Questions tagged [fraud]

Fraud is wrongful or criminal deception intended to result in financial or personal gain. It is one of the challenges to organisations that Information Security tries to prevent.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Bank employees asked random 2 characters of password during verification! [duplicate]

Let me ask to experts how bank BBVA and Santander en España can check dedicated digits of my password during call to their hot line? They said me that it is verification procedure but I am not sure it ...
Oleksandr Ismailov's user avatar
0 votes
0 answers
39 views

How are these scammers operating from valid IPs? [duplicate]

Lately, my website has had a lot of fraudsters signing up and getting past my security checks. I use vpnapi.io and stopforumspam.com to vet new registrations but all of the IPs this scammer is using ...
Skye's user avatar
  • 1
0 votes
0 answers
37 views

Online stores asking for ID and credit card images [duplicate]

Is it okay for online retailers to ask for an image of my credit card and my ID to validate my authority to use a credit card? While they are allowed to ask for those images, that actually directly ...
Asha Nautay's user avatar
1 vote
0 answers
39 views

Why is PayPal asking for my bank password? [duplicate]

Another posted the exact same question and it was dismissed saying PayPal would never do such a thing. Well, I was adding a bank acct yesterday to transfer funds and PayPal popped up a username and ...
chris's user avatar
  • 11
1 vote
1 answer
119 views

Ways to safeguard Internet users from fraudulent websites

Extended Validation SSL certificates have been effectively abandoned, as web browsers do not even show them as something special, so my question is: how would you go about safeguarding the user from ...
Artem S. Tashkinov's user avatar
0 votes
2 answers
251 views

Someone seems to have compromised my email address but can't be sure?

Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
user288766's user avatar
1 vote
0 answers
66 views

Same debit card number issued to more than one account? [closed]

I received text alerts from my bank saying my debit card had beeen used when I hadn’t used it. I started a fraud alert investigation. I was later told another account had the exact same debit card ...
Mebabeus9 's user avatar
0 votes
1 answer
128 views

Debit Card Fraud Question [closed]

Somebody tried to make a purchase with my debit card at a Walgreens in another part the state of I live on.I was notified of the purchase attempt via my bank's fraud detection system. However, I have ...
KetDog's user avatar
  • 101
0 votes
1 answer
518 views

Fraud Detection - 2FA Bypass Methods and SIM Cloning

I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
Hack-R's user avatar
  • 203
0 votes
1 answer
131 views

Can paypal vendors verify card used and/or spending history?

So I recently made a purchase from https://us.roborock.com, a well known manufacturer. During the checkout process, I used PayPal. However several hours after checkout was complete, I received an ...
phemmer's user avatar
  • 195
0 votes
1 answer
93 views

Using another's text number to commit ongoing fraud [duplicate]

Some Vietnamese refugee families have been Bitcoin defrauded by someone using an 805 text number. Lookups say it belongs to a party in Tennessee. I want to know if it is possible that scammers in ...
Hugh Giblin's user avatar
0 votes
3 answers
6k views

Unknown numbers sending videos on WhatsApp. What should I do?

A number with ISD code +92 sent a video via WhatsApp. No text, only a video. About 20 days later, another number with same ISD sent another video. Should I open the video? OR Should I Report and Block?...
user271562's user avatar
0 votes
1 answer
2k views

Credit card reader writer

If someone has all the information from my credit card name, exp date, card number, cvv and pin but no card, would they still be able to use a reader-writer or would they have to have the card to copy?...
Lostgirl88's user avatar
0 votes
1 answer
277 views

Purpose of fraudulent AWS SL/TLS certificate request for my domain

I just received an email from AWS re Certificate request for [my personal domain]. This email asked me to approve this request with a link or forward to a AWS email for validation. Needless to say ...
Nigel Savage's user avatar
0 votes
2 answers
834 views

Why would a bus ticketing app require an Internet connection when you board the bus?

