{"id":2486,"date":"2019-05-06T19:31:25","date_gmt":"2019-05-06T18:31:25","guid":{"rendered":"https:\/\/globalfraudforensics.com\/fraudxpose\/?p=2486"},"modified":"2019-05-06T19:31:25","modified_gmt":"2019-05-06T18:31:25","slug":"dealing-with-the-surge-in-sim-swap-frauds-targeting-financial-and-online-services","status":"publish","type":"post","link":"https:\/\/globalfraudforensics.com\/fraudxpose\/dealing-with-the-surge-in-sim-swap-frauds-targeting-financial-and-online-services\/","title":{"rendered":"Dealing with the surge in SIM swap frauds targeting financial and online services"},"content":{"rendered":"

Experts at Kaspersky Lab\u2019s annual Cyber Security Weekend discussed the wide spread growth of mobile payments across the globe and the many cyber risks that surround such technology. Especially the recent SIM swap fraud wave, which have become very common in Africa and the wider region.<\/span><\/p>\n

A SIM swap fraud happens when someone convinces your carrier to switch your phone number over to a SIM card that a criminal possesses. In some cases, there are carrier\u2019s employees working together with criminals. By diverting your incoming SMS messages, scammers can easily complete the text-based two-factor authentication checks that protect your most sensitive accounts in financial services, social networks, webmail services and instant messengers.<\/span><\/p>\n

Many African countries are suited to mobile payment methods. In fact, research<\/a> notes that at the end of 2017, there were 135 live mobile money services across the Sub-Saharan African region, with 122 million active accounts. While payment methods through mobiles offer a convenience that is hard to debate, Kaspersky Lab research shows that mobile payments and the banking system are suffering a wave of attack \u2013 mostly powered by SIM swap fraud \u2013 and people are losing their money as a result.<\/span><\/p>\n

This type of attack is used to not only steal credentials and capture one-time passwords (OTPs) sent via an SMS, but also to cause financial damage to victims, resetting the accounts on financial services, allowing to the fraudsters access to currency accounts not only in banks but also in fintechs and credit unions. Fraudsters are also using it as way to steal money using WhatsApp, loading the messages in a new phone, contacting the victim\u2019s contacts asking for money, simulating an emergency situation.<\/span><\/p>\n

\u201cDespite financial inclusion services prospering, the flip side to this is that it opens up a world of opportunities to cybercriminals and fraudsters who are using the convenience a mobile phone offers to exploit and poke holes in a two-factor authentication processes. Frauds using SIM swap are becoming common in Africa and Middle East, affecting countries like South Africa, Turkey and UAE. Countries like Mozambique have experienced this firsthand. The implemented solution, by banks and mobile operators in Mozambique, as a result, is something I believe we must learn from and encourage other regions to investigate and apply, among other aspects, to mobile payment methods of the future \u2013 as a way to ensure that mobile phones do not become an enemy in our pockets,\u201d said Fabio Assolini, Senior Security Researcher of Kaspersky Lab.<\/span><\/p>\n

The total money lost in the attacks varies by country: there are extreme cases, such as one in the United Arab Emirates, where one victim lost $ 1 million<\/a>, while in South Africa one victim reported losing $ 20,000. \u201cIn average fraudsters can steal $2,500 to $3,000 per victim, while the cost to perform the SIM swap starts with $10 to $40,\u201d conclude Assolini.<\/span><\/p>\n

In order to protect the growing mobile digital life and payment methods, Kaspersky Lab recommends the following key considerations:<\/span><\/p>\n