• Hey there! Welcome to TFC! View fewer ads on the website just by signing up on TF Community.

Be Vigilant - Saved from Online Fraud

SJM

TF Legend
Recently, just like a normal human being, I too got greedy and almost became a victim of an online fraud. But thanks to measures taken by RBI and staying vigilant, I was able to avoid the mishap.

I clicked on a link in FB which looked genuine. They asked for a survey on Ghee and as a token of appreciation for taking the survey they were offering a 500ml Gir Cow Ghee for Rs. 100. Remember, if something sounds too good to be true, it generally is. I forgot that for a moment and clicked on the buy link and entered my CC details. Fortunately, I had international transactions blocked. I was also surprised that an OTP came for an international transactions (but who reads OTP's)? Rather, it reassured me it is an Indian transaction. I blindly entered the OTP and then got message transaction of BHD 100 declined as international transactions are blocked - what a relief. Then I went back and checked the OTP message and found transaction amount was clearly mentioned as BHD 100 (approx INR 22,600) and not INR 100 as I expected. The payment page showed Rs. 100.

Learnings:
  1. Read the OTP carefully and verify the amount before entering the same for a purchase from any unknown site.
  2. Always keep international transactions turned off.
  3. Set a daily/per transaction limit

Next, I got a call from IDFC transaction monitoring team. Don't know if they are human beings or machines who only understands one of two answers - yes or no. They asked me if it was a fraudulent transaction, I said yes and according to them that meant I didn't try to make that payment. They couldn't understand the point that I did initiate the payment but not for the amount it turned out to be. For them fraudulent has only one meaning, done by someone else using my card details and card needs to blocked. I objected to blocking card as they refused to waive re-issue charges of 199+GST. They told me it will be at my own risk and I agreed to it. They also said, I will get a mail from RCU to which I have to reply with my consent for not blocking the card. I didn't get any mail from RCU but got SR closure message and mail after few hours. Card re-appeared in app (it was not visible in the interim) and I was able to reset limits.

Surprisingly, today morning when I tried to make a POS payment the transaction got declined. I got message card is temporarily blocked. On checking in app it showed card is permanently blocked. Called up customer care and told them what happened few days back and that I have not asked to block card how can you block it. He checked in the system and informed me it is blocked as lost. What a surprise. I asked him when did I report it as lost and he didn't have an answer - he initiated a SR for investigation. I told him since I didn't request for blocking card you have to re-issue it free of cost. He agreed and took down the request for the same.

Let's see what they come up with in the investigation result.

Update:
New card showing in app. Received SMS for reversal of 199+GST.
 
Last edited:
Glad to know you escaped the fraud.

FB is breeding ground for such frauds because there are vulnerable folks who still use FB on a daily basis and believe most of the things that they find there.
I personally never ever enter my financial details on any link that emerged from any social media website and the link cannot be accessed directly via the app/website itself.
Read the OTP carefully and verify the amount before entering the same for a purchase from any unknown site.
What I always do is (even for known websites):
  • check the final amount (and currency, if needed) at the payment page before entering the OTP. Sometimes what happens is that they include extra/hidden charges at a previous page, which goes unnoticed. So, better to verify the amount and currency before entering the OTP.
  • Never allow auto-reading of OTPs from SMS by any app/browser/website. Might be inconvenient for many but I'm OK with it.
  • Verify 3 things in the OTP SMS: amount, currency, and who has requested.
While paying in cash if we do the due diligence of counting the cash, then IMHO, we could do this much when it comes to digital payments.
 
Recently, just like a normal human being, I too got greedy and almost became a victim of an online fraud. But thanks to measures taken by RBI and staying vigilant,I was able to avoid the mishap.

I clicked on a link in FB which looked genuine. They asked for a survey on Ghee and as a token of appreciation for taking the survey they were offering a 500ml Gir Cow Ghee for Rs. 100. Remember, if something is too good to be true, it generally is. I forgot that for a moment and clicked on the buy link and entered my CC details. Fortunately, I had international transactions blocked. I was also surprised that an OTP came for an international transactions (but who reads OTP's)? Rather, it reassured me it is an Indian transaction. I blindly entered the OTP and then got message transaction of BHD 100 declined as international transactions are blocked - what a relief. Then I went back and checked the OTP message and found transaction amount was clearly mentioned as BHD 100 (approx INR 22,600) and not INR 100 as I expected. The payment page showed Rs. 100.

