Vishing
Vishing involves impersonating a bank employee using a bank telephone number. The customer is made to believe they are talking to a bank employee or other trusted person.
Elements that may indicate an attempted phone attack:
- The caller asks you to take an unusual action, such as installing software.
- The caller puts you under time pressure, says the matter is very urgent.
- The caller asks you to provide your payment card details,
- The caller tries to make you feel strong emotions, such as fear.
- The caller asks you to perform a transaction, such as transferring money to another account or entering a BLIK code.
Remember!
Information stealing:
- A login or password for online banking.
- Installing additional software or gaining remote access to customers' computers/phones.
- The full card number and CVV code.
- Entering a BLIK code, making a transfer, depositing or withdrawing money at an ATM or bank branch.
If you are not sure you are speaking to a bank employee - hang up, check the number on the website and call back.
You can also use the GOmobile app to easily confirm the identity of the Helpline agent, free of charge.
How do you do this?
- During the call, ask the operator to confirm your identity.
- You will receive a PUSH notification in the GOmobile app.
- In the notification, we will send the employee's details.
- Ask the employee for their first and last name.
- If the details are correct, confirm the notification by entering the PIN set for the GOmobile app.
Do not proceed with the call until you have received this confirmation.
Fake websites
Criminals create fake websites, imitating official ones with great accuracy. At first glance, it is difficult to distinguish a phishing website from a real one.
SMS/Phishing
Phishing is a type of attack that involves sending an email, text message or instant message. The scammer sends us a message pretending to be someone else, such as our friend, our child or an institution we know.
Examples of messages that should trigger our vigilance:
- 'Hi Mum, this is my new number, delete the old one'. - In the next step, the scammer may ask for a transfer or ask for contact on another messenger.
- Your money is in danger, the bank will call you soon. - The scammer tries to scare us by telling us that the "bank" will call us. In reality, we are being called by a fraudster and the advance warning of the call is just to lull us into a false sense of security.
- Someone is sending you a BLIK telephone transfer. Click on the link below to select funds'. - If we click on the link, we may end up on a dangerous website that phishes for information, for example. Money is never collected via a link in an SMS. The actual transfer is made directly to the account.
Scammers are able to display any name of the sender of the message on the victim's phone so that the victim thinks they are being contacted by a bank or courier, for example. Criminals send fake emails with links that lead to dangerous websites. Do not click on links from unknown senders, transfer money or enter a BLIK code if you are not sure who you are writing to.
Avoid scanning QR codes if you do not know the sender of the message.
On-line shopping
Criminals are taking advantage of well-known sales sites. Not only can the buyer be scammed, but the seller can also become a victim. The thief may tell you that they have already paid for the purchase and the seller will receive the money if you click on the link they sent you or, in the second version, they may send you a link to pay for the item. In either case, providing details after clicking on the link sent to you may result in the loss of your account funds.
How can you protect yourself from dishonest people trying to scam you? First and foremost:
- Never click on suspicious links.
- Do not install apps from outside the official Google Play and App Store.
As a seller, you can set a condition that the transaction will only take place if the buyer:
- Pays you using the payment methods offered by the relevant advertising service.
- Transfers the money to your account (the only information you need to provide is your name and account number).
- Pick up the goods in person and give you the money in cash.