Questions tagged [fraud]

Fraud is wrongful or criminal deception intended to result in financial or personal gain. It is one of the challenges to organisations that Information Security tries to prevent.

Filter by
Sorted by
Tagged with
0 votes
2 answers
1k views

Unknown numbers sending videos on WhatsApp. What should I do?

A number with ISD code +92 sent a video via WhatsApp. No text, only a video. About 20 days later, another number with same ISD sent another video. Should I open the video? OR Should I Report and Block?...
user avatar
0 votes
1 answer
231 views

Credit card reader writer

If someone has all the information from my credit card name, exp date, card number, cvv and pin but no card, would they still be able to use a reader-writer or would they have to have the card to copy?...
user avatar
0 votes
1 answer
110 views

Purpose of fraudulent AWS SL/TLS certificate request for my domain

I just received an email from AWS re Certificate request for [my personal domain]. This email asked me to approve this request with a link or forward to a AWS email for validation. Needless to say ...
user avatar
0 votes
2 answers
273 views

Why would a bus ticketing app require an Internet connection when you board the bus?

The bus company that I use (Arriva UK) is trying to persuade passengers to switch from buying paper tickets to tickets stored on their app. They are particularly pushing this for 'bus passes': tickets ...
user avatar
  • 162
-1 votes
2 answers
189 views

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
user avatar
0 votes
1 answer
112 views

Is it possible to identify a financial fraud on a Windows machine? How?

How do forensics identify a banking/financial fraud in a Windows system? Malware usually uses real-time TCP sockets to complete their deeds, infecting and compromising the PC it runs on (not the ...
user avatar
0 votes
1 answer
161 views

Best way to trace possible root cause of card fraud?

I recently had a fraudulent transaction on my debit card (in the UK, where I am based). Having blocked the card, my main concern is to determine how much information has been stolen and how? As this ...
user avatar
0 votes
0 answers
120 views

Is someone using my @domain.com emails for fraud?

I have a TLD, and have set it up to forward any email sent to *@domain.com to myname@domain.com. Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
user avatar
1 vote
1 answer
149 views

Is it possible to completely obfuscate proxy servers?

Stripe's fraud detection documentation claims it has Proxy Detection When I search for how it might be detecting traffic from proxies, I see this great answer, which show how to detect that traffic. ...
user avatar
  • 1,214
4 votes
0 answers
281 views

What is "JavaGhost - Mass Twilio Checker"?

Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank. The passwords have all ...
user avatar
  • 1,331
0 votes
1 answer
91 views

my info was compromised [closed]

My ssn,dob,mother's maiden,phone number, and address were compromised and I am worried that some bad people now have all the afore mentioned information. My question is what could criminals do with ...
user avatar
1 vote
0 answers
102 views

Current iOS Spyware/Stalkerware Capabilities [closed]

I have a child domestic violence victim I am trying to collect evidence from and coordinate relief for (remotely), but I have cause to believe her phone and/or identity has been hijacked in the past ...
user avatar
  • 6,278
2 votes
1 answer
163 views

Is it normal for a company to request this information after stolen card details were used?

My friend's credit card details were randomly used to make a two small purchases on a food delivery app, by someone other than my friend. They have already contacted the bank and cancelled the card. ...
user avatar
0 votes
0 answers
428 views

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources. I'm ...
user avatar
3 votes
2 answers
310 views

Does replacing the SIM card mitigate any threats after a serious data breach?

I recently heard that a telephone company (a mobile network operator) was hacked and lots of data was stolen, maybe affecting up to a million customers. It sounds like the leaked data is already ...
user avatar
  • 15.3k
0 votes
1 answer
168 views

How does a fraudulent credit card charge to a Department of State work?

