Fraudsters are using SMS and email messages on behalf of various media service providers to try to obtain Apple Pay-associated bank card details, warns K&H Bank. OTP Bank also warned its customers about the latest phishing emails.
According to the bank, the attackers target customers with SMS messages or emails sent on behalf of various service providers, for example Netflix, Disney+, etc. These links lead to a fake website where the fraudsters ask for the customer’s bank card details and the SMS code, which is sent to the victim’s mobile phone number, Portfolio writes.
They note that although the SMS message clearly indicates that the customer’s card will be added to Apple Pay and warns them not to give out the code to anyone, in many cases, victims still enter the code they received in the SMS on the fake website.
This gives attackers the opportunity to directly register the customer’s bank card into the Apple Pay wallet on the fraudster’s mobile device. As a result, the fraudster can pay with Apple Pay on behalf of the customer. K&H Bank asks its customers to exercise caution and report any fraudulent activity to the bank.
The latest phishing emails sent out by fraudsters on behalf of OTP Bank are about billing errors, Portfolio reports. These emails contain a false alarm that the customer’s account has been suspended, the bank said in a statement.
However, the e-mail does not specify which account it is, what the error is, or the billing address. If someone inadvertently clicks on the link, they are exposing their sensitive data. OTP Bank requests that no one should ever give out their details in response to such and similar untrustworthy messages, and that no one should click on such links.
If your details have fallen into the hands of a phishing scammer, please report it to the bank holding your account as soon as possible.
OTP has attached a screenshot of the email to their statement:
A copy of a phising email, published by OTP Bank. Source: otpbank.hu
Source: Portfolio.hu, otpbank.hu