Questions tagged [fraud]
Fraud is wrongful or criminal deception intended to result in financial or personal gain. It is one of the challenges to organisations that Information Security tries to prevent.
147
questions
0
votes
0
answers
27
views
Bank employees asked random 2 characters of password during verification! [duplicate]
Let me ask to experts how bank BBVA and Santander en España can check dedicated digits of my password during call to their hot line?
They said me that it is verification procedure but I am not sure it ...
0
votes
0
answers
38
views
How are these scammers operating from valid IPs? [duplicate]
Lately, my website has had a lot of fraudsters signing up and getting past my security checks.
I use vpnapi.io and stopforumspam.com to vet new registrations but all of the IPs this scammer is using ...
- 1
0
votes
0
answers
35
views
Online stores asking for ID and credit card images [duplicate]
Is it okay for online retailers to ask for an image of my credit card and my ID to validate my authority to use a credit card?
While they are allowed to ask for those images, that actually directly ...
1
vote
0
answers
37
views
Why is PayPal asking for my bank password? [duplicate]
Another posted the exact same question and it was dismissed saying PayPal would never do such a thing.
Well, I was adding a bank acct yesterday to transfer funds and PayPal popped up a username and ...
- 11
1
vote
1
answer
85
views
Ways to safeguard Internet users from fraudulent websites
Extended Validation SSL certificates have been effectively abandoned, as web browsers do not even show them as something special, so my question is: how would you go about safeguarding the user from ...
- 2,552
0
votes
2
answers
152
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
1
vote
0
answers
34
views
Same debit card number issued to more than one account? [closed]
I received text alerts from my bank saying my debit card had beeen used when I hadn’t used it. I started a fraud alert investigation. I was later told another account had the exact same debit card ...
- 11
0
votes
1
answer
75
views
Debit Card Fraud Question [closed]
Somebody tried to make a purchase with my debit card at a Walgreens in another part the state of I live on.I was notified of the purchase attempt via my bank's fraud detection system. However, I have ...
- 101
0
votes
1
answer
274
views
Fraud Detection - 2FA Bypass Methods and SIM Cloning
I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
- 203
0
votes
1
answer
91
views
Can paypal vendors verify card used and/or spending history?
So I recently made a purchase from https://us.roborock.com, a well known manufacturer. During the checkout process, I used PayPal.
However several hours after checkout was complete, I received an ...
- 195
0
votes
1
answer
65
views
Using another's text number to commit ongoing fraud [duplicate]
Some Vietnamese refugee families have been Bitcoin defrauded by someone using an 805 text number. Lookups say it belongs to a party in Tennessee. I want to know if it is possible that scammers in ...
0
votes
3
answers
5k
views
Unknown numbers sending videos on WhatsApp. What should I do?
A number with ISD code +92 sent a video via WhatsApp. No text, only a video. About 20 days later, another number with same ISD sent another video.
Should I open the video?
OR
Should I Report and Block?...
0
votes
1
answer
1k
views
Credit card reader writer
If someone has all the information from my credit card name, exp date, card number, cvv and pin but no card, would they still be able to use a reader-writer or would they have to have the card to copy?...
0
votes
1
answer
201
views
Purpose of fraudulent AWS SL/TLS certificate request for my domain
I just received an email from AWS re Certificate request for [my personal domain].
This email asked me to approve this request with a link or forward to a AWS email for validation.
Needless to say ...
- 101
0
votes
2
answers
615
views
Why would a bus ticketing app require an Internet connection when you board the bus?
The bus company that I use (Arriva UK) is trying to persuade passengers to switch from buying paper tickets to tickets stored on their app. They are particularly pushing this for 'bus passes': tickets ...
- 162
-1
votes
2
answers
205
views
Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?
I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
- 141
0
votes
1
answer
123
views
Is it possible to identify a financial fraud on a Windows machine? How?
How do forensics identify a banking/financial fraud in a Windows system? Malware usually uses real-time TCP sockets to complete their deeds, infecting and compromising the PC it runs on (not the ...
1
vote
1
answer
220
views
Best way to trace possible root cause of card fraud?
I recently had a fraudulent transaction on my debit card (in the UK, where I am based). Having blocked the card, my main concern is to determine how much information has been stolen and how?
As this ...
- 11
0
votes
0
answers
141
views
Is someone using my @domain.com emails for fraud?
I have a TLD, and have set it up to forward any email sent to *@domain.com to [email protected].
Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
1
vote
1
answer
268
views
Is it possible to completely obfuscate proxy servers?
Stripe's fraud detection documentation claims it has
Proxy Detection
When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic.
...
- 1,250
4
votes
0
answers
451
views
What is "JavaGhost - Mass Twilio Checker"?
Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank.
The passwords have all ...
- 1,360
0
votes
1
answer
100
views
my info was compromised [closed]
My ssn,dob,mother's maiden,phone number, and address were compromised and I am worried that some bad people now have all the afore mentioned information. My question is what could criminals do with ...
1
vote
0
answers
123
views
Current iOS Spyware/Stalkerware Capabilities [closed]
I have a child domestic violence victim I am trying to collect evidence from and coordinate relief for (remotely), but I have cause to believe her phone and/or identity has been hijacked in the past ...
- 6,338
2
votes
1
answer
174
views
Is it normal for a company to request this information after stolen card details were used?
My friend's credit card details were randomly used to make a two small purchases on a food delivery app, by someone other than my friend. They have already contacted the bank and cancelled the card.
