Scammer Alert!

[dr. d]

might i inquire, how much did you lose?

don't they have passwords and such, for money apps?
can't we call the money folks, to inform them of the loss of the phone and block all transactions?

[Dr.Kamiya]

lol not mine, just saw the post on reddit.

If the phone is locked, they just transfer the SIM to another phone and then try to sign in to all the banking apps using the phone number.

Password is not an issue because they just do the lost password procedure which will send the reset links and 2FA codes to the same number.

Agree on blocking transactions, but that's a race between you (currently with no phone) and the thief. And you need to sit through the stupid robocall and try to recall your account details.

[shadow]

lol not mine, just saw the post on reddit.

If the phone is locked, they just transfer the SIM to another phone and then try to sign in to all the banking apps using the phone number.

Password is not an issue because they just do the lost password procedure which will send the reset links and 2FA codes to the same number.

Agree on blocking transactions, but that's a race between you (currently with no phone) and the thief. And you need to sit through the stupid robocall and try to recall your account details.

Ganyan lang kabilis ilipat lang SIM? Paano yun email add saka username? They can try to change password Pero need email and username Diba? Tapos yun biometrics pa and usually isang phone lang naka registered sa isang bank account so need to register again if using new phone.

Hinde naman siguro ganun ka galing yun nakapulot ng phone niyan sa Twitter.


Sent from my iPhone using Tapatalk

[BratPAQ]

lol not mine, just saw the post on reddit.

If the phone is locked, they just transfer the SIM to another phone and then try to sign in to all the banking apps using the phone number.

Password is not an issue because they just do the lost password procedure which will send the reset links and 2FA codes to the same number.

Agree on blocking transactions, but that's a race between you (currently with no phone) and the thief. And you need to sit through the stupid robocall and try to recall your account details.

Many people don't realize nowadays that you can put PIN code on sim cards. Kahit transfer mo pa sim card sa ibang phone hindi pa rin ma activate unless you know the pin.

[shadow]

Many people don't realize nowadays that you can put PIN code on sim cards. Kahit transfer mo pa sim card sa ibang phone hindi pa rin ma activate unless you know the pin.

But I don't know the PIN na diba andoon sa card yun ng SIM?


Sent from my iPhone using Tapatalk

[papi smith]

Many people don't realize nowadays that you can put PIN code on sim cards. Kahit transfer mo pa sim card sa ibang phone hindi pa rin ma activate unless you know the pin.

After reading this I tried to put a sim lock, akala ko ako ang magseset, ayun wrong pin, 1 try left na lang [emoji13]

Even if I find the sim card, hindi ba puk ang nakalagay dun, in case na ma lock out nga ang sim mo?

[dr. d]

from what i remotely remember,
many electronic gadgets do have a PIN or PUK or whatever, on the original packaging, that many of us simply throw away...
just last night, we were looking for the box of our 'puter, to look for one such number. without it kasi, my 'puter advisor informs me, some maneuvers simply can't be done.

[Walter]

That's why people avoid using SIM PIN lock ... eventually after a year or 2 or 3 ... one forgets the PIN ... don't think it's that easy to simply insert SIM into another phone and be able to access bank accounts ... they need to know your username first ... and the process of changing password isn't as simple as an OTP ... whoever gave that idea ...

[Walter]

Ganyan lang kabilis ilipat lang SIM? Paano yun email add saka username? They can try to change password Pero need email and username Diba? Tapos yun biometrics pa and usually isang phone lang naka registered sa isang bank account so need to register again if using new phone.

Hinde naman siguro ganun ka galing yun nakapulot ng phone niyan sa Twitter.

It's more robust than that ... silly to imply that simply inserting SIM to another phone ... one would easily be able to change bank account password ...

[Mask Rider Blac]

Pwde magpunta sa Network provider para magpa-unlock ng ng SIM na na-PIN lock. May mga series of questions to verify na ikaw talaga is ikaw.

[Mask Rider Blac]

Naka-activate ang PIN sa SIM1 ko. Humihingi lang naman ng PIN upon turning on the phone. If gusto ng karagdagang security, turn on screen lock ng phone...required 'to for CitiPayAll. Most banking apps require PIN or password para ma-access ang app. For Own Bank App, it does not require PIN/password when accessing the app pero required ang mobile PIN before maka-transfer ng funds. Grab app does not require PIN/password when accessing the app, pero who puts big amount in their GrabPay Wallet?
Itong post niya dko ma-imagine paano nangyari.

[sirkosero]

It's more robust than that ... silly to imply that simply inserting SIM to another phone ... one would easily be able to change bank account password ...