Learnings:
  1. Read the OTP carefully and verify the amount before entering the same for a purchase from any unknown site.
  2. Always keep international transactions turned off.
  3. Set a daily/per transaction limit

Next, I got a call from IDFC transaction monitoring team. Don't know if they are human beings or machines who only understands one of two answers - yes or no. They asked me if it was a fraudulent transaction, I said yes and according to them that meant I didn't try to make that payment. They couldn't understand the point that I did initiate the payment but not for the amount it turned out to be. For them fraudulent has only one meaning, done by someone else using my card details and card needs to blocked. I objected to blocking card as they refused to waive re-issue charges of 199+GST. They told me it will be at my own risk and I agreed to it. They also said, I will get a mail from RCU to which I have to reply with my consent for not blocking the card. I didn't get any mail from RCU but got SR closure message and mail after few hours. Card re-appeared in app (it was not visible in the interim) and I was able to reset limits.

Surprisingly, today morning when I tried to make a POS payment the transaction got declined. I got message card is temporarily blocked. On checking in app it showed card is permanently blocked. Called up customer care and told them what happened few days back and that I have not asked to block card how can you block it. He checked in the system and informed me it is blocked as lost. What a surprise. I asked him when did I report it as lost and he didn't have an answer - he initiated a SR for investigation. I told him since I didn't request for blocking card you have to re-issue it free of cost. He agreed and took down the request for the same.

Let's see what they come up with in the investigation result.
This indeed is a very important topic to discuss, different safety measures vs different online/ frauds cheating.
It will be really helpful for everyone.
 
  • Like
Reactions: SJM
Recently, just like a normal human being, I too got greedy and almost became a victim of an online fraud. But thanks to measures taken by RBI and staying vigilant, I was able to avoid the mishap.

I clicked on a link in FB which looked genuine. They asked for a survey on Ghee and as a token of appreciation for taking the survey they were offering a 500ml Gir Cow Ghee for Rs. 100. Remember, if something sounds too good to be true, it generally is. I forgot that for a moment and clicked on the buy link and entered my CC details. Fortunately, I had international transactions blocked. I was also surprised that an OTP came for an international transactions (but who reads OTP's)? Rather, it reassured me it is an Indian transaction. I blindly entered the OTP and then got message transaction of BHD 100 declined as international transactions are blocked - what a relief. Then I went back and checked the OTP message and found transaction amount was clearly mentioned as BHD 100 (approx INR 22,600) and not INR 100 as I expected. The payment page showed Rs. 100.

Learnings:
  1. Read the OTP carefully and verify the amount before entering the same for a purchase from any unknown site.
  2. Always keep international transactions turned off.
  3. Set a daily/per transaction limit

Next, I got a call from IDFC transaction monitoring team. Don't know if they are human beings or machines who only understands one of two answers - yes or no. They asked me if it was a fraudulent transaction, I said yes and according to them that meant I didn't try to make that payment. They couldn't understand the point that I did initiate the payment but not for the amount it turned out to be. For them fraudulent has only one meaning, done by someone else using my card details and card needs to blocked. I objected to blocking card as they refused to waive re-issue charges of 199+GST. They told me it will be at my own risk and I agreed to it. They also said, I will get a mail from RCU to which I have to reply with my consent for not blocking the card. I didn't get any mail from RCU but got SR closure message and mail after few hours. Card re-appeared in app (it was not visible in the interim) and I was able to reset limits.

Surprisingly, today morning when I tried to make a POS payment the transaction got declined. I got message card is temporarily blocked. On checking in app it showed card is permanently blocked. Called up customer care and told them what happened few days back and that I have not asked to block card how can you block it. He checked in the system and informed me it is blocked as lost. What a surprise. I asked him when did I report it as lost and he didn't have an answer - he initiated a SR for investigation. I told him since I didn't request for blocking card you have to re-issue it free of cost. He agreed and took down the request for the same.

Let's see what they come up with in the investigation result.
Kotak Mahindra Bank doesn't even mention transaction amount in the SMS for RuPay credit card transactions.

@Abhishek012
 
Back
Top