Operators, reading mail

Another review based on your letters. This time, something interesting about Sberbank and the Avito website, an unexpected decision to steal money from the balance, about canceling the blocking of BIT Promo options at the last moment. Read and take note, "note to the hostess."

BIT Smart A,B,C while they live

I recently wrote that MTS decided to close their BIT Smart promo options for the most economical ones, you can read about this news in our review here. Unexpectedly, two days before the scheduled shutdown date (April 18), they changed their minds and decided to leave. New connections were banned on April 1, but these options were retained for those who were previously connected. What was it and why did they do it? First "advertising" an unpopular measure, and then abandoning it at the last moment is a strange maneuver. One way or another, users of BIT Smart A, B, C need not worry yet, it should continue to work.

And, as it was correctly written in the comments, the connected option may not be displayed on the main page of your personal account, check the full list of connected services.

About "collecting tribute" from gift SIM-cards

We are talking about donated SIM cards with an unusually attractive "promotion" tariff. The only condition is the need to replenish the balance by a decent amount to “activate” this wonderful tariff. The money put on the balance disappears, the non-existent miracle tariff does not materialize. In a recent review, I suggested that money from the balance of the victims is being pulled through a pre-connected Personal Account, and advised at least entering your password into the Personal Account before depositing a noticeable amount into the account. Especially in those cases when the SIM card was received from the promoter, and not bought in a communication salon. If you believe the letter that came to me, then the fraud scheme is ingeniously simple. How did this not occur to me? Quote with some abbreviations:

“I’ll open the veil a little and tell you how money is withdrawn from such numbers. In short, the sim cards themselves are dead, a piece of plastic. Printed materials and other attributes of "promotions", booklets, stickers, stickers, etc. are ordered. Then, through a figurehead, students are hired to distribute these same cards in crowded places, such as exits from the metro, shopping centers, squares, etc.

So, about the withdrawal of money. There are, say, 10 active numbers that are anonymous. In the memos, not the native number is pasted on the SIM card, but one of these ten numbers. Thus, a person replenishes not his number, but the number of a scammer. Accordingly, the more numbers, the less chance of getting burned when distributing sim cards.

At the same time, it works from 2-3 distribution groups to 10-15 and even more. Distribution time must be the same for all groups. Usually the distribution time is 1-2 hours.

Then the person sits and waits for people to put money on his numbers. They withdraw in different ways, they used to withdraw through anonymous qiwi wallets, as I don’t know now. The net output for such an action usually starts from 100 thousand rubles.

Agree, simple and beautiful. No hassle with activating your Personal Account, tracking the balances of all SIM cards and withdrawing money from hundreds of numbers. People themselves transfer their money to scammers, because few people would think of checking the phone number on the sticker. In general, don't get caught. As I wrote last time, an unusually favorable tariff, a public “promotion” with a distributor and a requirement to replenish the balance for activation should be alarming. And it’s better not to buy SIM cards from distributors on the street, even if you are offered a SIM card as a gift and without registering passport data.

Again about Avito and Sberbank

Many complaints about credit card and bill fraud. It has already begun to look like an epidemic, not only like Avito and not only Sberbank. It’s just that there are a lot of Sberbank cards on hand, and on Avito it’s convenient for fraudsters to choose suitable clients for themselves and contact them, plus the need to move money. I have already written more than once that it is categorically impossible to tell outsiders the numbers of the code that came to the phone, this does not end with anything good. In the last letter, too, it all started with a code. There is also useful information, so I am quoting the letter here, albeit in a greatly abbreviated form.

“I was prompted to write a letter to you by one most unpleasant event in my life that happened the day before, 04/17/2016. I have been using the site for placing free ads Avito.ru for a very long time, the bill for purchases and sales goes to hundreds.

A call from a fraudulent buyer (M., in fact). A few hours after the ads were posted, a man called, discussed the things he needed, offered to pick up the furniture by a transport company today. The next stage - asks how you can make a calculation, I myself offer a transfer to a Sberbank card (I use this method all the time). The next step was supposed to stop me, but didn’t stop ... M. offered to attach my card to the account of his company (in words), asked me to give the card number and go through registration through the confirmation codes I received, which I should receive, but even here I follow his instructions.We are in touch with him, he attaches my card to his accounts (in fact, he is registering with Sberbank online in the Android application), I receive a confirmation code, I tell M., then the second code comes, to enter Sberbank itself online and access to all my accounts. I will say right away that I managed to save money by some miracle. During the second pause (before the second message to M. by me of the second Sberbank login code online) and waiting for SMS, I have something and I manage to go to the Sberbank personal account and transfer the entire amount to the second card (by the way, I reported https://cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ M. number of my salary card, on which all the money was). As soon as I do this, I start receiving SMS about an attempt to withdraw 10 tr, then 5 tr, 500 rubles, Beeline payment for 2 tr. . But the money has already been transferred to another card.”

