Yet again money has evaporated from my savings account. Checking my bank passbook I discovered that B 34.49 had been removed . This was similar to the sums taken previously - B 34.15. The code was EDC. This code was not listed inside the back cover of the book.  The Dep. No. Was 00. Shown this information the bank staff were all- of - a - flutter. After much discussion they phoned head office. Having been down the same road a short time ago and without prompting I said that no payment had been made online or otherwise using the card and that it was a new card with a new pin number obtained after the previous theft of funds ( since returned). Additionally, it had only been used twice on both occasions at an ATM owned by the bank to withdraw cash. After some probing this was accepted. The advice given was that the card should be blocked from use except when used in an ATM and meantime enquiries would be made. The sum taken was so small that without the update of the bank book it would have passed undetected unlike the previous time when a cascade of small sums was removed. It would seem that there is still a weevil somewhere in the works. Those who has money stolen during the previous attack might do well to monitor their accounts . To avoid  any possible legal problems suffice it to say that the bank is named after the Capital .

Banking forum better idea.

If you used the app you can monitor the accounts more easily

7 minutes ago, DrJack54 said:

Banking forum better idea.

Moved to there.

Please check your bank statement and look if these were payments at google.com - I think some popular local app was infected (intentionally or incidentally) with malware, or some popular shop (either online or offline) was hacked. Possibly we could determine which one.

 

https://aseannow.com/topic/1239419-banking-crisis/?do=findComment&comment=16985001

 

3 hours ago, scubascuba3 said:

If you used the app you can monitor the accounts more easily

+1

Call me paranoid, but one of the first online activities before breakfast:

going through three Thai accounts, one German account/CC and WISE account

 

 

Time to change bank.

24 minutes ago, KhunBENQ said:

+1

Call me paranoid, but one of the first online activities before breakfast:

going through three Thai accounts, one German account/CC and WISE account

 

 

Not paranoid at all IMO. I do the same. All accounts checked whilst the coffee is brewing.

What attracts my intention is that many of you seem to have

 

1. Online Access granted for their accounts

2. Are even using mobile devices to access the accounts

 

Now you may call ME paranoid but I would not do either of those in Thailand. Yes , not very convenient. However I use an ATM/Debit card (several) and a credit card. For all transactions immediate SMS alert - although I would prefer two factor authentication (resp. 3-D secure) at least for the credit card, which they do not have.

 

Talking about possible dangers without that the bank personnel told me once  "Thais like it easy, two factor too difficult"

9 hours ago, KhunBENQ said:

+1

Call me paranoid, but one of the first online activities before breakfast:

going through three Thai accounts, one German account/CC and WISE account

 

 

I have 3 thai bank accounts, I don't have cards for 2 of them, that makes it safer also

14 hours ago, Neeranam said:

Time to change bank.

Or close the offending account ..open another one.

If there is nothing in it the rogue app can't milk it.

14 hours ago, KhunBENQ said:

+1

Call me paranoid, but one of the first online activities before breakfast:

going through three Thai accounts, one German account/CC and WISE account

 

 

Yes, good idea. However doesn't the more often you access your accounts the more often some hacker type may intercept your id/password ?  

exactly the same happened to me a few weeks ago.

You need to cancel your ATM card, cancel all cards you have with every Thai Bank.

You will not have any further problem.

All monies were re credited to my bank by Bkk bank.

But i have cancelled the card and also cancelled my other bank cards here.

1 hour ago, wombat said:

Or close the offending account ..open another one.

If there is nothing in it the rogue app can't milk it.

I suspect a thief in the actual branch, better to move. 

Just now, Neeranam said:

I suspect a thief in the actual branch, better to move. 

this happened in multiple banks, not just one bank.

did you not see?

Millions were taken from multiple banks

8 minutes ago, nickmondo said:

this happened in multiple banks, not just one bank.

did you not see?

Millions were taken from multiple banks

Yes, I saw that. I would still change branches. 

Another victim of the notorious $1.04 thief!  ????  We may need to bring in the MCU. 

 

Just some humor. 

How can 49 satangs be removed at an ATM?

 

15 hours ago, Moonlover said:

Not paranoid at all IMO. I do the same. All accounts checked whilst the coffee is brewing.

Likewise and anyone who does not is very naive in my opinion.

1 hour ago, IAMHERE said:

However doesn't the more often you access your accounts the more often some hacker type may intercept your id/password ?  

That's my least concern. I don't want to hijack this to a technical/IT thread (my background).

But the encryption/safety procedures with the Thai banks are as safe or better than with "western" banks.

It's a common misconception that the threat comes from any interception of internet banking.

The real threats:

Giving away data for online shopping to "shady" sites.

Being fooled by pishing/fishing emails/SMS.

