Sophisticated 'tricks' to steal money from bank accounts

Even though no withdrawals or transfers were made, customers still lost large sums of money because their card information was stolen at the ATM or because of increasingly sophisticated criminal scams.

The online conference on card payment safety was held by the State Bank this morning, September 8. At this meeting, Colonel Tran Van Doanh - Representative of the Department of High-Tech Crime Prevention and Control of the Ministry of Public Security (C50) gave a detailed report on the current situation of card crimes. According to him, the criminals are mainly foreigners, coming from China, Indonesia, Malaysia; in the South and Central regions, the subjects are from Eastern European countries such as Bulgaria, Romania, Türkiye, Russia, England, etc.

Stealing card data right at the ATM

Many ATMs are equipped with skimming devices by criminals to steal all information when cardholders withdraw money.

The C50 representative described that with this form of theft, criminals use a plastic board containing a device to steal card information (called a skimming device) to cover the outside of the card slot. With this device, when inserted into the slot, the card will go through the skimming device first and then into the card slot. In this form, criminals will get all the information stored on the card's magnetic strip.

In addition, card criminals also install a small camera, often disguised in a plastic bar or advertising board mounted right above the ATM keyboard, to record all PIN entry activities of customers when withdrawing money.

Mr. Doanh said that after obtaining bank card information and PIN codes, the subjects will use devices to fake bank cards through specialized software and magnetic card data readers and printers sold on the internet and then withdraw money at ATMs. In addition, card criminals also install a small camera, often disguised in a plastic bar or advertising board mounted right above the ATM keyboard to record all PIN code entry activities of customers when withdrawing money.

The foreign subjects were divided into many small groups, with clear assignments of functions and tasks, including a group that installed the device, a group that took the device, collected card information and then sent it to the IT group to make fake cards, and a group that withdrew money.

Skimming crimes are often concentrated mainly in big cities such as: Hanoi, Hue, Hoi An - Quang Nam, Nha Trang - Khanh Hoa, Mui Ne - Phan Thiet - Binh Thuan, Ninh Thuan, Vung Tau, Ho Chi Minh City ...

Get information through fake bank website (Phishing)

Even if the card is in the wallet, the money in the account can still evaporate. Photo: AFP.

According to the police, recently, criminals often take advantage of users' vulnerabilities to steal bank account information. Criminals set up prize websites and send messages via Facebook, Zalo, Viber, etc., informing account holders that they have won valuable assets or objects, asking them to access the websites to register to receive the prize. In addition, criminals can set up fake bank websites, sending links to notify customers that money has been transferred to their accounts but there is an error and they need to provide information for verification.

When the OTP verification code is sent to the phone, the subject impersonates a bank employee and announces that the winning code has been sent for verification, asking the victim to provide it to complete the procedure.

After obtaining the information, criminals use it to buy phone card codes, game cards on online sales websites or transfer money to intermediary accounts to withdraw money or hire people to withdraw money domestically and internationally.

Buy or hire someone to open an account

There is currently no regulation on how many accounts a person can open at a bank, so according to the police, the situation of renting and buying back accounts for the purpose of transferring and receiving fraudulent money and committing crimes is becoming more and more complicated. There is currently no sanction for those who open accounts to sell or rent accounts to receive fraudulent money. These accounts are all opened by Chinese and Taiwanese people in collusion with domestic people who hire people to open accounts for 1-2 million VND (per account). After opening an account, the hired person gives the bank card, user information, and internet banking password to the Chinese people to use to transfer and receive money.

In many cases, accounts are rented and opened, then used to transfer and receive money from buying and selling cryptocurrencies such as bitcoin, onecoin, WMZ, or transfer and receive money from football betting, online gambling. This amount of money, after being transferred to the account, will be withdrawn immediately or transferred to many accounts.

Some Africans met Vietnamese women through social networks, proposed long-term relationships, then announced that they were sending gifts and valuables from abroad to Vietnam. Upon receiving the gifts, they were required to pay an advance amount of money into their pre-existing accounts in order to appropriate them.

Or criminals can attack and hack into the email passwords of the Sales Department of companies that have business relationships with foreign countries to get information about electronic contracts, change the transaction domain name or create reasons to change the beneficiary account to another account opened at a Vietnamese bank. Immediately after that, criminals will withdraw all the money at the transaction counter or withdraw money abroad.

According to VNE