Further in the letter, a long description of the process of communication with Sberbank technical support (lucky, they answered right away), access to the Personal Account was blocked, although, according to the author, the account was available for another two hours. Also blocked access to all accounts. Now the interesting thing: while the author was talking to technical support, the scammer managed to get through the Personal Account to the second card and transferred money from it to the author's savings account. What for? I don't know, but it would be interesting to know. Maybe it is possible to steal money from a savings account without SMS confirmations, or was it calculated that the author would block his cards, but would not think about the account? And the continuation of the story:

“Until the evening I was tormented, asking myself questions, how could I trust and go on about it and, most importantly, why the attacker did not manage to transfer the amount to his accounts, but transferred only to my own savings account? And why did the offender try to transfer money when I already realized that I had fallen for M.'s bait? Those. I did not give him any confirmation codes for the transfer of amounts. In the end, I could not stand it and around 9 pm I called him. He picked up the phone right away, I asked him how he did it and how it works. He said that I was lucky, he just did not have time. From the conversation, I learned that when working with Sberbank online through the Android application, you can transfer amounts up to 30 tr. to other accounts of Sberbank customers without confirmation codes! And with confirmation up to 500 tr.”

The next day I went and wrote a statement to the police on the fact of an attempted theft of money, that's another story. I do not presume to judge our authorities, I submitted an application, but the essence is this - an attempted theft is not a crime, no one needs audio recordings, a phone number.

Why did I write this? First, to warn everyone that anyone can be in my place. Secondly, I would like you to raise the topic of banking applications and a description of their strengths and weaknesses. Thirdly, I don’t understand how it is possible to transfer large amounts without confirmation using a mobile application, while this cannot be done when using the Sberbank personal account through a browser. And fourthly, I want to warn people to at least read SMS, in which Sberbank itself informs that confirmation codes should not be reported to anyone!

The story is interesting, of course. First of all, it is amusing that the author really miraculously did not suffer. Saved quick action after inadvertently issuing access codes. Fraudsters are often good psychologists, and here you don’t need to be a special psychologist. Working out similar scenarios several times a day, a person has long studied all the options for the behavior of the “client” and is ready to give a plausible and convincing answer to any question of a potential victim. And if the SIM card was changed by a fake power of attorney, then only the bans on Mobile Payments and SMS blocking, which turn on for a few hours after replacing the SIM card, will partially save. And it’s not a fact that they will save you, read our review here.

See the "Security" section of the Avito website. In fact, this link should be placed in a prominent place on the main page of the Avito website. There are many illustrative examples of fraud using the victim’s phone. And, of course, once again I will remind you of the basic precautions:

  • Never, under any pretext, tell others the numbers of the codes received in SMS. Even if you didn’t “shine” the card number anywhere, and you don’t have other bank accounts. The received code can be a password from the Operator's Personal Account, and God forbid, if you have auto-replenishment based on the balance on your balance.
  • Don't post your primary phone number online. It is also impossible to link this number to a bank card; you can inadvertently get a Trojan. It is better if such a "public" number is in the most primitive dialer.
  • I would not risk actively using the main bank card to transfer and receive money either, it’s useless.
  • If you use the "Autopayment" service, then do not be too lazy to evaluate your expenses and set a hard limit on the maximum amount of money transfer from the card to the balance per month. Five to ten minutes spent on this can save you from losing a significant amount.
  • If you are offered to go to an ATM to “receive a transfer to a card”, “enter an unlock code”, or “confirm” something, then communication with the “buyer” or “bank security service” should immediately stop. It seems that this should be obvious, but they go to “receive the transfer” and transfer money to the scammer themselves.
  • Sometimes a very simple approach like “to transfer money, the bank requires the full card number, with all the numbers on the back”, works. And they dictate.

Finally, don't overestimate your intelligence with intuition. For you, hitting a scammer will be the first experience, and for him you are one hundred and twenty-one, he is much better prepared for a conversation than you are. I remember when I called the number indicated in the SMS “from the bank” (“Your card is blocked, call blah blah.”), I sincerely admired the professionalism. The dialogue was executed impeccably, and the details important to the fraudster were clarified in passing, in the general stream of neutral questions. Yes, on April 1, the Central Bank announced a reduction in the volume of cyber fraud in 2015 to “only” 1.14 billion rubles, but this statistics will not console the victims.

The text was already written when I read the latest publication in Izvestia, you can read it here. Quote:

“The head of Roskomnadzor Alexander Zharov instructed his deputies to prepare a commercial that would talk about the dangers of buying SIM cards from sellers. The video is being made to be shown on federal TV channels.

The official representative of Roskomnadzor, Vadim Ampelonsky, said that the creation of the video is necessary to inform citizens that buying SIM cards from their hands is not safe for their wallet.

— When you buy a SIM-card from your hands, it is not clear with whom the contract for the provision of services is concluded and when it will terminate, — Ampelonsky explains. “For example, a person bought a SIM card for himself, put 10 thousand rubles on it, and in the morning it turns out to be inoperative and the money deposited in the account cannot be returned.”

That is, we are also talking about what I wrote about in the section “About “collecting tribute” from gift SIM cards”, see above. But in the form of an abstract video-horror stories without explanations and specifics. Probably useful too. It is important that the very fact of preparing the video and the comment about the disappearance of money confirm the urgency of the problem. Be careful and attentive, not all SIM cards are equally useful.

Operators, reading mail

Another review based on your letters. This time, something interesting about Sberbank and the Avito website, an unexpected decision to steal money from the balance, about canceling the blocking of BIT Promo options at the last moment. Read and take note, "note to the hostess."

