The Group-IB company spoke about the fraud with the substitution of payment confirmation pages for purchases on the Internet. According to experts, in Russia the damage from this scheme by the end of the year will reach 1 billion rubles. Group-IB gave recommendations on how not to become a victim of it.
“This type of“ divorce ”was first recorded by Group-IB specialists at the end of 2020,” the company’s website says. “The danger of using fake 3-D Secure pages is that they are quite difficult to identify, outwardly they often contain logos of international payment systems Visa, MasterCard or Russian MIR and do not cause suspicion among buyers seeking to quickly complete a purchase online. At the same time, for the issuing bank, the payment of its client looks legal. “
Group-IB explained: now scammers not only create phishing sites that look like the Internet pages of popular services and online stores, but also imitate payment pages, supposedly protected by 3-D Secure. Previously, this technology was considered one of the most effective for ensuring the protection of user payment information when paying for online purchases.
“Many people have learned to recognize fake“ bank employees ”, you need to be just as careful when shopping online. First of all, you need to pay attention to the source of payment in the SMS message from the bank with the transaction confirmation code. If the words Card2Card or P2P are indicated there, and the payment was initiated not from the specified resources, you should not enter the received code to confirm the payment, ”recommends Pavel Krylov, head of the Group-IB online fraud counteraction department. In his opinion, in order to stop the activities of fraudsters, banks need to block their access to the legitimate 3-D Secure server. “As a rule, this is done using direct requests generated by fraudsters, or in an automated way, i.e. bots. At the moment, only a few of the country’s largest banks have protection against this type of fraud, ”he added.
In May, Sberbank spoke about the record amount of theft from a card of one of the major Russian banks (not Sberbank) – 400 million rubles. According to the Central Bank, in 2020 the average amount of funds stolen from individuals increased to 11.4 thousand rubles.
Read about the main methods of card fraud and how to protect yourself in the material of “Kommersant”.