Fake SMS

Beware of fake SMS purportedly from one of the banks informing that you have reward points to be claimed.

These fake SMSs are usually sent to unsuspecting victims, informing them of unclaimed reward points.

To claim the points, victims are required to click on a link that directs them to a website prompting them to enter credit/debit card details and personal information.

The fake websites and links may contain malwares designed to steal the victim’s credit/debit card details and personal information.

Stay alert and do not click the link in the SMS.

Always call the telephone number behind your card or refer to Bank's official website when in doubt.

Safer Transactions with Debit Cards

Protect your banking and personal details at all times especially for online transactions. Stay alert on your debit card transactions using these precautions. Never let your guard down when you make online purchases.

1. Always check the URL of the website. Ensure the "lock" icon or "https" is on the address bar.

2. Find a reputable online seller by reading reviews from other customers.

3. When transacting online, NEVER proceed with a purchase if you doubt the seller is genuine.

Here's some tips to protect your debit card transaction:

1. Secure your debit card details and PIN at all times, including at your place of residence.

• Avoid writing down or disclosing them anywhere
• Avoid using a PIN based on your birth date, identity card number, or anything easy to guess
• Don't allow anyone else to use your debit card or PIN

2. Notify the Bank as soon as the debit card in deemed lost, stolen, an unauthorized transaction has occurred, or the PIN has been compromised.

3. Notify the Bank immediately if there is an SMS alert of an unauthorized transaction.

4. Notify the Bank immediately if there is any change in the card holder's contact number.

5. Use the debit card responsibly and avoid fraudulent transactions.

6. Check your account statement regularly and report any discrepancies immediately.

Common tricks scammers used to target you:

• Phone - Scammers impersonating bank officers may call and ask for your TAC or account number
• Phishing - Scammers may send phishing links to trick you into exposing your personal details
• Free/Public Wi-Fi - Scammer may gain virtual access to your personal information sent over public networks
• Account Takeover - Malwares on your device may exploit your banking information that could then be used for fraudulent transactions

Stay Alert. Stay Safe.

Antidot Trojan

A new technique where scammers lure victims with fake job offers tricking them to install a malicious application as part of a fraudulent hiring process. The malware is an Android Trojan app disguised as a Google Play Update app. Once installed, it enables the scammer to gain full administrative privileges and remote control of android devices.

How does it work?

The scam usually starts with the victim receiving an email or message from the scammer with a job offer.

It might include a link or attachment asking the victim to download an application form, contract or further instructions.

The scammer will instruct the victim to click on a link or attachment that leads to an application form, contract or more information. Once the link is clicked, an Antidot Trojan will be automatically installed onto the victims device.

This malware will run silently in the background and will steal any sensitive information like banking credentials and bank account details. The scammers can then use these stolen information to access your online banking account.

How to protect yourself?

• Only download apps from official stores.
• Be cautious about the permissions requested by apps and avoid allowing permissions for unnecessary functionalities.
• Keep your device software and installed apps updated to the latest version regularly.