BIT Smart A,B,C while they live

I recently wrote that MTS decided to close their BIT Smart promo options for the most economical ones, you can read about this news in our review here. Unexpectedly, two days before the scheduled shutdown date (April 18), they changed their minds and decided to leave. New connections were banned on April 1, but these options were retained for those who were previously connected. What was it and why did they do it? First "advertising" an unpopular measure, and then abandoning it at the last moment is a strange maneuver. One way or another, users of BIT Smart A, B, C need not worry yet, it should continue to work.

And, as it was correctly written in the comments, the connected option may not be displayed on the main page of your personal account, check the full list of connected services.

About "collecting tribute" from gift SIM-cards

We are talking about donated SIM cards with an unusually attractive "promotion" tariff. The only condition is the need to replenish the balance by a decent amount to “activate” this wonderful tariff. The money put on the balance disappears, the non-existent miracle tariff does not materialize. In a recent review, I suggested that money from the balance of the victims is being pulled through a pre-connected Personal Account, and advised at least entering your password into the Personal Account before depositing a noticeable amount into the account. Especially in those cases when the SIM card was received from the promoter, and not bought in a communication salon. If you believe the letter that came to me, then the fraud scheme is ingeniously simple. How did this not occur to me? Quote with some abbreviations:

“I’ll open the veil a little and tell you how money is withdrawn from such numbers. In short, the sim cards themselves are dead, a piece of plastic. Printed materials and other attributes of "promotions", booklets, stickers, stickers, etc. are ordered. Then, through a figurehead, students are hired to distribute these same cards in crowded places, such as exits from the metro, shopping centers, squares, etc.

So, about the withdrawal of money. There are, say, 10 active numbers that are anonymous. In the memos, not the native number is pasted on the SIM card, but one of these ten numbers. Thus, a person replenishes not his number, but the number of a scammer. Accordingly, the more numbers, the less chance of getting burned when distributing sim cards.

At the same time, it works from 2-3 distribution groups to 10-15 and even more. Distribution time must be the same for all groups. Usually the distribution time is 1-2 hours.

Then the person sits and waits for people to put money on his numbers. They withdraw in different ways, they used to withdraw through anonymous qiwi wallets, as I don’t know now. The net output for such an action usually starts from 100 thousand rubles.

Agree, simple and beautiful. No hassle with activating your Personal Account, tracking the balances of all SIM cards and withdrawing money from hundreds of numbers. People themselves transfer their money to scammers, because few people would think of checking the phone number on the sticker. In general, don't get caught. As I wrote last time, an unusually favorable tariff, a public “promotion” with a distributor and a requirement to replenish the balance for activation should be alarming. And it’s better not to buy SIM cards from distributors on the street, even if you are offered a SIM card as a gift and without registering passport data.

Again about Avito and Sberbank

Many complaints about credit card and bill fraud. It has already begun to look like an epidemic, not only like Avito and not only Sberbank. It’s just that there are a lot of Sberbank cards on hand, and on Avito it’s convenient for fraudsters to choose suitable clients for themselves and contact them, plus the need to move money. I have already written more than once that it is categorically impossible to tell outsiders the numbers of the code that came to the phone, this does not end with anything good. In the last letter, too, it all started with a code. There is also useful information, so I am quoting the letter here, albeit in a greatly abbreviated form.

“I was prompted to write a letter to you by one most unpleasant event in my life that happened the day before, 04/17/2016. I have been using the site for placing free ads Avito.ru for a very long time, the bill for purchases and sales goes to hundreds.

A call from a fraudulent buyer (M., in fact). A few hours after the ads were posted, a man called, discussed the things he needed, offered to pick up the furniture by a transport company today. The next stage - asks how you can make a calculation, I myself offer a transfer to a Sberbank card (I use this method all the time). The next step was supposed to stop me, but didn’t stop ... M. offered to attach my card to the account of his company (in words), asked me to give the card number and go through registration through the confirmation codes I received, which I should receive, but even here I follow his instructions. We are in touch with him, he attaches my card to his accounts (in fact, he is registering with Sberbank online in the Android application), I receive a confirmation code, I tell M., then the second code comes, to enter Sberbank itself online and access to all my accounts. I will say right away that I managed to save the money by some miracle. During the second pause (before the second message to M. by me of the second Sberbank login code online) and waiting for SMS, I have something and I manage to go to the Sberbank personal account and transfer the entire amount to the second card (by the way, I reported https://cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ M. number of my salary card, on which all the money was). As soon as I do this, I start receiving SMS about an attempt to withdraw 10 tr, then 5 tr, 500 rubles, Beeline payment for 2 tr. . But the money has already been transferred to another card.”

Further in the letter, a long description of the process of communication with Sberbank technical support (lucky, they answered right away), access to the Personal Account was blocked, although, according to the author, the account was available for another two hours. Also blocked access to all accounts. Now the interesting thing: while the author was talking to technical support, the scammer managed to get through the Personal Account to the second card and transferred money from it to the author's savings account. What for? I don't know, but it would be interesting to know. Maybe it is possible to steal money from a savings account without SMS confirmations, or was it calculated that the author would block his cards, but would not think about the account? And the continuation of the story:

“Until the evening I was tormented, asking myself questions, how could I trust and go on about it and, most importantly, why the attacker did not manage to transfer the amount to his accounts, but transferred only to my own savings account? And why did the offender try to transfer money when I already realized that I had fallen for M.'s bait? Those. I did not give him any confirmation codes for the transfer of amounts. In the end, I could not stand it and around 9 pm I called him. He picked up the phone right away, I asked him how he did it and how it works. He said that I was lucky, he just did not have time. From the conversation, I learned that when working with Sberbank online through the Android application, you can transfer amounts up to 30 tr. to other accounts of Sberbank customers without confirmation codes! And with confirmation up to 500 tr.”