The bus company that I use (Arriva UK) is trying to persuade passengers to switch from buying paper tickets to tickets stored on their app. They are particularly pushing this for 'bus passes': tickets ...
Matthew's user avatar
  • 162
-1 votes
2 answers
231 views

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
Bradford Griggs's user avatar
0 votes
1 answer
147 views

Is it possible to identify a financial fraud on a Windows machine? How?

How do forensics identify a banking/financial fraud in a Windows system? Malware usually uses real-time TCP sockets to complete their deeds, infecting and compromising the PC it runs on (not the ...
Paulo Welsch's user avatar
1 vote
1 answer
301 views

Best way to trace possible root cause of card fraud?

I recently had a fraudulent transaction on my debit card (in the UK, where I am based). Having blocked the card, my main concern is to determine how much information has been stolen and how? As this ...
ICapital's user avatar
0 votes
0 answers
171 views

Is someone using my @domain.com emails for fraud?

I have a TLD, and have set it up to forward any email sent to *@domain.com to [email protected]. Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
patriiiicko's user avatar
1 vote
1 answer
336 views

Is it possible to completely obfuscate proxy servers?

Stripe's fraud detection documentation claims it has Proxy Detection When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic. ...
stevec's user avatar
  • 1,280
4 votes
0 answers
548 views

What is "JavaGhost - Mass Twilio Checker"?

Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank. The passwords have all ...
Moshe Katz's user avatar
  • 1,360
0 votes
1 answer
118 views

my info was compromised [closed]

My ssn,dob,mother's maiden,phone number, and address were compromised and I am worried that some bad people now have all the afore mentioned information. My question is what could criminals do with ...
user250621's user avatar
1 vote
0 answers
158 views

Current iOS Spyware/Stalkerware Capabilities [closed]

I have a child domestic violence victim I am trying to collect evidence from and coordinate relief for (remotely), but I have cause to believe her phone and/or identity has been hijacked in the past ...
Ivan's user avatar
  • 6,328
2 votes
1 answer
195 views

Is it normal for a company to request this information after stolen card details were used?

My friend's credit card details were randomly used to make a two small purchases on a food delivery app, by someone other than my friend. They have already contacted the bank and cancelled the card. ...
user9506231's user avatar
0 votes
0 answers
973 views

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources. I'm ...
WHO'sNoToOldRx4Covid-CENSORED's user avatar
3 votes
2 answers
753 views

Does replacing the SIM card mitigate any threats after a serious data breach?

I recently heard that a telephone company (a mobile network operator) was hacked and lots of data was stolen, maybe affecting up to a million customers. It sounds like the leaked data is already ...
reed's user avatar
  • 15.8k
0 votes
1 answer
1k views

How does a fraudulent credit card charge to a Department of State work?

I looked at my Credit card statement, and noticed a fraudulent charge to what turned out to be the NY Department of State. This was especially odd to me, since I don't live in NY (and so was obvious ...
Steve Sether's user avatar
  • 21.6k
0 votes
1 answer
208 views

Security risk for allowing accounts without captcha

I run a website that allows people to create accounts with an email address address and a password. Over the last month, I have had about 100 accounts created with email addresses that look like this:...
minou's user avatar
  • 121
1 vote
1 answer
161 views

Is https://div.show/options fraud/malware? [closed]

Is https://div.show/options fraud/malware? I saw via https://app.uriports.com that a customer tried to load the page mentioned before and it was blocked thanks to CSP.
uav's user avatar
  • 119
0 votes
1 answer
186 views

How can hackers steal from a savings account that has no client card? [closed]

Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
ChrisB's user avatar
  • 103
3 votes
3 answers
340 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
Ben Davis's user avatar
  • 224
1 vote
1 answer
222 views

A proposal for effortless two-factor authentication

I have an idea for device-level two-factor authentication that involves no direct input from the user, and I wanted to find out if something like it has been tried before. Let's say I have an account ...
akovner's user avatar
  • 13
2 votes
2 answers
688 views

Can cross origin iframe be detected in web logs

A recent blog post shows hackers owning a web server - at least the content and injecting a web skimming attack. https://blog.malwarebytes.com/hacking-2/2020/03/criminals-hack-tupperware-website-with-...
Johann's user avatar
  • 21
1 vote
1 answer
177 views

In a website that gives awards, is there anyway to ensure that one user isn't abusing the website and replaying the game by switching emails?

