The Department of Public Security of Sevastopol spoke about a new trick of attackers

The Sevastopol Department of Public Security is warning city residents about a new telephone fraud scheme that is actively spreading in instant messengers and social networks.

Attackers, under the pretext of confirming a reservation or authorization, ask for the last four digits of an incoming call — in fact, this data is used for unauthorized access to citizens’ personal accounts.

The trick is that some services actually use a code call instead of an SMS for two-factor authentication. Fraudsters take advantage of this: they post attractive offers on social networks — for example, advertising massage parlors, courses or rental services — and when trying to book a service, they ask you to “confirm your appointment” by calling the numbers that will come in the incoming call. In fact, the call does not come from the organization, but from the platform where the victim has an account. Having received these numbers, the attackers complete the login to the user’s profile.

Once inside the account, criminals gain access to personal data, linked cards, bonus programs and contacts. Further actions vary: from sending spam on behalf of the owner and placing fictitious orders to demanding a ransom for returning access or stealing accumulated points in online stores and online games.

In this regard, the Sevastopol Department of Public Safety strongly recommends that you do not share verification codes, passwords, PIN codes or last digits of incoming calls with anyone — even if the interlocutor introduces himself as a customer service employee, service administrator or reservation manager. It is also necessary to check the authenticity of resources, that is, use only official websites and applications, carefully check addresses and details. If a stranger in a messenger or on the phone asks you to read out the data from a call, end the conversation immediately and, if necessary, contact the official support of the service.

Genuine services never ask for verification codes or call numbers through third parties, chats or user-initiated calls. Vigilance and adherence to basic rules of cyber hygiene are reliable protection against digital scams.

The Sevastopol Department of Public Security encourages citizens to report attempts at fraud to law enforcement agencies.

source: press service of the Government of Sevastopol