Have I Been Hacked (Phone)

[mercman24]

THIS morning i have on my phone a demand for 160 baht to be paid by the 19th, it says pay NOBODY, i dont owe anyone any money, its a bit worrying  as there is a QR code and message wont delete ?? any idea please, its PROMPT PAY

[bbko]

Everyone once in a while I'll get some sort of SMS, Line, or e-mail message saying I owe money or some account needs me to follow their link to change my password, or "my account" with a company that I have never ever used is suspended/locked and I need to follow their instructions to reactivate this nonexistent account.  It's people phishing for money, information, access, don't fall for it.

[mercman24]

thanks, i had an e mail, saying pending  160 baht payment, on Google Play, it said HD RENTAL ??

[jacko45k]

I just got one in Thai saying I could get a 50,000 baht payday loan with a link there. It claimed to be from PromptPay and was via the SMS app. I certainty was able to delete it. 

I have my suspicions where my personal details are being gleaned from... order anything online?

[FarangULong]

16 hours ago, mercman24 said:

thanks, i had an e mail, saying pending  160 baht payment, on Google Play, it said HD RENTAL ??

It's just some scammer, trying to trick you. Unless you actually have money booked off of your paypal (and don't ever click emails and links in them, even if the sender says @paypal or @(insert your bank name here), but type in their web address manually into the url bar, to check for yourself if there were deductions etc made, as some of them will spoof the email address and the hyperlink in the email leads to a fake, recreated website that looks like the original... so when you try to log in with your username and pw, it will give you some error message and then they have your login credentials..

 

which is also why I suggest you add 2 step verification to your online banking and stuff like that. it will send a code to your phone by text or you have to verify by using a specific app of your bank, and such..

 

that way even if you DO make the mistake of getting phished, they still can't get in, and you got plenty of time to change your password...

[steven100]

I don't know how many times I could have received $$$ billions in inheritance money from Nigeria .....

If only I'd have sent that collection fee ......   damn  !!

[jacko45k]

29 minutes ago, FarangULong said:

that way even if you DO make the mistake of getting phished, they still can't get in, and you got plenty of time to change your password...

In the UK there is some scam where they also get a phone network company to reissue your number to a different SIM card. (Not sure if the miscreants simply use a weak security, when someone claims their phone has been stolen, or they have a collaborator working at the phone network company).  Then they get your OTPs and off they go. 

Edited August 17, 2021 by jacko45k

[KhunBENQ]

2 hours ago, jacko45k said:

weak security

What I read from Germany it's weak security.

Accepting an address change and lost SIM report on the phone without any proof.

The criminals just stick your name on the letter box of the supplied address and that's it.

It was reason enough that "SMS OTP" has been forbidden in the EU.

Now a straining two factor authorization required.

 

Is acquiring a SIM for the registered phone number enough?

What about the PIN to login to the banking app?

 

Edited August 17, 2021 by KhunBENQ

[jacko45k]

1 hour ago, KhunBENQ said:

Is acquiring a SIM for the registered phone number enough?

What about the PIN to login to the banking app?

I talked to one guy this happened to and they got into a credit card and a bank account. This suggests they got to know his internet banking login credentials too. (Do any banks use a OTP to log in and verify transactions????) 

[topt]

4 hours ago, jacko45k said:

Do any banks use a OTP to log in

Do you mean here or UK?

In UK yes. Even Hargreaves Lansdown ask for an OTP because I have cash savings account with them which is a PITA.

 

Here and UK OTP for online transactions to newly set up payees - in SCB case first 2 transactions.

Edited August 17, 2021 by topt

[jacko45k]

54 minutes ago, topt said:

Do you mean here or UK?

I was thinking mainly UK, but if a OTP was required to log in, and to execute a transaction.... getting your hands on someone's phone number would  allow access.

[FarangULong]

8 hours ago, KhunBENQ said:

What I read from Germany it's weak security.

Accepting an address change and lost SIM report on the phone without any proof.

The criminals just stick your name on the letter box of the supplied address and that's it.

It was reason enough that "SMS OTP" has been forbidden in the EU.

Now a straining two factor authorization required.

 

Is acquiring a SIM for the registered phone number enough?

What about the PIN to login to the banking app?

 

My banking verification app requires a pin to login to as well, probably for that very reason that if your phone is cloned or someone does the whole sim card replacement.

 

Many other apps don't have a seperate pin for the two step, but they don't show you your own phone number fully either, only the last digits.. so even if you go into your details, they won't be able to get it that way. I think that's another good way of improving security, but nothing you or I can influence though.

[samtab]

you seem to be a good usual victim ????

 

[dj230]

11 hours ago, steven100 said:

I don't know how many times I could have received $$$ billions in inheritance money from Nigeria .....

If only I'd have sent that collection fee ......   damn  !!

Collection fee? I only had to give them my social security number, name and address so they could deposit the money into my account. I think you were getting scammed

[steven100]

5 minutes ago, dj230 said:

Collection fee? I only had to give them my social security number, name and address so they could deposit the money into my account. I think you were getting scammed

damn .....   i should have questioned what the fee was for ..... 

[CH1961]

Always the same old story ... no I did not use the pay tv channels ????

[The Theory]

Once I found an unknown software after I picked up my laptop. I stopped using it for banking or emails or ..... 

[DJ54]

When living in China a person called the wife and said their the Police and trying to catch someone 

for fraud ... told her she can’t tell anyone.... she was locked in my home office hysterical on the phone... short story I told her tell them come here if their the police they’ll show... they hung up.

 

Couple of weeks later her sister got the same call..  wife told her the same to do...... 

 

wife was anout bout to go to the bank and get money... so I was happy I educated her before she

did something stupid...  wifes bank.. she’s doesn’t have access to mine.. although I trust her she’s 

never asked for assess... ..

 

she’s a long memory.. 10+ years ago second time after meeting went out for dinner.. I went to restroom and left my wallet on the table... came back she handed we the wallet said you left 

it on the table and that’s dangerous.... I joking said I know I left it to see if you’d steal any money...

Shes still angry if it’s brought up..,  it had @ $30 US..   and life goes on... 

[Nanaplaza666]

10 hours ago, DJ54 said:

When living in China a person called the wife and said their the Police and trying to catch someone 

for fraud ... told her she can’t tell anyone.... she was locked in my home office hysterical on the phone... short story I told her tell them come here if their the police they’ll show... they hung up.

 

Couple of weeks later her sister got the same call..  wife told her the same to do...... 

 

wife was anout bout to go to the bank and get money... so I was happy I educated her before she

did something stupid...  wifes bank.. she’s doesn’t have access to mine.. although I trust her she’s 

never asked for assess... ..

 

she’s a long memory.. 10+ years ago second time after meeting went out for dinner.. I went to restroom and left my wallet on the table... came back she handed we the wallet said you left 

it on the table and that’s dangerous.... I joking said I know I left it to see if you’d steal any money...

Shes still angry if it’s brought up..,  it had @ $30 US..   and life goes on... 

Damn dude , you need to stay of whatever is your guilty pleasure . 

[NoshowJones]

On 8/16/2021 at 10:24 AM, bbko said:

Everyone once in a while I'll get some sort of SMS, Line, or e-mail message saying I owe money or some account needs me to follow their link to change my password, or "my account" with a company that I have never ever used is suspended/locked and I need to follow their instructions to reactivate this nonexistent account.  It's people phishing for money, information, access, don't fall for it.

I have an email from Azure, never heard of them, wanting to know about change in  VAT registration and a new service tax law in Thailand. What do I know about that nonsense? Deleted.