I'm building a website that gives awards to users. After each game I ask the user for their email and send them an email to claim their gift. Is there anyway to make sure that one user isn't simply ...
webdevq1q's user avatar
  • 113
0 votes
0 answers
37 views

How is it possible for people to reverse a GoToAssist session? [duplicate]

I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up "reversing" the connection on them. Essentially controlling the scammer's PC. Is this done via reverse ...
ng.newbie's user avatar
  • 275
-2 votes
1 answer
143 views

Australian Bush fire donation hacking [closed]

On the recent Australian Bushfire event, people are donating to help them. But some inhumane(cybercriminals) are stealing people's money by injecting malicious script on e-commerce and donation sites. ...
Nick Hudson's user avatar
1 vote
0 answers
174 views

Credit card fraud - record your face movement to unlock your account

Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud". I called ...
TiredOfProgramming's user avatar
1 vote
0 answers
155 views

Is it possible to hijack specific e-mail with remote access? [closed]

I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
DrTracii Kunkel's user avatar
4 votes
2 answers
2k views

Mail interception fraud

My company has been the target of a mail fraud attempt for the second time this year. The fraud goes as followed: My company sends an invoice to a customer from the email address [email protected] ...
J_rite's user avatar
  • 141
4 votes
3 answers
7k views

How could a scammer get my card details if I've never used it

Today I had about $600US spread across 20 transactions taken from my debit card over the past three days (I notified my bank said they will give me a new card and will refund me) This particular ...
A G's user avatar
  • 161
0 votes
0 answers
150 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
WBT's user avatar
  • 556
1 vote
1 answer
185 views

How to prevent / take action against "Merchant Name" fraud?

I work for a charity in Australia. On a couple of recent occasions we have seen this behaviour by thieves: People search for cheap Dyson vacuum cleaners. They find a website which claims to sell (...
Adam George's user avatar
21 votes
3 answers
6k views

Is accepting an invalid credit card number a security issue?

I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
Jaya's user avatar
  • 401
1 vote
1 answer
4k views

Can a magnetic credit card writer encode a blank card based off just a credit card number?

I was wondering what info is stored in the CC mag strip. For example: if someone got a hold of by CC number, just the numbers-no CCV, no exp date, etc... it is pretty hard to use my credit card for ...
Brian's user avatar
  • 21
1 vote
2 answers
659 views

How does change.org prevent fraud?

On the site change.org it's possible to start a petition. I found two (somewhat) contradicting statements in their privacy policy: We do not monitor, verify, or perform any background check on ...
AleksanderCH's user avatar
0 votes
2 answers
165 views

How to find the source of business email account compromise

I have a gmail account [email protected] and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees. ...
Fixee's user avatar
  • 1,575
3 votes
0 answers
40 views

How do I report scam phone calls? [duplicate]

I get scam phone calls on a regular basis. The latest one was a computer-generated voice claiming to be a security expert from Microsoft and alleging "errors and fraudulent behavior" within my ...
mas's user avatar
  • 307
1 vote
0 answers
174 views

Bot detection without client script

I am working in a small startup and we are looking for Security tools - mostly WAF and Bot Detection (specifically to identify click fraud). Some solutions that integrate client side scripts are ...
achie's user avatar
  • 111
2 votes
0 answers
174 views

Are printed check security features a gimmick?

This question is perhaps a rough fit for this SE site, but it is about information security, though not specifically about computers. When ordering company checks, there are a plethora of options. ...
mas's user avatar
  • 307
0 votes
2 answers
338 views

Could someone commit a social engineering "hack" on a credit card processor to get my credit card number?

Peripherally related to: Is it safe to recycle unshredded credit card receipts?. From some basic research, it seems as though the SEQ number is internal to the company running the POS software, the ...
jonsca's user avatar
  • 343