.

    In general, this type of theft is rarely used. But if you want to play it safe and accurately protect the card from contactless reading, then take it into service. To do this, just wrap it in a piece of foil. Or, if you don’t want to embarrass yourself by rustling foil in the store, you can buy a stylish metal case for a bank card. Better yet, use your smartphone for contactless payment or refuse cards with this technology altogether.

    We sincerely hope that you will use the information received correctly and will be able to save money from cunning scammers. After all, much depends on you - mindfulness will help prevent criminals from stealing your hard-earned money.

    Content

    Plastic cards have become a common way to store money. It would seem that finances are securely protected, because a credit card is always at hand, and you can get cash or pay in a store only if you know the pin code. However, not everything is so smooth. Fraud with bank cards is gaining momentum, as scammers come up with new schemes and frauds every time, the purpose of which is to withdraw money from a card account. In order not to become a victim of thieves and protect your own savings, you need to know all kinds of data theft methods and options for protecting against them.

    Types of fraud with bank cards

    A bank card is almost a universal tool in the financial world - wages are transferred to it, loans are issued, it is calculated at points of sale and on the Internet. If someone needs money on the other side of the earth, they can also be transferred using a card. At the same time, the number of crimes related to the theft of money from plastic is growing. Most of them are due to inattention and excessive trust of credit card holders. There are many ways to steal money from a card, which are worth considering in more detail.

    Via mobile banking

    When installing third-party applications from the Internet that require card binding, you should be very careful. The fact is that the creators of the program deliberately infect it with a virus that, penetrating into a smartphone, begins to work for scammers. It replaces the mobile banking window with a phishing one, that is, a fake one, and the owner of the phone enters his data there without suspecting anything. The virus sends them to scammers, who then illegally gain access to the client's card account.

    In addition, the program can access the client's SMS notifications while working in the program. With their help, thieves disguised as the owner debit card they can enter banking and steal money. The client may not suspect anything, as viruses block cash withdrawal and money transfer messages that should be received on the phone. It is easy to avoid getting a Trojan into your phone - you only need to install licensed programs (including antivirus programs) and regularly check your account.

    By phone

    If a bank card was linked to the phone number, then the fraudster can take advantage of this situation. When a phone or SIM card is stolen/lost, criminals get access to Internet banking and calmly transfer all the money from a credit card. In addition, attackers can hack the site of a mobile operator. After that, they set the forwarding of all user SMS messages and use them to access mobile or Internet banking.

    SMS fraud

    The owner of the credit card receives a message on the cell that the card is blocked. To unlock it, it is proposed to make a call back to the operator of the financial institution at the number indicated in the SMS. During a phone call, the scammer introduces himself as an employee of the bank issuing the credit card and asks for secret information: the number from the plastic, the code word and the numbers of the pin code, supposedly necessary for unlocking. With the help of these data, it will not be difficult for a swindler to use the sums of money from the card account.

    Through the Internet

    Buying goods online is very popular because it helps to save a lot. Fraudsters can intercept data right at the time of making a payment, and then use bank card details to further withdraw money. You can avoid this by following simple rules:

    • do not make purchases for large amounts through the World Wide Web;
    • use a virtual card for payment;
    • set a limit on one-time payments;
    • use only trusted sites to make purchases;
    • activate the Secure Code service.

    Theft of a plastic card

    Fraud with bank cards by stealing a credit card is a common thing. If this is found, you must urgently contact the operator and block the card or do it yourself through a mobile or Internet application. This is extremely important when the plastic only has a magnetic stripe. It is not possible to withdraw money from it without a PIN code, but it is not difficult to pay in a store. Cards with a chip or contactless payment are more difficult to use, because for any transactions you need to enter a secret password number.

    Using fake ATMs

    Attackers go to different tricks, just to take over other people's finances. They can even make a fake ATM. It is installed in a crowded place so that as many people as possible take advantage of it. By inserting the card into the device, a person sees information about the lack of cash or a system malfunction. Meanwhile, scammers get hold of all the information they need to withdraw money. A fake ATM can return the card, or it can keep it. In this case, it will be even easier to withdraw money, because there is an original and a pin code is known.

    For terminal payments

    When shopping in a store, you should carefully monitor the cashiers who take plastic in their hands to pay at the terminal. If a store employee swipes a bank card twice across the terminal, then the first time he does this to write off the money, and the second - to remove information from the plastic, in order to withdraw the money later. In addition, he can remember the cvv code and data on the front side, with which it is easy to make purchases on the Internet.

