Questions tagged [fraud]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
341 views

Extracting as much information from a browser request as possible?

I am currently working on project that involves identifying spammers who are creating fake accounts on my site. I am interested to know what type of information I would be able to extract. First of ...
3
votes
2answers
147 views

Mail interception fraud

My company has been the target of a mail fraud attempt for the second time this year. The fraud goes as followed: My company sends an invoice to a customer from the email address alice@mycompany.com ...
5
votes
3answers
2k views

Online Retailer asks for a copy of Credit Card and Drivers License

This weekend I placed an order for a part from an online retailer ($300-400). Shortly thereafter I received an email from their sales team saying something similar to the following: Hi, we have ...
4
votes
3answers
296 views

How could a scammer get my card details if I've never used it

Today I had about $600US spread across 20 transactions taken from my debit card over the past three days (I notified my bank said they will give me a new card and will refund me) This particular ...
0
votes
0answers
60 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
1
vote
1answer
102 views

How to prevent / take action against “Merchant Name” fraud?

I work for a charity in Australia. On a couple of recent occasions we have seen this behaviour by thieves: People search for cheap Dyson vacuum cleaners. They find a website which claims to sell (...
4
votes
2answers
2k views

Why do scammers use victims' computers to remote-control their own computers?

I've seen videos showing how tech support scammers operate. In nearly all of these videos, the scammer instructs their intended victim to install and run remote-control software, which allows the ...
22
votes
3answers
6k views

Is accepting an invalid credit card number a security issue?

I am testing a website which accepts invalid credit card numbers for reservations. The interesting thing is they do CC validation if the currency is USD, but not for any other currencies. Should I ...
1
vote
1answer
284 views

Can a magnetic credit card writer encode a blank card based off just a credit card number?

I was wondering what info is stored in the CC mag strip. For example: if someone got a hold of by CC number, just the numbers-no CCV, no exp date, etc... it is pretty hard to use my credit card for ...
1
vote
2answers
273 views

Router as MITM to steal data

I was reading a blog post about ATM skimming and the following quote (at the end of the article) caught my eye: Ivanov allegedly used two devices — a router to steal the bank data of customers ...
10
votes
2answers
2k views

How can a domain be impersonated with a fraudulent SSL certificate?

I was reading this article about the fraudulent certificates from Comodo back in 2011. It talks about domain impersonation. I understand that a fake website could be secured with the fraudulent ...
1
vote
2answers
177 views

How does change.org prevent fraud?

On the site change.org it's possible to start a petition. I found two (somewhat) contradicting statements in their privacy policy: We do not monitor, verify, or perform any background check on ...
0
votes
2answers
73 views

How to find the source of business email account compromise

I have a gmail account example@gmail.com and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees. ...
3
votes
0answers
38 views

How do I report scam phone calls? [duplicate]

I get scam phone calls on a regular basis. The latest one was a computer-generated voice claiming to be a security expert from Microsoft and alleging "errors and fraudulent behavior" within my ...
1
vote
0answers
56 views

Bot detection without client script

I am working in a small startup and we are looking for Security tools - mostly WAF and Bot Detection (specifically to identify click fraud). Some solutions that integrate client side scripts are ...
1
vote
0answers
75 views

Are printed check security features a gimmick?

This question is perhaps a rough fit for this SE site, but it is about information security, though not specifically about computers. When ordering company checks, there are a plethora of options. ...
0
votes
2answers
148 views

Could someone commit a social engineering “hack” on a credit card processor to get my credit card number?

Peripherally related to: Is it safe to recycle unshredded credit card receipts?. From some basic research, it seems as though the SEQ number is internal to the company running the POS software, the ...
1
vote
1answer
137 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
-2
votes
1answer
84 views

How to check hosted content for fraud?

I am a developer at a company that makes landing page software. Users can register and build their own page and publish it. We will provide them a subdomain on our whitelabel domain: test-link....
11
votes
2answers
1k views

Are social security numbers useless by themselves?

453.7 million social security numbers have been issued to date. There are only 1 billion = 1000 million distinct 9 digit integers. This means that if I were to make up any 9 digits, I would have ...
-1
votes
2answers
132 views

Ad fraud is growing into one of the biggest concerns. How can it affect banks?

The attached image was presented to me, but I'm confused about the risks of ad-fraud to organizations like banks. Usually, the advertisement budgets are invested only in "trusted" sources like Google ...
4
votes
1answer
239 views

Best practice for Users to avoid fraud for Direct Debit enabled bank accounts?

Direct Debit or automatic debit transfer system or Bankeinzug (German), seems a common/convenient way to pay in (online shops in) many countries available for many banks. https://en.wikipedia.org/...
4
votes
1answer
116 views

Debit Card was used fraduentely, Should I report an incident to the websites that stored my card?

Here is my situation. I had a debit card where I could transfer funds to it for limited use. I usually kept a low amount on this card just for little purchases. It was recently used in a fraudulent ...
7
votes
5answers
3k views

Preventing online voter fraud

As part of a promotional campaign, my company wants to launch a site where users (and potential users) of our product will be required to register and vote for certain choices. Depending on how ...
0
votes
0answers
148 views

How to check if direct debit whitelisting is in place for a specific account number?