I looked at my Credit card statement, and noticed a fraudulent charge to what turned out to be the NY Department of State. This was especially odd to me, since I don't live in NY (and so was obvious ...
user avatar
  • 21.5k
0 votes
1 answer
161 views

Security risk for allowing accounts without captcha

I run a website that allows people to create accounts with an email address address and a password. Over the last month, I have had about 100 accounts created with email addresses that look like this:...
user avatar
0 votes
1 answer
114 views

Is https://div.show/options fraud/malware? [closed]

Is https://div.show/options fraud/malware? I saw via https://app.uriports.com that a customer tried to load the page mentioned before and it was blocked thanks to CSP.
user avatar
  • 109
0 votes
1 answer
146 views

How can hackers steal from a savings account that has no client card? [closed]

Someone I know was stolen a few hundreds dollars from a savings account. Looking at the history, she saw transactions like Uber rides and video games purchases she did not do. This account is used ...
user avatar
  • 103
3 votes
3 answers
307 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
user avatar
  • 234
1 vote
1 answer
174 views

A proposal for effortless two-factor authentication

I have an idea for device-level two-factor authentication that involves no direct input from the user, and I wanted to find out if something like it has been tried before. Let's say I have an account ...
user avatar
  • 13
2 votes
2 answers
491 views

Can cross origin iframe be detected in web logs

A recent blog post shows hackers owning a web server - at least the content and injecting a web skimming attack. https://blog.malwarebytes.com/hacking-2/2020/03/criminals-hack-tupperware-website-with-...
user avatar
  • 21
1 vote
1 answer
148 views

In a website that gives awards, is there anyway to ensure that one user isn't abusing the website and replaying the game by switching emails?

I'm building a website that gives awards to users. After each game I ask the user for their email and send them an email to claim their gift. Is there anyway to make sure that one user isn't simply ...
user avatar
  • 113
0 votes
0 answers
34 views

How is it possible for people to reverse a GoToAssist session? [duplicate]

I am puzzled by how people on Youtube bait scammers into connecting to their machines and end up "reversing" the connection on them. Essentially controlling the scammer's PC. Is this done via reverse ...
user avatar
  • 265
-2 votes
1 answer
118 views

Australian Bush fire donation hacking [closed]

On the recent Australian Bushfire event, people are donating to help them. But some inhumane(cybercriminals) are stealing people's money by injecting malicious script on e-commerce and donation sites. ...
user avatar
1 vote
0 answers
138 views

Credit card fraud - record your face movement to unlock your account

Recently I accessed my credit card account (with a well-known credit card company) and right on the web page received a message that my account is locked to "prevent some sort of fraud". I called ...
user avatar
1 vote
0 answers
130 views

Is it possible to hijack specific e-mail with remote access? [closed]

I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
user avatar
4 votes
2 answers
1k views

Mail interception fraud

My company has been the target of a mail fraud attempt for the second time this year. The fraud goes as followed: My company sends an invoice to a customer from the email address alice@mycompany.com ...
user avatar
  • 141
4 votes
3 answers
1k views

How could a scammer get my card details if I've never used it

Today I had about $600US spread across 20 transactions taken from my debit card over the past three days (I notified my bank said they will give me a new card and will refund me) This particular ...
user avatar
  • 161
0 votes
0 answers
117 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
user avatar
  • 556
1 vote
1 answer
154 views

How to prevent / take action against "Merchant Name" fraud?

I work for a charity in Australia. On a couple of recent occasions we have seen this behaviour by thieves: People search for cheap Dyson vacuum cleaners. They find a website which claims to sell (...
user avatar
22 votes
3 answers
6k views

Is accepting an invalid credit card number a security issue?

I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
user avatar
  • 411
1 vote
1 answer
2k views

Can a magnetic credit card writer encode a blank card based off just a credit card number?

I was wondering what info is stored in the CC mag strip. For example: if someone got a hold of by CC number, just the numbers-no CCV, no exp date, etc... it is pretty hard to use my credit card for ...
user avatar
  • 21
1 vote
2 answers
457 views

How does change.org prevent fraud?

