Consumers in the UAE are being urged to remain vigilant after a recent spate of telephone bank fraud schemes, as criminals increasingly find sophisticated methods to trick people to give their personal details and steal their money.
UAE resident GS, who has requested to remain anonymous, had Dh171,000 ($46,562) stolen after receiving a call at 1pm on January 20 from a new number that showed the name of his bank.
“The person said he was calling from my bank’s Know Your Customer department and wanted to update my Emirates ID in the system to comply with financial regulations,” the 39-year-old from France told The National.
“They asked me to confirm my date of birth as a security feature and for the last few digits of my account number. I wasn’t too worried because I thought it wasn’t possible to do anything with just my account number.”
A KYC check is the process of identifying and verifying a customer's identity when opening an account or updating it when their documents have been renewed, such as their passport, work visa or Emirates ID.
It is a mandatory process under the UAE's anti-money laundering regulations.
During the phone conversation, the fraudster dropped hints to convince GS of his credentials.
The criminal shared a picture of a bank employee’s ID card, said the conversation was being recorded and also sent a fake SMS from Dubai Police, which later turned out to be a one-time password, to convince GS that he was genuine.
The victim was sent a one-time password (OTP) from his bank’s KYC portal. He also received another automated call allegedly from his bank asking him to rate his interaction with the account manager.
The fraudster managed to retrieve GS’s phone banking username and reset his password.
There has been an increase in the amount of fake emails, bogus calls and text messages aimed at tricking people into sharing their personal details and stealing their money.
Despite more than half of respondents (61 per cent) in the UAE claiming to be savvy enough to sidestep online and phone fraud, the reality is that nine in 10 are likely to disregard the warning signs that suggest online criminal activity, according to Visa’s annual Stay Secure survey released in December.
About 54 per cent of people in the UAE have been a victim of fraud at least once, compared with the global average of 52 per cent, the study found.
How criminals use technology to scam victims – in pictures
-
The use of technology in everyday lives has led to growth in scams and fraud. Reem Mohammed / The National -
Phishing is one of the most common methods used by fraudsters and it involves sending an unsolicited email that appears to be from a financial institution or online retailer. The National -
Smishing — the SMS equivalent of phishing — is where fraudsters falsify the telephone number so it appears to be a genuine text from a bank or well-known company. Chris Whiteoak / The National -
Vishing is the telephone equivalent of phishing and smishing. Fraudsters may pose as bank staff, police or government officials. Getty Images -
SIM swap involves fraudsters duplicating the SIM of your mobile number without your knowledge or authorisation, allowing them to conduct financial transactions with your bank. AP -
Identity theft is where someone illegally obtains your confidential information, through various ways such as theft of your wallet, bank and utility bill statements, computer intrusion and social networks. Getty Images -
Prize scams involve fraudsters claiming to represent well-known organisations. They contact victims to tell them they have won a cash prize and request them to share confidential banking details to transfer the prize money. -
Instagram influencer Ramon Abbas, known as Hushpuppi, used a technique known as business email compromise. -
The tax authority said some bank customers in the UAE have received phishing emails impersonating financial institutions. EPA -
Jenny Ross, Which? Money editor, says: ‘Scammers are relentless when it comes to wanting our personal information and ultimately our money.’ PA -
Netflix's The Tinder Swindler tells the story of three women who say they were conned out of $500. Photo: @simon_leviev_official via Instagram
Even more alarming is that 17 per cent of victims in the Emirates have been conned by fraudsters several times, against a global average of 15 per cent, according to Visa.
In the UAE, cyber crime costs $746 million a year and involves more than 166,000 victims, according to research by UK consumer watchdog Comparitech.
Experts from cybersecurity company Kaspersky warned against banking fraud schemes aimed at people in the UAE in a note last year.
Cyber criminals have been increasingly posing as prominent banks, exploiting the element of fear in people and compelling them to divulge financial and personal information through various tactics, the company said.
Phishing emails have been a common mode of attack used by cyber criminals to fool people. Other similar requests that often appear to be urgent and are exploited by criminals include suspension of transactions and compliance with the UAE Central Bank, it added.
“They transferred Dh53,000 from my current account to my savings account, got approval for a cash advance worth Dh75,000 on my credit card and also took a loan on my credit card for Dh33,000,” GS said.
“All this money was moved to my current account and transferred to two external accounts, which they added as beneficiaries. They emptied the current account of Dh171,000. Everything took place in less than 15 minutes.”
The fraudsters made sure GS was busy writing down reference numbers during the call so he wouldn’t check his phone to see transaction details.
He was asked to approve transactions by sliding a bar on his phone and using his finger to authenticate them. However, he did not receive any OTPs or text messages.
“The guy was very calm, composed and friendly. He was acting like a real relationship manager, taking his time and there was no rush. I should have been less naive,” GS said.
He has now filed a police complaint and raised the issue with the Central Bank to retrieve his money.
Emirates NBD, Dubai's biggest lender by assets, launched a UAE-wide safe banking campaign in November after reports of customers being the targets of fraudsters.
Themed #IWillSurvive, the campaign aims to raise public awareness of cyber security and encourage customers to take action and actively report fraudulent activity or attempts, so that more people are aware and remain vigilant.
Emirates NBD, Abu Dhabi Commercial Bank and HSBC had yet to comment before publication.
Banking fraud calls asking customers to update their KYC details are increasingly common, warned Ambareen Musa, founder and chief executive of financial literacy start-up Yabi by Souqalmal.
“No one, including your bank or police, will ever ask you to verify through OTP, so if you receive a call from your bank asking you to go into your banking app to give them your OTP or code, this is a scam. Hang up the call,” she said.
“To make you believe them, they ask you to confirm your account number, but only the last three digits.
“The beginning of your IBAN number is generic as it represents the bank and the location, so anyone can know it. The last few digits of your IBAN is your account number, so if anybody asks you to confirm the last few digits of your account number, that means you are giving away your bank account number.”
Fraudsters have become sophisticated and are using other means to acquire half of a person's information to get them to verify the remainder, she warned, as she called on people to be extremely careful.
“We have had three Yabi team members getting calls from their bank supposedly asking them to update their KYC in the last three days. They were all fake calls, but they do not sound fake at all,” she added.
“Banks should come together to spread awareness to prevent such financial crimes.”