Paying through bank transfer to other account without direct debit is more and more common these days. Some of them are online services running bug bounties with availability of payment through bank ...
18
votes
1answer
1k views

Intricate fraud attempt on eBay

I would like the community's input on an event that took place recently, that I honestly don't know what do make of: When trying to watch an item on eBay, a warning notice said my account had been ...
1
vote
1answer
576 views

Why do scammers use emails like yahoo?

I was doing a Cyber Security and IT audit for a company. I was told that they had very little in terms of fraud protection, one of the only ways that they detected potential fraudsters was by ...
34
votes
5answers
181k views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
0
votes
2answers
141 views

Someone is pretending to be me

Need some help! Someone has opened up an email account and is sending emails pretending to be me, to my office. They are asking for large invoices to be paid into a specific account. We realised ...
4
votes
2answers
5k views

Wiping magnetic stripe on card with magnet?

I asked a question a while back on using magnets (for example powerful Neodymium ones) to wipe a HDD, and got shown a good article proving it is not possible to wipe data. Pretend I am about to ...
2
votes
0answers
123 views

What are the risks of providing all your credit card information except for security code to a stranger?

I've recently been approached by a person asking me for a donation to Save The Children. while I was inclined to donate, I didn't because they were asking my full name, 16 digits of credit card and ...
38
votes
6answers
10k views

Which parts of a credit card can I obfuscate and still have it be valid

I was recently the victim of credit card fraud and I suspect it is from a merchant somewhere keeping track of my credit card details. I cancelled the card and received a new one, but I would like to ...
6
votes
2answers
802 views

PayPal payment reversal; scammer at work?

For the past several days, I have received several monetary donations through PayPal for exactly 1 US dollar. Several hours after the donation is received, I also receive a notification from PayPal ...
0
votes
1answer
274 views

Preventing fraud in bitcoin mining pools [closed]

So bitcoin mining pools are very common, almost no one mines alone, because of the great difficulty in mining a block. So mining in a pool has pretty much been the standard. However, how do people ...
16
votes
2answers
380 views

Is adding a supplementary credit transaction something that could improve online payment security?

An online company from which I regularly buy goods apparently recently upgraded their security policy. Let's say I bought something for 73,31€. As usual this company uses 3D-Secure for the checkout ...
29
votes
5answers
66k views

How do location-based apps avoid getting cheated by emulated GPS?

Some apps like Foursquare require the user to "check in" at physical places, in order to gain money benefits. Given that emulated GPS are available for customized versions of Android, it sounds easy ...
4
votes
1answer
45k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
2
votes
3answers
237 views

Should it remain as a general advice to encrypt the whole HDD?

AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
1
vote
1answer
78 views

Online Voter fraud [closed]

I'm hosting an online singing competition that's at the finale 2 contestants with a cash prize over $10,000 plus a duet with a well known artist in that genera. What we found was that 2 of the finale ...
2
votes
4answers
7k views

My Apple ID has been compromised. What do I do?

Update: Called Apple today and according to them they could not get an IP-address from user logins or was not allowed to give that out. They also said that I would be able to see any message that had ...
1
vote
1answer
239 views

How could criminals use stolen EMV credit cards in 2011?

I would like to recall a fraud happened in France in 2011 for which a paper was published (also linked from Ars). I came onto this by following debate on EMV card security and its mandatory ...
51
votes
4answers
15k views

Detecting skimmers and other ATM traps

This question has been bothering me ever since I first heard of ATM skimmers: Instances of skimming have been reported where the perpetrator has put a device over the card slot* of an ATM (...
0
votes
1answer
96 views

ATM Fraud Question

My neighbor had a guest that used a bank card to fraudulently purchase an iPad online from Apple. Neighbor was able to verify guest was the culprit with evidence and witnesses. There are also ...
2
votes
1answer
65 views

Spam email with my address details

I have registered domain under .xyz 123reg domain registration company. Recently I got an email from ummed.org company informing me that my SEO engine will be going to expire soon and I need to make ...
14
votes
1answer
2k views

How safe is my contactless bank card?

In the past few years Contactless Payment cards have been introduced and I have been reading some articles surrounding security of these cards. The following article "Stealing data from contactless ...
1
vote
0answers
94 views

Is it possible to set up a webpage to force a mobile browser to click on two off-site locations in order to fake a sign-up?

I've recently been victim to a scam. I was signed up to an internet gaming 'club' despite never knowingly having visited their site, read their T&C's nor clicked an agreement. Under UK ...
1
vote
1answer
338 views

Why Aren't Credit Card PINs Required For Online Transactions

I have never heard of credit card PINs being required for online purchases. Why is this? Wouldn't it drastically reduce online fraud? Physically stolen credit cards couldn't be used in online ...
2
votes
2answers
4k views

Suspected fake torrent peers with “client_test” ID

For a fair number of torrents I'm dealing with (qBittorrent 3.3.7 here), I see a number of entries in the "Peers" list (it apparently only shows peers that are currently connected) with client_test/1....
1
vote
1answer
256 views

Telling the difference between a prepaid card and credit/debit card [closed]

In order to stop people abusing free trials, we can make sure new users are not reusing data from existing users and therefore not just signing up with a new account every month. It is reasonably ...
3
votes
2answers
344 views

What prevents “money card” (offline smartcard system) from getting duplicated for payment fraud?

I don't know how well known this system is or maybe there are equal systems better known international. So I'll introduce the related points of the system: It is a paymentsystem where your wallet is ...