    How scammers take money from a bank card

    Withdrawing money with the help of the owner of the credit card is elementary. For this, known methods are used. The first of them is fraud with bank cards by gluing the part of the ATM from where the money comes from with tape. The client inserts a card, enters a pin code, hears the ATM counter, but does not receive money, since the money dispenser does not open. In the second case, swindlers make a special device from photographic film, which is inserted into the card reader - the ATM accepts a credit card, issues money, but does not return the card.

    Ways to access confidential information

    It is much easier to get hold of the necessary information contained on plastic than bank card users think. Often fraud occurs through the fault of bank customers themselves due to negligence and inattention. Scammers can easily peep the secret code over their shoulder when the owner of a bank card pays in a store, withdraws cash from an ATM, etc.

    In addition, there is a conspiracy of malefactors with sellers who can provide fraudsters with information from buyers' payment cards. Sometimes swindlers negotiate with bank employees. Those tell them where the credit card ordered by mail will arrive, which the thieves intercept and withdraw cash. A common way is to infect mobile devices with Trojans that steal data when a bank card holder makes payments online.

    A new type of fraud with bank cards

    Progress does not stand still. The same can be said about credit card scams. Whereas before, fraud with bank cards was limited to sealing up a cash dispenser and stealing plastic, in modern world scams have taken a new dimension. Now, new contactless technologies and the Internet are coming to “help” the attackers, although the carelessness of users also plays a big role here.

    A call from bank employees to the service number

    Recently, facts of fraud with Sberbank bank cards have become known. To do this, fraudsters use the service number of the organization, because it is technologically possible. An SMS from the number 900 comes to the victim's phone with a request to transfer a certain amount of money. To do this, you must send the code contained in the message in response, or the operation will take place automatically after 600 seconds.

    After some time, a call is heard from the official number of Sberbank (8-800-555-5550), where a person, posing as a specialist in the security service of a banking institution, asks the client to send a response SMS, where to indicate the code, space and the phrase "transfer cancellation". After sending the message, the money, as well as the employee of Sberbank, disappear without a trace.

    Launching a virus program in ATMs and terminals

    This type of fraud is a novelty in the Russian financial market and it affects not the owners of payroll and credit cards, but ATMs. The essence of the fraudulent scheme is that cash dispensing devices are infected with a special Trojan virus, which gives attackers the opportunity to withdraw cash from an ATM by entering a special code on the keyboard. For the first time, such a phenomenon was encountered in the spring of 2019.

    Contactless readers with Paypass technology

    Using a payment card with PayPass contactless payment technology allows you to make payments in the amount of not more than 1000 rubles without entering a pin code. Criminals take advantage of this opportunity because all they need to do is place a portable terminal on the bag or clothing containing the credit card. It is not difficult to carry out such fraud, especially in places with a large crowd of people.

    Common Scam Schemes

    Every year the number of so-called "gadgets" increases. Criminals use in their scams both technical tricks, in the form of special overlays, inserts, cameras, and intangible means. The ways of fraud with bank cards and the methods used can be so simple that from the first time the plastic owners do not even understand that they are being deceived.

    Skimming personal data from the card

    A method of theft that is gradually becoming a thing of the past due to the introduction of chip cards, but nevertheless has not lost its relevance. It consists in installing a special skimmer device in place of the ATM card reader, from which it is very difficult to distinguish it outwardly. The bank client inserts plastic, and the attackers copy all the necessary information from the magnetic strip of the card to make a duplicate. The PIN code is obtained in two ways - by installing a special overlay on the ATM keyboard or by mounting a miniature video camera.

    One type of skimming is skimming. This is an improved version, since instead of a patch device, a thin board is placed in the card capture reader. Subsequently, she reads all the necessary information from the card. Skimming is used by attackers not only in ATMs, but also in shops or cafes. In this case, a portable device is used - a manual skimmer.

    Subsequently, thieves issue copies of bank credit cards, where information from the stolen plastic is applied. Once fraudsters have faked bank cards, it will not be difficult to withdraw money from them or pay in a store, since the confirmation codes are known. In order to avoid becoming a victim of skimming, you should try not to withdraw money from ATMs located in remote and dimly lit places, because such devices are easiest to equip with readers. In retail outlets, it is advisable to pay with a credit card on your own, and not transfer it to the wrong hands.