The next day I went and wrote a statement to the police on the fact of an attempted theft of money, that's another story. I do not presume to judge our authorities, I submitted an application, but the essence is this - an attempted theft is not a crime, no one needs audio recordings, a phone number.

Why did I write this? First, to warn everyone that anyone can be in my place. Secondly, I would like you to raise the topic of banking applications and a description of their strengths and weaknesses. Thirdly, I don’t understand how it is possible to transfer large amounts without confirmation using a mobile application, while this cannot be done when using the Sberbank personal account through a browser. And fourthly, I want to warn people to at least read SMS, in which Sberbank itself informs that confirmation codes should not be reported to anyone!

The story is interesting, of course. First of all, it is amusing that the author really miraculously did not suffer. Saved quick action after inadvertently issuing access codes. Fraudsters are often good psychologists, and here you don’t need to be a special psychologist. Working out similar scenarios several times a day, a person has long studied all the options for the behavior of the “client” and is ready to give a plausible and convincing answer to any question of a potential victim. And if the SIM card was changed by a fake power of attorney, then only the bans on Mobile Payments and SMS blocking, which turn on for a few hours after replacing the SIM card, will partially save. And it’s not a fact that they will save you, read our review here.

See the "Security" section of the Avito website. In fact, this link should be placed in a prominent place on the main page of the Avito website. There are many illustrative examples of fraud using the victim’s phone. And, of course, once again I will remind you of the basic precautions:

  • Never, under any pretext, tell others the numbers of the codes received in SMS. Even if you didn’t “shine” the card number anywhere, and you don’t have other bank accounts. The received code can be a password from the Operator's Personal Account, and God forbid, if you have auto-replenishment based on the balance on your balance.
  • Don't post your primary phone number online. It is also impossible to link this number to a bank card; you can inadvertently get a Trojan. It is better if such a "public" number is in the most primitive dialer.
  • I would not risk actively using the main bank card to transfer and receive money either, it’s useless.
  • If you use the "Autopayment" service, then do not be too lazy to evaluate your expenses and set a hard limit on the maximum amount of money transfer from the card to the balance per month. Five to ten minutes spent on this can save you from losing a significant amount.
  • If you are offered to go to an ATM to “receive a transfer to a card”, “enter an unlock code”, or “confirm” something, then communication with the “buyer” or “bank security service” should immediately stop. It seems that it should be obvious, but they go to “receive the transfer” and transfer money to the scammer themselves.
  • Sometimes a very simple approach like “to transfer money, the bank requires the full card number, with all the numbers on the back”, works. And they dictate.

Finally, don't overestimate your intelligence with intuition. For you, hitting a scammer will be the first experience, and for him you are one hundred and twenty-one, he is much better prepared for a conversation than you are. I remember when I called the number indicated in the SMS “from the bank” (“Your card is blocked, call blah blah.”), I sincerely admired the professionalism. The dialogue was executed impeccably, and the details important to the fraudster were clarified in passing, in the general stream of neutral questions. Yes, on April 1, the Central Bank announced a reduction in the volume of cyber fraud in 2015 to “only” 1.14 billion rubles, but this statistics will not console the victims.

The text was already written when I read the latest publication in Izvestia, you can read it here. Quote:

“The head of Roskomnadzor Alexander Zharov instructed his deputies to prepare a commercial that would talk about the dangers of buying SIM cards from sellers. The video is being made to be shown on federal TV channels.

The official representative of Roskomnadzor, Vadim Ampelonsky, said that the creation of the video is necessary to inform citizens that buying SIM cards from their hands is not safe for their wallet.

— When you buy a SIM-card from your hands, it is not clear with whom the contract for the provision of services is concluded and when it will terminate, — Ampelonsky explains. “For example, a person bought a SIM card for himself, put 10 thousand rubles on it, and in the morning it turns out to be inoperative and the money deposited in the account cannot be returned.”

That is, we are also talking about what I wrote about in the section “About “collecting tribute” from gift SIM cards”, see above. But in the form of an abstract video-horror stories without explanations and specifics. Probably useful too. It is important that the very fact of preparing the video and the comment about the disappearance of money confirm the urgency of the problem. Be careful and attentive, not all SIM cards are equally useful.

Operators, reading mail

Another review based on your letters. This time, something interesting about Sberbank and the Avito website, an unexpected decision to steal money from the balance, about canceling the blocking of BIT Promo options at the last moment. Read and take note, "note to the hostess."

BIT Smart A,B,C while they live

I recently wrote that MTS decided to close their BIT Smart promo options for the most economical ones, you can read about this news in our review here. Unexpectedly, two days before the scheduled shutdown date (April 18), they changed their minds and decided to leave. New connections were banned on April 1, but these options were retained for those who were previously connected. What was it and why did they do it? First "advertising" an unpopular measure, and then abandoning it at the last moment is a strange maneuver. One way or another, users of BIT Smart A, B, C need not worry yet, it should continue to work.

