Bank card piracy refresh feature: the money in the link card is gone

Recently, the People's Bank of China and other six departments issued a notice to carry out a joint action to jointly crack down on illegally buying and selling bank card information from September this year to April 2017. One of the important contents is to crack down on online bank fraud. The reporter interviewed many localities and learned that, after stealing the depositor magnetic stripe card information in the past, the “cloning” card stealing account funds is different. With the rapid development of internet finance, bank card theft has new features, users may click on the money in the link card. It’s gone.

The number of online stolen brush cases is high

According to the relevant person in charge of the Economic Investigation Bureau of the Ministry of Public Security, in the first five months of this year, 177 criminal cases involving theft, purchase and illegal provision of bank card information were investigated and filed nationwide, a year-on-year increase of 4.5 times. The bank card information leakage method has been developed from the past modification of POS machines and ATM machines to steal data and passwords, etc., and has been developed into a batch stealing method using hacker technology or pseudo base stations and phishing websites.

The reporter learned in interviews in Fujian, Hunan, Guangdong and other places that in the case of online stolen brushing, the fraudsters took charge of the charging platform customer service staff, sending a text message with “exceptional order refund” or virtual bank customer service number to send “points”. Redeem ""Internet Banking Upgrade" and other text messages to trick the victim into clicking the Trojan link or logging into the phishing website to obtain information such as the victim ID number, bank account number, password, verification code, etc., and stealing account deposits.

Dynamic verification code is easy to be stolen

Banking industry insiders said that banks basically use dynamic verification codes to protect the security of online banking and mobile banking. However, from the perspective of the case, the seemingly safe dynamic verification code is also easily stolen by fraudsters, resulting in high fraud.

In July 2015, criminals used the online payment platform developed by Chongqing Three Gorges Bank to “three gorges pay”, stealing 43 customers' bank card funds within 3 days. According to the investigators, the criminals first sent a text message containing the Trojan virus to the victim's mobile phone. After the victim clicked on the text message, the criminal could obtain all the information in the mobile phone and intercept any SMS messages received by the mobile phone. From this information, the criminals screened out the name of the account holder, the ID card number, the bank card number, and the mobile phone number reserved by the bank, and used this information to register the “Three Gorges Pay” electronic account, and the victim bank card and the “Three Gorges Pay”. Account binding. By intercepting the verification code received by the victim's mobile phone, the criminals can set the "Three Gorges Pay" account transaction password, transfer the funds in the victim's bank card through the "Three Gorges Pay" account, and online consumption.

Online pirate bank is not responsible

Many bankers believe that in the case of online theft, the source of information leakage is the victim himself, and it is difficult to think that there is a fault in the bank.

Some public security police, banking professionals and legal experts said that there should be more measures to prevent bank card theft. Depositors should strengthen their awareness of risk prevention, and do not click on SMS links and pictures from unknown sources. From the perspective of banks, they should upgrade their technical means, including improving the mode of mobile banking and online banking relying solely on SMS verification codes for fund account operations. High-protection technology prevents theft of theft and strengthens the tracking and supervision of abnormal capital flows.