Online payment apps like PhonePe, Google Pay, Paytm is getting popular over the past few years. This happened because Indian Government push the campaign called 'DIGITAL INDIA'. UPI (Unified Payments Interface) has made it easy to users for user to transfer money. Now we're getting more depend on these kind of service because of global pandemic 'coronavirus' as people are forced to stay at home make payment online instead of person-to-person via cash. Thus, this is this is the time we have to be very careful about UPI scams scammers are getting more active day by day. Scammers are always on the lookout for tricks to do people. They trick users giving them money directly from their bank accounts, and UPI payment is a great tool to do so. Ample amount of people lost their thousands and lakhs rupees in UPA scams. In 'The Brill's Hack' we are going to show you popular UPI scams which fraudsters are able to scan using apps kaise Google pay phonePe and Paytm.
● What Method Hackers Use to Hack Your Phone ?
1. Cashback/ Refund Scam
This is a type of request money scam. Where was camera will call you and pretend to be legit agent of a bank or a reputed big company like Amazon, Facebook etc. He says user has been rewarded some cashback and we'll ask them to accept UPI online payment of your choice. Many cyber criminal keep an eye on Twitter or complaint portal for victim who shared complaints about any service of any company. And after that they will call you as a agent of such companies and promise you too to complete satisfaction of your complaint regarding the issue you had in service. Within minutes, user get message mentioning the shared amount of refund or cashback on choosen UPI app. In hurry to encash the the cashback many user enter the secret pin. User forget this is the request of payment. Up app do not require any kind of a pin to accept money. This means they authorised a UPI payment from phone instead of accepting money. This is the most common scam in most of the people fall for it.
2. Request Money Scam
One of the most common and famous scam is 'Request Money' scam. This happens when user request of money instead of getting money not giving much attention to the payment option. OLX and Quikr are well known platforms for Cyber criminals to find the victim and they are always seeking for victim to do the scam. Apps like PhonePe, Google Pay, Paytm, Bhim App offers users to request money from other person. Cyber criminal take advantage of this feature to trick people into giving money. User thinks that they're receiving the money from the person who is buying the product or service, but instead of paying the amount user receive the request of money. Users unassumingly accept the request entering you UPI M-PIN of the specific amount. As soon as you enter the M-PIN you confirm the transactions and money gets transferred from your bank account to scammers bank account.
3. SIM Cloning
This is the another scam fraudsters able to hack someone's bank account is by cloning SIM card of the person without their acknowledgement. SIM card cloning helps hackers to receive OTP and it's allowed them to change UPI M-PIN. After changing users UPI PIN scammers can easily use your payment applications like Google pay, PhonePe, Paytm. SIM cloning aka SIM swapping is not easy at it seems that is the reason this method is not much popular in scammers. In recent SIM Swapping is increasing in India. Last year one person from mumbai lost rs of 23 lakhs due to SIM Cloning.
As I mentioned above in 2 methods of scams fraudster will call you pretending as a bank agent and he'll collect your information such as Birth date, UIDAI number, Pan Number etc. After that, fraudster will make call to SIM card Carrier and convince them to block your number and then they will obtain new sim and access your banking account.
4. Remote Access/Vishing
For great user experience UPI has a simple four digit pin to authorise the transactions. This could be great threat for user ! Hacker use this simplicity to transfer funds from user banks to their banks once they found your M-PIN. In this type of hack hackers remotely access your phone using screen sharing app like Anydesk. This apps let hackers access your screen eventually they can see OTPs it receive.
In this scam scammers call you pretending be bank representative calling regarding some issue of your account. They will try to bind you in conversation asking for your details such as phone model type, birth date etc. They will ask you to download Anydesk app or screen share app from app store and ask you to give all permission for app and after that they will ask unique code of Anydesk app to access your phone from their device. They will get full administrative of your phone.
In such case, it is very important to understand that bank representative will never ask you any credentials such as OTPs. No one will ask you to download any third party app. If anyone asks you to do so deny it and report it to your respected bank. Some apps such as a Paytm will never work if any screen sharing app is installed in your phone.
5. Counterfeit UPI Scams
There is lots of counterfeit apps of UPI payment is available on Google Play store. Scammers use same name as a legit version of UPI application trying to trick into downloading them. You can find these kind of application easily because of low rating and few downloads. If someone download such kind of fake banking apps they not only gives permission to use their phones but also gives information about debit card details ane PIN access of their bank account.
6. Fake Helpline Number
This is a fast-growing scams these days. When you search for some service like contact number of Amazon, courier service or local restaurant, Google search engine may show list of website that unverified and belongs to scammer. The scammer achieve this by black hat seo optimization to his fake website and verify his website for authenticity. When you call that number person on the other end will ask user for details. Then they will ask you to request full or partial payment to confirm the order using UPI application.
After this, money will be deducted from your bank account and the contact number will become unreachable.
){kind=link}