And, as it was correctly written in the comments, the connected option may not be displayed on the main page of your personal account, check the full list of connected services.

About "collecting tribute" from gift SIM-cards

We are talking about donated SIM cards with an unusually attractive "promotion" tariff. The only condition is the need to replenish the balance by a decent amount to “activate” this wonderful tariff. The money put on the balance disappears, the non-existent miracle tariff does not materialize. In a recent review, I suggested that money from the balance of the victims is being pulled through a pre-connected Personal Account, and advised at least entering your password into the Personal Account before depositing a noticeable amount into the account. Especially in those cases when the SIM card was received from the promoter, and not bought in a communication salon. If you believe the letter that came to me, then the fraud scheme is ingeniously simple. How did this not occur to me? Quote with some abbreviations:

“I’ll open the veil a little and tell you how money is withdrawn from such numbers. In short, the sim cards themselves are dead, a piece of plastic. Printed materials and other attributes of "promotions", booklets, stickers, stickers, etc. are ordered. Then, through a figurehead, students are hired to distribute these same cards in crowded places, such as exits from the metro, shopping centers, squares, etc.

So, about the withdrawal of money. There are, say, 10 active numbers that are anonymous. In the memos, not the native number is pasted on the SIM card, but one of these ten numbers. Thus, a person replenishes not his number, but the number of a scammer. Accordingly, the more numbers, the less chance of getting burned when distributing sim cards.

At the same time, it works from 2-3 distribution groups to 10-15 and even more. Distribution time must be the same for all groups. Usually the distribution time is 1-2 hours.

Then the person sits and waits for people to put money on his numbers. They withdraw in different ways, they used to withdraw through anonymous qiwi wallets, as I don’t know now. The net output for such an action usually starts from 100 thousand rubles.

Agree, simple and beautiful. No hassle with activating your Personal Account, tracking the balances of all SIM cards and withdrawing money from hundreds of numbers. People themselves transfer their money to scammers, because few people would think of checking the phone number on the sticker. In general, don't get caught. As I already wrote last time, an unusually favorable tariff, a public “promotion” with a distributor and a requirement to replenish the balance for activation should be alarming. And it’s better not to buy SIM cards from distributors on the street, even if you are offered a SIM card as a gift and without registering passport data.

Again about Avito and Sberbank

Many complaints about credit card and bill fraud. It has already begun to look like an epidemic, not only like Avito and not only Sberbank. It’s just that there are a lot of Sberbank cards on hand, and on Avito it’s convenient for fraudsters to choose suitable clients for themselves and contact them, plus the need to move money. I have already written more than once that it is categorically impossible to tell outsiders the numbers of the code that came to the phone, this does not end with anything good. In the last letter, too, it all started with a code. There is also useful information, so I am quoting the letter here, albeit in a greatly abbreviated form.

“I was prompted to write a letter to you by one most unpleasant event in my life that happened the day before, 04/17/2016. I have been using the site for placing free ads Avito.ru for a very long time, the bill for purchases and sales goes to hundreds.

A call from a fraudulent buyer (M., in fact). A few hours after the ads were posted, a man called, discussed the things he needed, offered to pick up the furniture by a transport company today. The next stage - asks how you can make a calculation, I myself offer a transfer to a Sberbank card (I use this method all the time). The next step was supposed to stop me, but didn’t stop ... M. offered to attach my card to the account of his company (in words), asked me to give the card number and go through registration through the confirmation codes I received, which I should receive, but even here I follow his instructions. We are in touch with him, he attaches my card to his accounts (in fact, he is registering with Sberbank online in the Android application), I receive a confirmation code, I tell M., then the second code comes, to enter Sberbank itself online and access to all my accounts. I will say right away that I managed to save the money by some miracle. During the second pause (before the second message to M. by me of the second Sberbank login code online) and waiting for SMS, I have something and I manage to go to the Sberbank personal account and transfer the entire amount to the second card (by the way, I reported https://cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ M. number of my salary card, on which all the money was). As soon as I do this, I start receiving SMS about an attempt to withdraw 10 tr, then 5 tr, 500 rubles, Beeline payment for 2 tr. . But the money has already been transferred to another card.”

Further in the letter, a long description of the process of communication with Sberbank technical support (lucky, they answered right away), access to the Personal Account was blocked, although, according to the author, the account was available for another two hours. Also blocked access to all accounts. Now the interesting thing: while the author was talking to technical support, the scammer managed to get through the Personal Account to the second card and transferred money from it to the author's savings account. What for? I don't know, but it would be interesting to know. Maybe it is possible to steal money from a savings account without SMS confirmations, or was it calculated that the author would block his cards, but would not think about the account? And the continuation of the story:

“Until the evening I was tormented, asking myself questions, how could I trust and go on about it and, most importantly, why the attacker did not manage to transfer the amount to his accounts, but transferred only to my own savings account? And why did the offender try to transfer money when I already realized that I had fallen for M.'s bait? Those. I did not give him any confirmation codes for the transfer of amounts. In the end, I could not stand it and around 9 pm I called him. He picked up the phone right away, I asked him how he did it and how it works. He said that I was lucky, he just did not have time. From the conversation, I learned that when working with Sberbank online through the Android application, you can transfer amounts up to 30 tr. to other accounts of Sberbank customers without confirmation codes! And with confirmation up to 500 tr.”