Social engineering attacks by phone calls from alleged bank employes.

Skimming devices/hidden cams at ATM machines.

All such stuff.

 

One weakness is indeed the possibility to use debit/card data for online purchases without two factor authorization.

So it might be a problem to hand over your card to some clerk/gas station attendant or the like.

One small improvement: note the three digit CVV number on the back of the card and then scratch it off.

Edited November 18, 20214 yr by KhunBENQ

1 hour ago, IAMHERE said:

Yes, good idea. However doesn't the more often you access your accounts the more often some hacker type may intercept your id/password ?  

But of course:

Users who are not safety aware about the devices they use (PC/tablet/smartphone) are prone to being intercepted/hijacked by some Trojan malware etc.

Also risky to do business at unknown devices at some internet kiosk/shop.

Some nerds think it is a good idea to "root" their smartphone.

Bangkok Bank and maybe others do not allow connection from such devices.

 

Are your cards dual scheme - TPN?

 

 

22 minutes ago, KhunBENQ said:

One small improvement: note the three digit CVV number on the back of the card and then scratch it off.

Good idea.  Thanks for this...

16 hours ago, KhunBENQ said:

+1

Call me paranoid, but one of the first online activities before breakfast:

going through three Thai accounts, one German account/CC and WISE account

 

 

Ditto and have frozen all my cards and set transaction limits to zero as well as having sms alerts for any movements. Can't be too careful! Unfortunately she who must be obeyed thinks I am checking up on her!

I would have a problem if the bank told me the money "vanished".

 

Double entry bookkeeping.  Every credit has an offsetting debit.  That is where your money went.  The personnel at the bank branch might not be able to research this, but the funds can be found and should be found.  Not because the the 30 baht is a big deal, but because the combined withdrawals of multiple victims accounts (I assume many people were impacted by this) are a big deal.  They should have quickly fixed this after you brought it to their attention the first time.  The bank probably doesn't want to give you a straight answer because it is too worried about the negative PR potentially created by the incident, should it go public.  Saving face...

1 hour ago, nickmondo said:

this happened in multiple banks, not just one bank.

did you not see?

Millions were taken from multiple banks

And yet some retirees still put 800.000 bt in their bank account. If they can really afford to lose that, would they not be better off in a normal country which is not ruled by soldiers?

2 hours ago, IAMHERE said:

Yes, good idea. However doesn't the more often you access your accounts the more often some hacker type may intercept your id/password ?  

even with id and password they'd still need to clone your sim card in order to setup a new payee/transfer (to fill in the one time password) and get the money out. 

 

if the hacker had the capabilities to set all that up there are far safer and more lucrative targets to go after (crypto exchange accounts for instance).

 

easiest hack is still skimming debit cards and thats why thats so prevalent. best way to combat that is have 2 accounts and only transfer into the "live" account what you intend to withdraw.

 

 

1 hour ago, KhunBENQ said:

That's my least concern. I don't want to hijack this to a technical/IT thread (my background).

But the encryption/safety procedures with the Thai banks are as safe or better than with "western" banks.

It's a common misconception that the threat comes from any interception of internet banking.

The real threats:

Giving away data for online shopping to "shady" sites.

Being fooled by pishing/fishing emails/SMS.

Social engineering attacks by phone calls from alleged bank employes.

Skimming devices/hidden cams at ATM machines.

All such stuff.

 

One weakness is indeed the possibility to use debit/card data for online purchases without two factor authorization.

So it might be a problem to hand over your card to some clerk/gas station attendant or the like.

One small improvement: note the three digit CVV number on the back of the card and then scratch it off.

Just a question. Since i was hacked and a lot of money was taken out, i've since had the money refunded by the bank and now lock my card and only unlock it to use it at an ATM. I am now using the QR code system to pay a lot of things or bank transfer. In your opinion is this the better, safer way to go?

Are you married?

33 minutes ago, GeorgeCross said:

even with id and password they'd still need to clone your sim card in order to setup a new payee/transfer (to fill in the one time password) and get the money out. 

 

if the hacker had the capabilities to set all that up there are far safer and more lucrative targets to go after (crypto exchange accounts for instance).

In my home country making a SIM card clone with "forgot passport at home" costs about 15 USD.

I doubt Thai mobile providers staff get huge wages to easily resist that 30-50 USD "donation" for cloning a SIM card without the passport.

 

33 minutes ago, GeorgeCross said:

easiest hack is still skimming debit cards and thats why thats so prevalent. best way to combat that is have 2 accounts and only transfer into the "live" account what you intend to withdraw.

 

I fully support this. Make sure you have two different accounts with different logins etc, not just two different debit cards linked to the very same account.

Edited November 18, 20214 yr by fdsa