Agree. Naka-bind ang phone data/model and serial number sa isang bank account.

Just yesterday di matuloy ang fund transfer using bpi app kasi nagprompt na dapat continue ko yung transaction sa old phone ko (model indicated sa error/prompt)

Sent from my 2107113SG using Tsikot Forums mobile app

[dr. d]

Naka-activate ang PIN sa SIM1 ko. Humihingi lang naman ng PIN upon turning on the phone. If gusto ng karagdagang security, turn on screen lock ng phone...required 'to for CitiPayAll. Most banking apps require PIN or password para ma-access ang app. For Own Bank App, it does not require PIN/password when accessing the app pero required ang mobile PIN before maka-transfer ng funds. Grab app does not require PIN/password when accessing the app, pero who puts big amount in their GrabPay Wallet?
Itong post niya dko ma-imagine paano nangyari.

my suspicious mind,

some folks pretend that they got scammed, to place them in an "exploitable position"...

[Dr.Kamiya]

I'd agree maybe the twitter poster is exaggerating a bit, but having someone gain control of your SIM is a real enough vulnerability that the US FCC is taking SIM swap scams seriously.

The FCC says new rules will curb SIM swapping. I’m pessimistic | Ars Technica

The scams, known as "SIM swapping" and "port-out fraud," both have the same objective: to wrest control of a cell phone number away from its rightful owner by tricking the employees of the carrier that services it. SIM swapping occurs when crooks hold themselves out as someone else and request that the victim's number be transferred to a new SIM card—usually under the pretense that the victim has just obtained a new phone. In port-out scams, crooks do much the same thing, except they trick the carrier employee into transferring the target number to a new carrier.

This class of attack has existed for well over a decade, and it became more commonplace amid the irrational exuberance that drove up the price of Bitcoin and other crypto currencies. People storing large sums of digital coin have been frequent targets. Once crooks take control of a phone number, they trigger password resets that work by clicking on links sent in text messages. The crooks then drain cryptocurrency and traditional bank accounts.

In case of a snatched phone, there's no SIM-swap going on because they already have your physical SIM, but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

[BratPAQ]

I'd agree maybe the twitter poster is exaggerating a bit, but having someone gain control of your SIM is a real enough vulnerability that the US FCC is taking SIM swap scams seriously.

The FCC says new rules will curb SIM swapping. I’m pessimistic | Ars Technica



In case of a snatched phone, there's no SIM-swap going on because they already have your physical SIM, but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

I'm contemplating on switching to e-sim. Unlike physical sim hindi basta basta ma transfer sa ibang phone. Although I'm not sure sa Smart postpaid ko kung gano ka hirap mag transfer sa bagong phone. Sa Globe eh pupunta ka pa talaga sa Globe store to be able to transfer your e-sim. Kinda hassle Lang na you have to line up sa kanila everytime you change your phone. Pero at the same time more secured.

[Walter]

but the point is merely having the SIM is often enough to gain access to and drain bank accounts and crypto.

No, it's not enough ... not applicable these days ... also, you should avoid using SMS 2FA whenever possible ...

[thephantom]

I'm contemplating on switching to e-sim. Unlike physical sim hindi basta basta ma transfer sa ibang phone. Although I'm not sure sa Smart postpaid ko kung gano ka hirap mag transfer sa bagong phone. Sa Globe eh pupunta ka pa talaga sa Globe store to be able to transfer your e-sim. Kinda hassle Lang na you have to line up sa kanila everytime you change your phone. Pero at the same time more secured.

It used to be that the QR code can be used to transfer multiple times. That's what I have. Since getting an esim from smart I've transferred to different phones already. I've done repeat transfers as well (phone A to phone B to phone C to phone A, etc). All using the same QR code. When we got another esim just last month for another number, the instructions were you can remove and reinstall multiple times on the SAME phone but need a new QR if transferring to a new phone.

Sent from my SM-F946B using Tsikot Forums mobile app

[papi smith]

Legit ba ito?

[dr. d]

Legit ba ito?

what is it offering, that one may not do by oneself?

personally, i wouldn't try it.

[uls]

i think the app above works like waze

i mean sa waze users contribute info which roads are traffic so other users can see where it's traffic in real time (crowdsourcing)

users of the app above contribute numbers that are spam / scam

the more spam / scam numbers entered into the app the more useful the app becomes

it's not foolproof coz there will always be numbers that haven't been entered yet

so kung nakatanggap ka ng spam or na-scam ka and wanna help others, contribute to the app...

that's how i think it works