The next day I went and wrote a statement to the police on the fact of an attempted theft of money, that's another story. I do not presume to judge our authorities, I submitted an application, but the essence is this - an attempted theft is not a crime, no one needs audio recordings, a phone number.

Why did I write this? First, to warn everyone that anyone can be in my place. Secondly, I would like you to raise the topic of banking applications and a description of their strengths and weaknesses. Thirdly, I don’t understand how it is possible to transfer large amounts without confirmation using a mobile application, while this cannot be done when using the Sberbank personal account through a browser. And fourthly, I want to warn people to at least read SMS, in which Sberbank itself informs that confirmation codes should not be reported to anyone!

The story is interesting, of course. First of all, it is amusing that the author really miraculously did not suffer. Saved quick action after inadvertently issuing access codes. Fraudsters are often good psychologists, and here you don’t need to be a special psychologist. Working out similar scenarios several times a day, a person has long studied all the options for the behavior of the “client” and is ready to give a plausible and convincing answer to any question of a potential victim. And if the SIM card was changed by a fake power of attorney, then only the bans on Mobile Payments and SMS blocking, which turn on for a few hours after replacing the SIM card, will partially save. And it’s not a fact that they will save you, read our review here.

See the "Security" section of the Avito website. In fact, this link should be placed in a prominent place on the main page of the Avito website. There are many illustrative examples of fraud using the victim’s phone. And, of course, once again I will remind you of the basic precautions:

  • Never, under any pretext, tell others the numbers of the codes received in SMS. Even if you didn’t “shine” the card number anywhere, and you don’t have other bank accounts. The received code can be a password from the Operator's Personal Account, and God forbid, if you have auto-replenishment based on the balance on your balance.
  • Don't post your primary phone number online. It is also impossible to link this number to a bank card; you can inadvertently get a Trojan. It is better if such a "public" number is in the most primitive dialer.
  • I would not risk actively using the main bank card to transfer and receive money either, it’s useless.
  • If you use the "Autopayment" service, then do not be too lazy to evaluate your expenses and set a hard limit on the maximum amount of money transfer from the card to the balance per month. Five to ten minutes spent on this can save you from losing a significant amount.
  • If you are offered to go to an ATM to “receive a transfer to a card”, “enter an unlock code”, or “confirm” something, then communication with the “buyer” or “bank security service” should immediately stop. It seems that this should be obvious, but they go to “receive the transfer” and transfer money to the scammer themselves.
  • Sometimes a very simple approach like “to transfer money, the bank requires the full card number, with all the numbers on the back”, works. And they dictate.

Finally, don't overestimate your intelligence with intuition. For you, hitting a scammer will be the first experience, and for him you are one hundred and twenty-one, he is much better prepared for a conversation than you are. I remember when I called the number indicated in the SMS “from the bank” (“Your card is blocked, call blah blah.”), I sincerely admired the professionalism. The dialogue was executed impeccably, and the details important to the fraudster were clarified in passing, in the general stream of neutral questions. Yes, on April 1, the Central Bank announced a reduction in the volume of cyber fraud in 2015 to “only” 1.14 billion rubles, but this statistics will not console the victims.

The text was already written when I read the latest publication in Izvestia, you can read it here. Quote:

“The head of Roskomnadzor Alexander Zharov instructed his deputies to prepare a commercial that would talk about the dangers of buying SIM cards from sellers. The video is being made to be shown on federal TV channels.

The official representative of Roskomnadzor, Vadim Ampelonsky, said that the creation of the video is necessary to inform citizens that buying SIM cards from their hands is not safe for their wallet.

— When you buy a SIM-card from your hands, it is not clear with whom the contract for the provision of services is concluded and when it will terminate, — Ampelonsky explains. “For example, a person bought a SIM card for himself, put 10 thousand rubles on it, and in the morning it turns out to be inoperative and the money deposited in the account cannot be returned.”

That is, we are also talking about what I wrote about in the section “About “collecting tribute” from gift SIM cards”, see above. But in the form of an abstract video-horror stories without explanations and specifics. Probably useful too. It is important that the very fact of preparing the video and the comment about the disappearance of money confirm the urgency of the problem. Be careful and attentive, not all SIM cards are equally useful.

Operators, reading mail

Another review based on your letters. This time, something interesting about Sberbank and the Avito website, an unexpected decision to steal money from the balance, about canceling the blocking of BIT Promo options at the last moment. Read and take note, "note to the hostess."

BIT Smart A,B,C while they live

I recently wrote that MTS decided to close their BIT Smart promo options for the most economical ones, you can read about this news in our review here. Unexpectedly, two days before the scheduled shutdown date (April 18), they changed their minds and decided to leave. New connections were banned on April 1, but these options were retained for those who were previously connected. What was it and why did they do it? First "advertising" an unpopular measure, and then abandoning it at the last moment is a strange maneuver. One way or another, users of BIT Smart A, B, C need not worry yet, it should continue to work.

And, as it was correctly written in the comments, the connected option may not be displayed on the main page of your personal account, check the full list of connected services.

