Don’t put your card in your phone: PrivatBank warned about a dangerous scheme

A new fraudulent scheme using NFC technology is spreading in Ukraine. Criminals impersonate bank employees, convince the victim to install a third-party program and attach a bank card to a smartphone. After that, they can obtain payment data and use them to steal funds.

PrivatBank warned about so-called NFC Relay attacks and explained how to protect your money.

How the fraudulent scheme works

It usually starts with a phone call. The fraudster introduces himself as a bank security officer and reports an alleged problem with the account or the need to urgently undergo a check.

They try to force the person to act quickly, leaving no time to verify the information received.

After that, the fraudsters can send a link to a third-party program via messenger and convince them to install it on their smartphone.

The next step is to ask them to attach their bank card to their phone and enter their PIN code.

Malicious software can work as an NFC signal repeater and transmit card data to a device controlled by attackers. The information obtained can then be used to conduct unauthorized transactions.

Is NFC technology itself dangerous

NFC technology itself is not the cause of fraud. The risk arises when the user installs third-party software and follows the instructions of unknown persons.

Head of the fraud management department of PrivatBank Natalia Figol emphasized that real bank employees do not ask customers to download unknown files from messengers or attach a payment card to a smartphone at their request.

How to protect money from scammers

The bank advises to follow several rules:

download applications only from the official App Store and Google Play stores;
do not install files received from unknown persons in messengers;
do not attach a bank card to a smartphone at the request of the interlocutor by phone;
do not tell anyone your PIN code and do not enter it at the direction of third parties;
set limits on cash withdrawals and online transactions;
regularly check the history of card transactions.
What to do if someone is already trying to steal your money

If a person suspects that they have given fraudsters access to payment data, you need to act immediately.

PrivatBank recommends immediately blocking the card through Privat24. You can also contact the bank’s support service or a branch.

The sooner the card is blocked after suspicious activity is detected, the greater the chance of preventing further unauthorized transactions.