...
- 63
0
votes
0
answers
855
views
How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]
How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources.
I'm ...
3
votes
2
answers
511
views
Does replacing the SIM card mitigate any threats after a serious data breach?
I recently heard that a telephone company (a mobile network operator) was hacked and lots of data was stolen, maybe affecting up to a million customers. It sounds like the leaked data is already ...
- 15.7k
0
votes
1
answer
883
views
How does a fraudulent credit card charge to a Department of State work?
I looked at my Credit card statement, and noticed a fraudulent charge to what turned out to be the NY Department of State. This was especially odd to me, since I don't live in NY (and so was obvious ...
- 21.6k
0
votes
1
answer
182
views
Security risk for allowing accounts without captcha
I run a website that allows people to create accounts with an email address address and a password. Over the last month, I have had about 100 accounts created with email addresses that look like this:...
- 121
0
votes
1
answer
132
views
Is https://div.show/options fraud/malware? [closed]
Is https://div.show/options fraud/malware? I saw via https://app.uriports.com that a customer tried to load the page mentioned before and it was blocked thanks to CSP.
- 109
0
votes
1
answer
159
views
How can hackers steal from a savings account that has no client card? [closed]
Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
- 103
3
votes
3
answers
321
views
How can I stop fraudulent credit card submissions on a donation site?
We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
- 224
1
vote
1
answer
189
views
A proposal for effortless two-factor authentication
I have an idea for device-level two-factor authentication that involves no direct input from the user, and I wanted to find out if something like it has been tried before.
Let's say I have an account ...
- 13
2
votes
2
answers
615
views
Can cross origin iframe be detected in web logs
A recent blog post shows hackers owning a web server - at least the content and injecting a web skimming attack. https://blog.malwarebytes.com/hacking-2/2020/03/criminals-hack-tupperware-website-with-...
- 21
1
vote
1
answer
156
views
In a website that gives awards, is there anyway to ensure that one user isn't abusing the website and replaying the game by switching emails?
I'm building a website that gives awards to users. After each game I ask the user for their email and send them an email to claim their gift.
Is there anyway to make sure that one user isn't simply ...
- 113
0
votes
0
answers
37
views
How is it possible for people to reverse a GoToAssist session? [duplicate]
I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up "reversing" the connection on them. Essentially controlling the scammer's PC.
Is this done via reverse ...
- 275
-2
votes
1
answer
121
views
Australian Bush fire donation hacking [closed]
On the recent Australian Bushfire event, people are donating to help them. But some inhumane(cybercriminals) are stealing people's money by injecting malicious script on e-commerce and donation sites. ...
1
vote
0
answers
147
views
Credit card fraud - record your face movement to unlock your account
Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud".
I called ...
1
vote
0
answers
138
views
Is it possible to hijack specific e-mail with remote access? [closed]
I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
4
votes
2
answers
1k
views
Mail interception fraud
My company has been the target of a mail fraud attempt for the second time this year.
The fraud goes as followed:
My company sends an invoice to a customer from the email address [email protected] ...
- 141
4
votes
3
answers
4k
views
How could a scammer get my card details if I've never used it
Today I had about $600US spread across 20 transactions taken from my debit card over the past three days (I notified my bank said they will give me a new card and will refund me)
This particular ...
- 161
0
votes
0
answers
128
views
How to protect from being the spoofed number on caller ID?
The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information.
This question is about how to protect oneself when ...
- 556
1
vote
1
answer
165
views
How to prevent / take action against "Merchant Name" fraud?
I work for a charity in Australia. On a couple of recent occasions we have seen this behaviour by thieves:
People search for cheap Dyson vacuum cleaners.
They find a website which claims to sell (...
- 111
22
votes
3
answers
6k
views
Is accepting an invalid credit card number a security issue?
I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
- 411
1
vote
1
answer
3k
views
Can a magnetic credit card writer encode a blank card based off just a credit card number?
I was wondering what info is stored in the CC mag strip. For example: if someone got a hold of by CC number, just the numbers-no CCV, no exp date, etc... it is pretty hard to use my credit card for ...
- 21
1
vote
2
answers
563
views
How does change.org prevent fraud?
On the site change.org it's possible to start a petition.
I found two (somewhat) contradicting statements in their privacy policy:
We do not monitor, verify, or perform any background check on ...
- 721
0
votes
2
answers
140
views
How to find the source of business email account compromise
I have a gmail account [email protected] and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees.
...
- 1,575
3
votes
0
answers
39
views
How do I report scam phone calls? [duplicate]
I get scam phone calls on a regular basis. The latest one was a computer-generated voice claiming to be a security expert from Microsoft and alleging "errors and fraudulent behavior" within my ...
- 307
1
vote
0
answers
152
views
Bot detection without client script
I am working in a small startup and we are looking for Security tools - mostly WAF and Bot Detection (specifically to identify click fraud).
Some solutions that integrate client side scripts are ...
- 111
2
votes
0
answers
132
views
Are printed check security features a gimmick?
This question is perhaps a rough fit for this SE site, but it is about information security, though not specifically about computers.
When ordering company checks, there are a plethora of options. ...
- 307
0
votes
2
answers
282
views
Could someone commit a social engineering "hack" on a credit card processor to get my credit card number?
Peripherally related to: Is it safe to recycle unshredded credit card receipts?.
From some basic research, it seems as though the SEQ number is internal to the company running the POS software, the ...
- 343