About "collecting tribute" from gift SIM-cards

We are talking about donated SIM cards with an unusually attractive "promotion" tariff. The only condition is the need to replenish the balance by a decent amount to “activate” this wonderful tariff. The money put on the balance disappears, the non-existent miracle tariff does not materialize. In a recent review, I suggested that money from the balance of the victims is being pulled through a pre-connected Personal Account, and advised at least entering your password into the Personal Account before depositing a noticeable amount into the account. Especially in those cases when the SIM card was received from the promoter, and not bought in a communication salon. If you believe the letter that came to me, then the fraud scheme is ingeniously simple. How did this not occur to me? Quote with some abbreviations:

“I’ll open the veil a little and tell you how money is withdrawn from such numbers. In short, the sim cards themselves are dead, a piece of plastic. Printed materials and other attributes of "promotions", booklets, stickers, stickers, etc. are ordered. Then, through a figurehead, students are hired to distribute these same cards in crowded places, such as exits from the metro, shopping centers, squares, etc.

So, about the withdrawal of money. There are, say, 10 active numbers that are anonymous. In the memos, not the native number is pasted on the SIM card, but one of these ten numbers. Thus, a person replenishes not his number, but the number of a scammer. Accordingly, the more numbers, the less chance of getting burned when distributing sim cards.

At the same time, it works from 2-3 distribution groups to 10-15 and even more. Distribution time must be the same for all groups. Usually the distribution time is 1-2 hours.

Then the person sits and waits for people to put money on his numbers. They withdraw in different ways, they used to withdraw through anonymous qiwi wallets, as I don’t know now. The net output for such an action usually starts from 100 thousand rubles.

Agree, simple and beautiful. No hassle with activating your Personal Account, tracking the balances of all SIM cards and withdrawing money from hundreds of numbers. People themselves transfer their money to scammers, because few people would think of checking the phone number on the sticker. In general, don't get caught. As I already wrote last time, an unusually favorable tariff, a public “promotion” with a distributor and a requirement to replenish the balance for activation should be alarming. And it’s better not to buy SIM cards from distributors on the street, even if you are offered a SIM card as a gift and without registering passport data.

Again about Avito and Sberbank

Many complaints about credit card and bill fraud. It has already begun to look like an epidemic, not only like Avito and not only Sberbank. It’s just that there are a lot of Sberbank cards on hand, and on Avito it’s convenient for fraudsters to choose suitable clients for themselves and contact them, plus the need to move money. I have already written more than once that it is categorically impossible to tell outsiders the numbers of the code that came to the phone, this does not end with anything good. In the last letter, too, it all started with a code. There is also useful information, so I am quoting the letter here, albeit in a greatly abbreviated form.

“I was prompted to write a letter to you by one most unpleasant event in my life that happened the day before, 04/17/2016. I have been using the site for placing free ads Avito.ru for a very long time, the bill for purchases and sales goes to hundreds.

A call from a fraudulent buyer (M., in fact). A few hours after the ads were posted, a man called, discussed the things he needed, offered to pick up the furniture by a transport company today. The next stage - asks how you can make a calculation, I myself offer a transfer to a Sberbank card (I use this method all the time). The next step was supposed to stop me, but didn’t stop ... M. offered to attach my card to the account of his company (in words), asked me to give the card number and go through registration through the confirmation codes I received, which I should receive, but even here I follow his instructions. We are in touch with him, he attaches my card to his accounts (in fact, he is registering with Sberbank online in the Android application), I receive a confirmation code, I tell M., then the second code comes, to enter Sberbank itself online and access to all my accounts. I will say right away that I managed to save the money by some miracle. During the second pause (before the second message to M. I have the second Sberbank login code online) and waiting for SMS, I have something and I manage to go to the Sberbank personal account and transfer the entire amount to the second card (by the way, I reported https: //cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ M. number of my salary card, on which all the money was). As soon as I do this, I start receiving SMS about an attempt to withdraw 10 tr, then 5 tr, 500 rubles, Beeline payment for 2 tr. . But the money has already been transferred to another card.”

A call from a fraudulent buyer (M., in fact). A few hours after the ads were posted, a man called, discussed the things he needed, offered to pick up the furniture by a transport company today. The next stage - asks how you can make a calculation, I myself offer a transfer to a Sberbank card (I use this method all the time). The next step was supposed to stop me, but didn’t stop ... M. offered to attach my card to the account of his company (in words), asked me to give the card number and go through registration through the confirmation codes I received, which I should receive, but even here I follow his instructions. We are in touch with him, he attaches my card to his accounts (in fact, he is registering with Sberbank online in the Android application), I receive a confirmation code, I tell M., then the second code comes, to enter Sberbank itself online and access to all my accounts. I will say right away that I managed to save money by some miracle. During the second pause (before the second message to M. by me the second Sberbank login code online) and waiting for SMS, I have something and I manage to go to the Sberbank personal account and transfer the entire amount to the second card (by the way, I reported https://cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ https://cars45.com.gh/dRF8BkgnHGl19cmd4xL8WTKZ M. the number of my salary card, on which all the money lay). As soon as I do this, I start receiving SMS about an attempt to withdraw 10 tr, then 5 tr, 500 rubles, Beeline payment for 2 tr. . But the money has already been transferred to another card.”

