Phishing: Be aware of scam

Exchange

Symbol BNR Buy Sell
EUR 4,9746 4,9000 5,0500
USD 4,6864 4,6300 4,7800
GBP 5,7433 5,6400 5,8200
CHF 5,1446 5,1300 5,1900
SEK 0,4329 0,3980 0,4520
100 JPY 3,1424 3,0900 3,2500

* Current account exchange rates

Find out more
Natural person 1 month* 3 months
EUR 0,60% 1,00%
RON 5,75% 6,75%
Find out more
Index Last update Rate
EURIBOR 12 LUNI 02.10.2023 4.22800%
EURIBOR 6 LUNI 02.10.2023 4.12500%
IRCC 01.10.2023 5.96000%
ROBOR 3 LUNI 02.10.2023 6.40000%
ROBOR 6 LUNI 02.10.2023 6.50000%
SARON 1MC+M1 02.10.2023 0.64980%
SARON 3MC+M3 02.10.2023 0.71100%
SARON 3MC+M6 02.10.2023 0.78200%
Find out more

Phishing - what does it mean

Phishing is usually done through email, ads, or by sites that look similar to sites you already use. For example, someone who is phishing might send you an email that looks like it's from your bank so that you'll give them information about your bank account.

It's important to remember that we'll never send you text messages or emails that ask you to confirm, update or disclose personal or banking information. You can reduce your risk of being scammed by paying close attention to messages or emails.

Common types of phishing

  • In this case, the fraudsters send to the cards’ users an e-mail that simulates, in a very truthful way that it would come from the issuing bank of their card. By this email the cards’ users are informed either that they have to update their data or that their accounts have been blocked due to the application of new security measures, the users being invited to access a link to solve the situation.
    Thus, the user is directed to a fake page, which mimics the website of the issuing bank, in which he is asked for the security elements of the card and other information (e.g. security codes sent via SMS to customers) that allow them to enroll cards in the application Apple Pay / Google Pay (wallet), installed on fraudsters' phones.

    Generally, at this stage of the card enrollment procedure, the issuing bank sends the correspondent security code in a generic SMS message. It is extremely important that users read these SMS very carefully in order to identify those fraudulent cases and not to transmit to third parties the security codes received via SMS, respectively not to enter them in the fake pages. Once the security code is entered on the fake page, it is sent in real time to the attackers, who complete the card enrollment procedure and gain full access to the available funds related to that card, which they use immediately.

    This pattern of fraud was also encountered in the case of marketplace platforms, in the sense that the attackers requested the above information under the pretext of paying for products sold through marketplace platforms, the result being the same, the enrollment of cards in electronic wallets controlled that are by attackers.

     

  • This type of fraud is a version derived from the above version, with the difference that the attackers do not seek to enroll the card on wallet applications, but to gain access to the internet banking or mobile banking application of the payment service user, by activating the tokens used for authentication/ authorization (software type) on their phone. However, the mode of operation is almost similar.

    In this case, too, it is extremely important that users read carefully these SMS messages that contain security codes to identify those fraudulent cases and not to enter unsolicited security codes in various applications.

     

  • Card-on-file operations involve the enrollment of the card in a merchant's system, by entering the data on the card at the time of the first payment transaction, the subsequent payment transactions being automatic based on the mandate offered to the merchant during the card's enrollment. Such transactions are usually made to merchants that offer games / applications / monthly subscription services to streaming services / etc., generally being initiated by customer or the family members of the payment service user, but they can also be fraudulent transactions such as because of frauding of the accounts held with such traders.

    Generally, in the first stage of the card enrollment procedure, the issuing bank sends the respective security code in a generic SMS message. It is extremely important that users read these SMS very carefully in order to identify those fraudulent cases and not to transmit to third parties the security codes received via SMS, respectively not to enter them in the fake pages.

More information on how to keep your data safe can be found in the section on data security.

Be informed