topic Re: O2 SCAM ALERT Bank Accounts could be emptied in Off-Topic

O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Wed, 31 Oct 2018 16:53:01 GMT

Hi ~

I am very concerned having read an article that O2 EE and Vodafone mobile phone customers are vulnerable to a growing scam which allows fraudsters access to their bank accounts.

An investigation by BBC 1's Watchdog Live has discovered the phone giants are handing out replacement SIM cards to people without running proper ID checks.

This allows criminals to pose as customers, get a SIM card for a phone that isn't theirs, and gain access to someone's phone number.

Once they have access to the phone number not only can they hijack calls and texts, but they can use it to access a person's mobile banking, and potentially clear out their accounts.

Cases of so-called SIM-swap fraud have krocketed 60 per cent since 2016

A case was presented that £2000 was removed from a persons bank and the bank initially refused to refund the money, blaming the person for not keeping details safe. This was a replacement SIM card by EE

Watchdog finds O2 and Vodaphone worst offenders.

Five of the six O2 stores visited allowed a TV person to walk out with a SIM card for a phone number that wasn't his.

O2 has told the programme it currently only asks for photo ID when replacing sims on a monthly contract PAYGo would receive an authorisation code alerting them that someone is trying to access their number.

However, when tested by Watchdog TV that didn't happen with any of the numbers being used by the Watchdog Live Team.

Very Very worrying ~

Re: O2 SCAM ALERT Bank Accounts could be emptied

Anonymous — Wed, 31 Oct 2018 17:31:11 GMT

Some financial institutions seem to view SMS verification as secure when delivery isn't even guaranteed by any of the networks.

In these cases it relies on an individual carrying out security protocols correctly but in the case of a phone shop they probably prefer to be selling.

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Wed, 31 Oct 2018 17:41:51 GMT

Hi @Anonymous

Thank you for your thoughts ~

SMS ~ that is right ~ and it is being used by the banks in particular as a back up verification

I certainly hadn't considered it "not secure"

O2 shops ~ it will be the case, of course, that protocols have not been followed.

I am wondering whether further safeguards could be put in place so that "shops" could not, issue a SIM without the correct procedures being followed don't suppose it would be beyond the "wit of man".

I have been a victim of a data breach ~ it has dominated my life and has far reaching affects.

Re: O2 SCAM ALERT Bank Accounts could be emptied

Anonymous — Wed, 31 Oct 2018 17:50:58 GMT

@TallTrees

Can imagine, fortunately I haven't up to now but I tend to be cautious security wise anyway as I work within IT.

It should be enforced that store and indeed call centre staff have to fill in random letters of a password the customer sets up when taking the contract before it will allow them to process an order for a replacement SIM.

The initial password should be randomly generated and sent by post and the customer forced to engage to change it.

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Wed, 31 Oct 2018 18:53:48 GMT

Hi @Anonymous Yes, it should be enforced by the mobile companies ~ taking responsibility for it too.

If it could be proved that it was the O2 Vodaphone EE etc. shops that enabled this scam ~ mobile providers should refund the customer the money lost, not the banks.

~ hopefully with this kind of "exposure" by the BBC Watchdog programme about this type of scam, it will encourage the mobile Companies to put into place some better safe-guards for their customers details

This particular kind of scam as well as a data breach cannot be controlled by the unwitting customers. There really is no need for it security of customers details etc., should be priority.

Re: O2 SCAM ALERT Bank Accounts could be emptied

Anonymous — Wed, 31 Oct 2018 19:03:43 GMT

Thank you very much @TallTrees & @Anonymous

Virtual kudos to you both

Re: O2 SCAM ALERT Bank Accounts could be emptied

cece5 — Wed, 31 Oct 2018 21:35:02 GMT

Thank for this feed @TallTrees & Info @Anonymous
Just seen Watchdog on BBC One.
And I am very, very, very, very concerned that O2 “one of four top phone companies can allow O2 customers details to walk out of door so easily.?!?!?!
You would think being in the 21st-century there first priority would be safeguarding customer details.!!!!
All staff (management too) should be better trained on Securing customers details. However desperately a customer needs a slim card, if they can’t answer the proper security questions.... even the secret password. Don’t give out..!!! If you can’t get into a night club without ID, i can’t see why all O2 staff can’t do the same...!!! No ID..! no password..! Don’t give it out!!!
Unless some of O2 shops management and staff are in scam too..!!!!
I am considering very carefully if I should renew my contract with O2.
Not happy!!!! Sort it out!!!!