Further in the letter, a long description of the process of communication with Sberbank technical support (lucky, they answered right away), access to the Personal Account was blocked, although, according to the author, the account was available for another two hours. Also blocked access to all accounts. Now the interesting thing: while the author was talking to technical support, the scammer managed to get through the Personal Account to the second card and transferred money from it to the author's savings account. What for? I don't know, but it would be interesting to know. Maybe it is possible to steal money from a savings account without SMS confirmations, or was it calculated that the author would block his cards, but would not think about the account? And the continuation of the story:

“Until the evening I was tormented, asking myself questions, how could I trust and go on about it and, most importantly, why the attacker did not manage to transfer the amount to his accounts, but transferred only to my own savings account? And why did the offender try to transfer money when I already realized that I had fallen for M.'s bait? Those. I did not give him any confirmation codes for the transfer of amounts. In the end, I could not stand it and around 9 pm I called him. He picked up the phone right away, I asked him how he did it and how it works. He said that I was lucky, he just did not have time. From the conversation, I learned that when working with Sberbank online through the Android application, you can transfer amounts up to 30 tr. to other accounts of Sberbank customers without confirmation codes! And with confirmation up to 500 tr.”

The next day I went and wrote a statement to the police on the fact of an attempted theft of money, that's another story. I do not presume to judge our authorities, I submitted an application, but the essence is this - an attempted theft is not a crime, no one needs audio recordings, a phone number.

Why did I write this? First, to warn everyone that anyone can be in my place. Secondly, I would like you to raise the topic of banking applications and a description of their strengths and weaknesses. Thirdly, I don’t understand how it is possible to transfer large amounts without confirmation using a mobile application, while this cannot be done when using the Sberbank personal account through a browser. And fourthly, I want to warn people to at least read SMS, in which Sberbank itself informs that confirmation codes should not be reported to anyone!

The story is interesting, of course. First of all, it is amusing that the author really miraculously did not suffer. Saved quick action after inadvertently issuing access codes. Fraudsters are often good psychologists, and here you don’t need to be a special psychologist. Working out similar scenarios several times a day, a person has long studied all the options for the behavior of the “client” and is ready to give a plausible and convincing answer to any question of a potential victim. And if the SIM card was changed by a fake power of attorney, then only the bans on Mobile Payments and SMS blocking, which turn on for a few hours after replacing the SIM card, will partially save. And it’s not a fact that they will save you, read our review here.

See the "Security" section of the Avito website. In fact, this link should be placed in a prominent place on the main page of the Avito website. There are many illustrative examples of fraud using the victim’s phone. And, of course, once again I will remind you of the basic precautions:

  • Never, under any pretext, tell others the numbers of the codes received in SMS. Even if you didn’t “shine” the card number anywhere, and you don’t have other bank accounts. The received code can be a password from the Operator's Personal Account, and God forbid, if you have auto-replenishment based on the balance on your balance.
  • Don't post your primary phone number online. It is also impossible to link this number to a bank card; you can inadvertently get a Trojan. It is better if such a "public" number is in the most primitive dialer.
  • I would not risk actively using the main bank card to transfer and receive money either, it’s useless.
  • If you use the "Autopayment" service, then do not be too lazy to evaluate your expenses and set a hard limit on the maximum amount of money transfer from the card to the balance per month. Five to ten minutes spent on this can save you from losing a significant amount.
  • If you are offered to go to an ATM to “receive a transfer to a card”, “enter an unlock code”, or “confirm” something, then communication with the “buyer” or “bank security service” should immediately stop. It seems that it should be obvious, but they go to “receive the transfer” and transfer money to the scammer themselves.
  • Sometimes a very simple approach like “to transfer money, the bank requires the full card number, with all the numbers on the back”, works. And they dictate.

Finally, don't overestimate your intelligence with intuition. For you, hitting a scammer will be the first experience, and for him you are one hundred and twenty-one, he is much better prepared for a conversation than you are. I remember when I called the number indicated in the SMS “from the bank” (“Your card is blocked, call blah blah.”), I sincerely admired the professionalism. The dialogue was executed impeccably, and the details important to the fraudster were clarified in passing, in the general stream of neutral questions. Yes, on April 1, the Central Bank announced a reduction in the volume of cyber fraud in 2015 to “only” 1.14 billion rubles, but this statistics will not console the victims.

The text was already written when I read the latest publication in Izvestia, you can read it here. Quote:

“The head of Roskomnadzor Alexander Zharov instructed his deputies to prepare a commercial that would talk about the dangers of buying SIM cards from sellers. The video is being made to be shown on federal TV channels.

The official representative of Roskomnadzor, Vadim Ampelonsky, said that the creation of the video is necessary to inform citizens that buying SIM cards from their hands is not safe for their wallet.

— When you buy a SIM-card from your hands, it is not clear with whom the contract for the provision of services is concluded and when it will terminate, — Ampelonsky explains. “For example, a person bought a SIM card for himself, put 10 thousand rubles on it, and in the morning it turns out to be inoperative and the money deposited in the account cannot be returned.”

That is, we are also talking about what I wrote about in the section “About “collecting tribute” from gift SIM cards”, see above. But in the form of an abstract video-horror stories without explanations and specifics. Probably useful too. It is important that the very fact of preparing the video and the comment about the disappearance of money confirm the urgency of the problem. Be careful and attentive, not all SIM cards are equally useful.