I found this information very useful from HSBC. Yet many people still fall into it because either they are very careless or ignorant. <\/p>\n\n\n\n
How Scammers works?<\/strong><\/p>\n\n\n\n Scammers are sending deceptive links disguised as messages from trusted parties like telcos, banks or courier\u00a0companies. These notifications often urge you to click on a link to ‘Verify Your Account’, ‘Track Your Delivery’, or ‘Claim Your Reward Points’ – but they’re designed to steal your personal and financial details.<\/p>\n\n\n\n Protect yourself: dos and don’ts<\/strong><\/p>\n\n\n\n Ever click a link from the bank and later found out it is scam link?<\/p>\n","protected":false},"author":1,"featured_media":410,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-8","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lifestyle"],"yoast_head":"\nCase scenario:<\/strong><\/td><\/tr> Mr T.an received a text message claiming to be from a courier company, informing that\u00a0his parcel failed to be delivered due to address issue. The message asked him to make a small redelivery fee of RM1.50 via a link provided.
\u00a0Believing the message to be genuine, Mr. Tan tapped\u00a0on the link, which led to a website that looked like a legitimate courier\u00a0company website. He entered his credit card number, expiry date, and CVV to make the payment.
\u00a0Moments later, he received an SMS OTP from his bank to authorize the transaction. Without reading the full message, Mr. Tan copied and pasted the OTP into the website, thinking it was for the RM1.50 transaction. In reality, the\u00a0scammer had used his credit card details to make large amount transaction, and the OTP\u00a0that Mr. Tan entered into the website is to authorise this large amount transaction.\u00a0
What went wrong?
<\/strong>
\u2022 The link was phishing link created by scammer \u2014 a fake website mimicking a real one.
\u2022 The credit card details were harvested in real-time and misused.
\u2022 Mr. Tan did not read the full SMS OTP, which clearly stated a different transaction amount to a different merchant.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nDON\u2019T:<\/strong><\/td><\/tr> \u2022 Click on links in unsolicited SMS or WhatsApp messages claiming to be from any trusted\/authorised parties such as banks, telecommunication companies, courier companies, or even government agencies.
\u2022 Enter your card number, expiry date, or CVV on the links\/ websites provided in SMS or WhatsApp messages.
\u2022 Copy and paste a one-time password (OTP) without carefully reading the full SMS message containing the OTP.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nDO:<\/strong><\/td><\/tr> \u2022 Always read the entire SMS message containing the OTP before entering the OTP. Make sure the transaction amount and merchant name match your intended transaction.
\u2022 Verify the website or contact the company directly using official channels if you\u2019re unsure.
\u2022 Enable transaction alerts and monitor your card activity regularly.<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"