RATEL advises e-Commerce platform users how to avoid frauds and scams
RATEL, as the National CERT of the Republic of Serbia, acting within its scope of competence, would like to inform the public about an observed increase in the number of frauds directed against the users of e-commerce platforms. This particular type of scam targets advertizers contacted via selected communication apps by the supposed buyers interested in some of the advertized products.
The communication is mostly carried out through Whatsapp or Viber using both national and foreign telephone numbers.
The supposed buyer starts the conversation by asking the advertizer if the product is still available and if the purchase can be made online. Then, a link is provided to them on behalf of a supposed e-commerce platform administrator or the “buyer” himself, explaining that the “buyer” has already made a payment via an application and that the advertizer is now required to follow another link leading to a page where credit card number and CVV number are to be entered in the offered fields, so that the payment for the product could be supposedly finalized. Occasionally, the supposed buyer additionally asks the advertizer to provide codes the latter receives while filling in the form. As soon as the advertizer enters the required data and delivers the codes, the fraudster empties the victim’s bank account and leaves the conversation, blocking any further contact.
RATEL, as the National CERT, advises all e-commerce platform users to be extremely vigilant when asked to disclose their personal bank account and credit card data. It is important to know that the credit card data are only entered in order to pay for a product or service, whereas for an inpayment such data are not necessary, i.e. the bank account number is enough. The users are also urged to pay special attention to payment conditions on the platforms they use, since most of them offer cash-on-delivery as the only payment option.
Video - Types of cyber attacks