    Electronic and non-electronic phishing

    “Catching with a bait” - this is how you can translate this type of theft. Its essence lies in the fact that a message is sent to the e-mail from fraudulent sites or the victim’s phone with a request to provide credit card details. This may be a promotion from a payment system or a bank, but it should be understood that all this is a scam, since not a single banking organization will not send out such offers in order to "fish out" the personal data of the client.

    vishing

    The type of fraud is akin to the above phishing, with the only difference being that in order to get hold of the data of the owner of the plastic, a telephone connection is used, and the conversation can take place both in an automated mode - using an answering machine, and directly with the so-called operator of a banking institution. Attackers, under any pretext, try to find out information about the credit card, secret code and customer data.

    The buyer may call if the owner of the credit card posted information on the sale of an expensive item on a popular classifieds site. Under the pretext that transport company, which will pick up the goods, the seller’s full personal data is needed, and he himself needs information from the card in order to transfer money, he lures out all the necessary information, after which he disappears, and with him the funds from the account.

    Creation of a fake online store

    Thieves have long moved into the virtual space, just to take possession of the money of gullible buyers. To do this, online stores are created that offer goods at bargain prices so that as many buyers as possible want to buy them. Payment for the purchase is proposed to be made using bank plastic. The purpose of scammers is to obtain data from buyers' cards, including a cvv code, and then use them to independently pay on the Internet.

    Double write-off from the account

    This type can rather be attributed not to malicious intent, but to technical errors that have arisen on the part of the processing center that processes all payment transactions using bank cards, or the issuing bank. In addition, double debiting of funds can be attributed to the inexperience of the seller or problems with the payment terminal at the point of sale itself. It is impossible to avoid such actions, but it is easy to notice them in time - for this you need to activate the SMS informing service. If you discover what happened, you must immediately inform the bank that issued the credit card.

    How to protect your card from scammers

    Before inserting plastic into an ATM, you need to make sure that there are no suspicious linings on the surface - as a rule, they differ in color and type. For owners of credit cards with a contactless payment method, it is recommended to set a minimum credit limit when paying without a PIN code or cancel it altogether. Additionally, you can minimize the risks by placing the card in a radio-shielded wallet (for this you just need to put its foil inside), a metal box or a foil bag.

    Under no pretext should you give your credit card into the hands of third parties, and even more so tell the pin code, because this is secret information that is available only to the owner of the card, even bank employees do not know it, because it is generated automatically. Do not pay in response to SMS messages and emails from unknown sources. In case of any suspicion or unauthorized debiting of funds from the balance, you need to call the bank and block.

    Where to go if money is stolen from the card

    The first thing to do if money is debited without the knowledge of the owner is to call the banking institution at the number indicated on the back of the plastic. They should report the disappearance of funds from the card account and follow all instructions. After that, you need to go to the nearest police station and write a statement.

    Is it possible to return the money

    If the client is completely sure that he did not make any unauthorized transactions on the card (you need to make sure that relatives are not involved in this), you need to write an application to the bank for a refund. If the bank refuses, you can safely go to court. It is extremely difficult to return the disappeared funds, especially if a PIN code is required for transactions, but such cases are known. It is easier to return the money if a hacker attack on the bank is recorded or a large number of citizens have suffered.

    Legal liability for fraud

    The Criminal Code (Article 159.3) recognizes fraud with bank cards as a crime for which the perpetrators are liable in accordance with the law. According to the code for the deed, a fine, arrest, correctional labor or restriction of freedom is provided. The monetary compensation, the number of hours of forced labor or the time of arrest directly depend on the stolen amount, whether the crime was committed independently or by an organized group.

    Video

    Did you find an error in the text? Select it, press Ctrl + Enter and we'll fix it!
    Editor's Choice
    Alexander Lukashenko on August 18 appointed Sergei Rumas head of government. Rumas is already the eighth prime minister during the reign of the leader ...

    From the ancient inhabitants of America, the Mayans, Aztecs and Incas, amazing monuments have come down to us. And although only a few books from the time of the Spanish ...

    Viber is a multi-platform application for communication over the world wide web. Users can send and receive...

    Gran Turismo Sport is the third and most anticipated racing game of this fall. At the moment, this series is actually the most famous in ...
    Nadezhda and Pavel have been married for many years, got married at the age of 20 and are still together, although, like everyone else, there are periods in family life ...
    ("Post office"). In the recent past, people most often used mail services, since not everyone had a telephone. What should I say...
    Today's conversation with the Chairman of the Supreme Court Valentin SUKALO can be called significant without exaggeration - it concerns...
    Dimensions and weights. The sizes of the planets are determined by measuring the angle at which their diameter is visible from the Earth. This method is not applicable to asteroids: they ...
    The world's oceans are home to a wide variety of predators. Some wait for their prey in hiding and surprise attack when...