These explanation mark is me swearing. Sorry, I’m not happy..!

Re: O2 SCAM ALERT Bank Accounts could be emptied

Cleoriff — Wed, 31 Oct 2018 21:59:21 GMT

They should adopt the Spanish way of buying a sim.

I had to jump through hoops and provide all sorts of info ie address, passport etc. Security was very tight there.

It was pretty much the same for the locals when purchasing a phone.

Even when I topped up my mobile dongle sim in Spain, I couldn't do it online, I had to go to Orange ES with passport and purchase the top up there. It was activated only when the CS in the shop phoned through to Orange and gave my details and the number of the sim.

Obviously this was a real palaver as I used to travel there every 6 weeks or so.

Eventually I invested in Wifi in my apartment.

Much better as I could then use my phone, computer and access UK TV channels through a WiFi box .

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Wed, 31 Oct 2018 22:13:50 GMT

Hi @Cleoriff

Thanks for sharing the Spanish Sim purchase. Very interesting. It must have been very difficult but

now we can see the wisdom

Re: O2 SCAM ALERT Bank Accounts could be emptied

Anonymous — Thu, 01 Nov 2018 08:44:35 GMT

It's not a new scam, but it is concerning that some networks aren't doing enough to protect their own customers, particularly when they already have the necessary security processes in place to prevent that kind of fraud. But it's worth remembering, that gaining access to a mobile account is probably the final piece in that jigsaw, and if someone is trying to steal your identity they will have already farmed a lot of information from your online activities. We spend a lot of time shopping online, or engaging in social media, but sometimes we drop our guard and reveal too much about ourselves.

It's easy to become paranoid about identity theft, but a lot of victims have left themselves vulnerable in the first place. There's some good advice in this article by Martin Lewis, particularly the section where it explains how to find out if hackers have stolen your data. Having been a victim of a data breach, I was particularly interested in the following website (as linked in the aforementioned article):

https://haveibeenpwned.com/

Re: O2 SCAM ALERT Bank Accounts could be emptied

Martin-O2 — Thu, 01 Nov 2018 09:46:10 GMT

Hey everyone,

We have an official statement addressing this situation. Please see below and let me know if there are any questions.

“We take fraud and customer security extremely seriously, indeed we were the first network to lead trials with the banks to identify and block fake banking messages. We’d like to reassure our customers that we have rigorous methods in place to ensure they are protected against all types of fraudulent activity.

To mitigate SIM Swap fraud we’re the only operator to send an authentication code to the original SIM, notifying our customers that someone is trying to access their number in store. We also ask questions specific to the account which adds another layer of protection to minimise fraud. As an extra layer of security for Pay As You Go we are adding compulsory photo ID checks in all our stores across the country in the coming weeks.”

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Thu, 01 Nov 2018 10:06:48 GMT

Hi @Anonymous

Thank you very much for your information and the links. I have read quickly and will take a closer look later on, they are very informative.

Need to keep up-to-date and always aware.

Sorry to hear you were also a victim of data breach (as was I) this is not a customer's fault.

Thank you again for taking the time to give all this info.

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Thu, 01 Nov 2018 10:11:07 GMT

Hey @Martin-O2

Thank you so much for adding the "Official Statement here"

Many people heard the BBC' s report and lots of my friends became very disturbed.

It is great that extra security measures will be in place at the Stores in particular.

I have been a victim of Data Breach it is a terrible ordeal.

Many thanks TallTrees

Re: O2 SCAM ALERT Bank Accounts could be emptied

dgilbert2 — Thu, 01 Nov 2018 20:26:09 GMT

@TallTrees thanks for sharing. Very damming for the O2 shops and quite concerning! Hope all shops now take the appropriate security verification steps!

Re: O2 SCAM ALERT Bank Accounts could be emptied

TallTrees — Thu, 01 Nov 2018 21:37:55 GMT

Hi @dgilbert2
Information/knowledge is key to defeat the scammers.
Scammers will be looking for cracks all the time 😊
Customers are constantly being told to keep their info safe / secure.
Our phone or ISP's should ensure they keep tight security controls, good training and safety blocks put in place if procedures are not followed.
Like you ! hoping shops implement tight security from now on 🙂

Re: O2 SCAM ALERT Bank Accounts could be emptied

dgilbert2 — Thu, 01 Nov 2018 21:40:24 GMT

@TallTrees

Lets hope so, its quite an embarrassment for the shops this week!