Wednesday, January 23, 2013

A SIM can empty your bank account

.........They intercept one time password by obtaining duplicate SIM cards,” says Rakshit Tandon, advisor cyber security. “This is called ‘Identity theft’. The modus operandi is that hackers generate a duplicate SIM. After the SIM gets activated, hackers have access to the account of the victim on the internet. They can easily use the user-id and password and transfer the money. The bank automatically generates a onetime-password (OTP) which is received through SMS on the duplicate SIM as well,” says Rakshit. The fact that the process of acquiring a duplicate SIM is so easy, highlights the laxity on part of the mobile operators, a fact pointed out by CGM, RBI and the banking ombudsman, M Sebastian: “Because of the certain vulnerability on the part of mobile operator, the fraudsters were impersonating and obtaining duplicate SIM cards. About 40-50 complaints were received during 2011-12.” He had then urged the banks to take up the issue with the mobile operators but it would appear little has happened in the matter............

No comments: