How to protect yourself from becoming victim of UPI frauds

 

Nowadays, a fascinating variety of “online theft” has appeared in the online world. The theft is regarding UPI because it is a way to trick innocent victims and steal their money.

As you know, digital payment applications such as “Paytm and Google Pay” are reaching a vast number of people, from teenagers to aged people, every day and reducing their problems in the field of “online payment.”

Though these payment applications make it easier for many people, they have also opened paths for “frauds and scammers.” The latest events of “cyber thefts” using the UPI applications are a proper signal of these facts.

As we all know, this is a day-to-day service helping banks send calls and SMS, mentioning that they should not disclose their account details and “OTPs” to strangers.

 

So, you should know how “UPI fraud” works –

  1. So, you’ll see that the scam starts with listing products on well-known sites such as “OLX and Quikr” or a few scammers answering it, who will pretend to be potential buyers of the product. This is straight away supported by the excuse of “unavailability of the option to pay through cash” in place of that, it will indeed suggest payment through apps like “Google Pay” or “PhonePe” for making the payment.
  2. You will think this is a truthful explanation; you will allow the payment through “PhonePe.” By doing so, your faith in that person will become stronger as you’ll see the image of a military man (which is not real).
  3. Once the “scammer” gets confident, you will get a call request to collect the required amount for the listed product. You will be in a rush to get your money, so you will overlook what the “scammer” is requesting. After you come across the request, the scammer will ask you to put your pin for the UPI and tap the “Pay button." Your money is gone.

 

Experts believe that these types of scams happen due to a lack of knowledge and ignorance that users have about the digital “payment method.” Usually, such occurs mainly with the “old people” or “first-time users.”

 

How to be aware of such frauds and scams?

●        First, check every message or notification you receive on your particular payment app (apps) while you do the transaction.

●        At any cost, DON’T trust the stranger or user just because they look legit or their “profile picture” looks real.

●        Check twice or thrice before clicking the “Pay Button.”

 

Conclusion

 The K7 Antivirus comes with a safe attribute that is specially made to save and protect valuable financial information while you are using the mobile payments applications for “shopping online,” “paying bills,” “banking,” etc. This software is widely considered to be one of the best in keeping you safe from such UPI frauds and scams.

Comments

Post a Comment

Popular posts from this blog

AMOS (MacOS Stealer)

  In the last week of April 2023, it was reported on twitter , that through a telegram channel a new malware was being offered as “Atomic MacOS Stealer”. Many samples of this malware were found on the internet. Figure 1 – Atomic MacOS Stealer Most of these samples were masquerading as an installer of various applications like Tor browser, Photoshop CC, Notion, FL studio. Figure 2 – Amos DMGfiles masquerading as different applications These are delivered as a DMGfile(Disk Image) which is the common format for software distribution & installation packages on macOS. We identified the Tor browser DMG file for the analysis. When we execute the DMG file it gets mounted and we can see the resulting window advises the user to execute the application by right clicking. Figure 3 – Tor Browser These fake applications are created by using Appify , which is used to create applications just by having the executable alone. The icons can be customised. That’s why these applications are in dif...
Read more

CVE-2023-21716: A new Office Exploit

Image
 In Feb-2023, Microsoft (MS) patched a vulnerability in Microsoft Word which, if successfully exploited, could allow an attacker to execute remote code without authentication on victims’ machines. This vulnerability has been assigned CVE-2023–21716 and has a CVSS score of 9.8, making it a critical issue. This vulnerability impacted MS word and the Outlook Preview Pane as well. Microsoft along with the patch released a work around for the vulnerability but did not release details about the vulnerability. While we were analysing to identify what was patched, on 06-March, the researcher who reported the bug released a PoC on Twitter . In this blog, we will be taking a look at some internals of CVE-2023–21716. So far there is no evidence to suggest exploitation of this vulnerability in the wild. Rich Text Format (RTF) is a document file format published by Microsoft. It uses control words to define various sections and properties of the document. CVE-2023–21716 exists in the way MS Wo...
Read more

MuddyWater Back with DarkBit

  Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit ransomware. In this blog we will explore the ransomware’s initial access method, the use of Cobalt Strike and the final ransomware payload. Initial Access Method The initial lure was delivered as an ISO file. Figure 1 – ISOFile The payload included a shortcut file (with a .doc extension) and a zip file. Figure 2 – Contents Inside ISO File The shortcut was using PrintBrm.exe to unpack the HR-Update.zip and run it as shown below. PrintBrm.exe is a windows inbuilt command line tool . Figure 3 – Shortcut File cmd.exe /c xcopy .\HR-Update.zip %TEMP% /h /y && PrintBrm.exe -r -f %TEMP%\HR-Update.zip -d %TEMP%\unzip & %TEMP%\unzip\HR-Update.exe Figure 4 – HR-Update.exe Running HR-Update.exe was a Cobalt Strike beacon. Cobalt Strike, a penetration testing tool, can also be used by attackers for gaining a foothold in the system. The final ran...
Read more