On the site change.org it's possible to start a petition. I found two (somewhat) contradicting statements in their privacy policy: We do not monitor, verify, or perform any background check on ...
user avatar
0 votes
2 answers
129 views

How to find the source of business email account compromise

I have a gmail account example@gmail.com and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees. ...
user avatar
  • 1,545
3 votes
0 answers
38 views

How do I report scam phone calls? [duplicate]

I get scam phone calls on a regular basis. The latest one was a computer-generated voice claiming to be a security expert from Microsoft and alleging "errors and fraudulent behavior" within my ...
user avatar
  • 297
1 vote
0 answers
137 views

Bot detection without client script

I am working in a small startup and we are looking for Security tools - mostly WAF and Bot Detection (specifically to identify click fraud). Some solutions that integrate client side scripts are ...
user avatar
  • 111
2 votes
0 answers
123 views

Are printed check security features a gimmick?

This question is perhaps a rough fit for this SE site, but it is about information security, though not specifically about computers. When ordering company checks, there are a plethora of options. ...
user avatar
  • 297
0 votes
2 answers
254 views

Could someone commit a social engineering "hack" on a credit card processor to get my credit card number?

Peripherally related to: Is it safe to recycle unshredded credit card receipts?. From some basic research, it seems as though the SEQ number is internal to the company running the POS software, the ...
user avatar
  • 343
1 vote
1 answer
193 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
user avatar
  • 3,086
-2 votes
1 answer
124 views

How to check hosted content for fraud?

I am a developer at a company that makes landing page software. Users can register and build their own page and publish it. We will provide them a subdomain on our whitelabel domain: test-link....
user avatar
  • 101
5 votes
5 answers
15k views

Online Retailer asks for a copy of Credit Card and Drivers License

This weekend I placed an order for a part from an online retailer ($300-400). Shortly thereafter I received an email from their sales team saying something similar to the following: Hi, we have ...
user avatar
-1 votes
2 answers
179 views

Ad fraud is growing into one of the biggest concerns. How can it affect banks?

The attached image was presented to me, but I'm confused about the risks of ad-fraud to organizations like banks. Usually, the advertisement budgets are invested only in "trusted" sources like Google ...
user avatar
  • 1,204
12 votes
2 answers
9k views

Why do scammers use victims' computers to remote-control their own computers?

I've seen videos showing how tech support scammers operate. In nearly all of these videos, the scammer instructs their intended victim to install and run remote-control software, which allows the ...
user avatar
2 votes
0 answers
1k views

How to check if direct debit whitelisting is in place for a specific account number?

Paying through bank transfer to other account without direct debit is more and more common these days. Some of them are online services running bug bounties with availability of payment through bank ...
user avatar
  • 1,402
4 votes
1 answer
168 views

Debit Card was used fraduentely, Should I report an incident to the websites that stored my card?

Here is my situation. I had a debit card where I could transfer funds to it for limited use. I usually kept a low amount on this card just for little purchases. It was recently used in a fraudulent ...
user avatar
1 vote
1 answer
937 views

Why do scammers use emails like yahoo?

I was doing a Cyber Security and IT audit for a company. I was told that they had very little in terms of fraud protection, one of the only ways that they detected potential fraudsters was by ...
user avatar
17 votes
1 answer
2k views

Intricate fraud attempt on eBay

I would like the community's input on an event that took place recently, that I honestly don't know what do make of: When trying to watch an item on eBay, a warning notice said my account had been ...
user avatar
  • 1,721
0 votes
2 answers
346 views

Someone is pretending to be me

Need some help! Someone has opened up an email account and is sending emails pretending to be me, to my office. They are asking for large invoices to be paid into a specific account. We realised ...
user avatar
  • 1
2 votes
0 answers
166 views

What are the risks of providing all your credit card information except for security code to a stranger?

I've recently been approached by a person asking me for a donation to Save The Children. while I was inclined to donate, I didn't because they were asking my full name, 16 digits of credit card and ...
user avatar
  • 121