{"id":23602,"date":"2024-12-02T16:23:22","date_gmt":"2024-12-02T12:23:22","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/?p=23602"},"modified":"2024-12-02T16:23:22","modified_gmt":"2024-12-02T12:23:22","slug":"message-boards-video-call-scam","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/message-boards-video-call-scam\/23602\/","title":{"rendered":"Message boards hit by new video-call scam"},"content":{"rendered":"<p>Large online marketplaces do what they can to combat fraud, but cybercriminals remain one step ahead when it comes to scamming both buyers and <a href=\"https:\/\/www.kaspersky.com\/blog\/message-board-scam\/51379\/\" target=\"_blank\" rel=\"noopener nofollow\">sellers<\/a>. This year has seen the rise of an online video-call scam where fake buyers ask for a video-demo of a product, during which they swipe one-time codes. Here\u2019s all about this scheme \u2014 in four acts.<\/p>\n<h2>Act one. Suspicion<\/h2>\n<p>A seller of a high-end product (say, a fancy TV) is approached by someone posing as a buyer who wants to pay and collect as quickly as possible. But there\u2019s a catch: that someone requests a video-demo first. Most message boards don\u2019t let you do this, and even if they do \u2014 the \u201cbuyer\u201d will mysteriously have some issue at their end: <em>\u201cStrange, it\u2019s not working, how about we use WhatsApp instead?\u201d <\/em>And so the conversation moves seamlessly to a messenger or other chat platform. The request to switch to WhatsApp, Telegram or whatever is a BIG red flag. On their own home turf, scammers have an easier job of luring you to a phishing site, because many message boards don\u2019t allow sharing links in chats.<\/p>\n<h2>Act two. Certainty<\/h2>\n<p>The \u201cbuyer\u201d asks the seller lots of questions about the product: where did they buy it, does it work ok, and, if so \u2014 why are they selling it? With each passing minute, this dialogue between strangers becomes all the more like a conversation between long-time buddies. The \u201cbuyer\u201d seems keen and ready to fork out\u00a0\u2014 the seller just needs to provide a card number for the transfer of funds and the deal is done: <em>\u201cWhat a pleasure doing business with this guy. He sure is trustworthy.\u201d<\/em> But here\u2019s when the trap springs\u2026<\/p>\n<h2>Act three. Discovery<\/h2>\n<p>Without even naming the screen-sharing feature, the \u201cbuyer\u201d asks the seller to turn on screen-sharing in WhatsApp. If the seller complies, their banking app screen becomes visible to the scammers, who attempt to log in to the seller\u2019s online bank account. At this point, the victim\u2019s smartphone receives an <a href=\"https:\/\/www.kaspersky.com\/blog\/unexpected-login-codes-otp-2fa\/50526\/\" target=\"_blank\" rel=\"noopener nofollow\">unexpected text message with a one-time code<\/a>. On most devices, the code is displayed in a pop-up message that the cybercriminals also get to see. And if the victim, still in screen-sharing mode, checks to see what message just arrived, the scammers don\u2019t even need the pop-up\u00a0\u2014 they get the code anyway!<\/p>\n<h2>Act four. Loss<\/h2>\n<p>Depending on what information the \u201cbuyer\u201d had beforehand, and what access they gained to the victim\u2019s bank account, they can either siphon off funds immediately, or, if the amount in the account is too large to transfer, switch to another scam involving a call from an \u201cinvestigator\u201d who promises to investigate the incident of fraudulent bank access and persuades the victim to transfer the money to \u201ca safe account\u201d. One way or another, the money disappears.<\/p>\n<h2>How to guard against message board scams<\/h2>\n<p>Bear in mind that message boards are often teeming with fake sellers and buyers. Sure, such accounts eventually get exposed and blocked after user complaints, but the perpetrators simply create or buy new ones. So we\u2019ve made a list of tips to help you stay safe when buying or selling on any message board:<\/p>\n<ul>\n<li>Chat with other buyers or sellers only within the platform. Never switch to a messenger app \u2014 even (or especially) if the other party really wants to. Outside the marketplace itself, scammers can slip you a <a href=\"https:\/\/www.kaspersky.com\/blog\/how-to-protect-yourself-from-phishing\/42317\/\" target=\"_blank\" rel=\"noopener nofollow\">phishing link<\/a> to steal your account \u2014 or worse.<\/li>\n<li>Use reliable protection on both your smartphone and computer, for example <a href=\"https:\/\/me-en.kaspersky.com\/premium?icid=me-en_bb2022-kdplacehd_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team___kprem___\" target=\"_blank\" rel=\"noopener\">Kaspersky Premium<\/a>.<\/li>\n<li>Decline offers to use alternative delivery or money transfer services\u00a0\u2014 opt for the platform\u2019s native tools or accept payments in cash only.<\/li>\n<li>Do not give anyone your phone number (and hide it in your marketplace profile) or card number.<\/li>\n<li>Get yourself a virtual card with a limit on online payments.<\/li>\n<li>Never give out one-time codes, because then even <a href=\"https:\/\/www.kaspersky.com\/blog\/when-two-factor-authentication-useless\/51434\/\" target=\"_blank\" rel=\"noopener nofollow\">two-factor authentication won\u2019t save your account<\/a>.<\/li>\n<li>Disable pop-up notifications and on-screen text messages.<\/li>\n<li>Check the domain registration date before entering payment details on the site (see <a href=\"https:\/\/www.kaspersky.com\/blog\/how-to-protect-from-online-scam\/43908\/#:~:text=Check%20who%20registered%20the%20domain%20and%20when\" target=\"_blank\" rel=\"noopener nofollow\">here<\/a> for details of how to do this).<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"premium-generic\">\n","protected":false},"excerpt":{"rendered":"<p>Scammers posing as buyers snatch one-time codes during online product demos.<\/p>\n","protected":false},"author":2706,"featured_media":23603,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1486,9],"tags":[80,76,43,695,97,521,2266,520],"class_list":{"0":"post-23602","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"category-tips","9":"tag-fraud","10":"tag-phishing","11":"tag-privacy","12":"tag-scam","13":"tag-security-2","14":"tag-threats","15":"tag-video-conferencing","16":"tag-whatsapp"},"hreflang":[{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/message-boards-video-call-scam\/23602\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/message-boards-video-call-scam\/28351\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/message-boards-video-call-scam\/28481\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/message-boards-video-call-scam\/38671\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/message-boards-video-call-scam\/13028\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/message-boards-video-call-scam\/52717\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/message-boards-video-call-scam\/23630\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/message-boards-video-call-scam\/28602\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/message-boards-video-call-scam\/34436\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/message-boards-video-call-scam\/34060\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me-en.kaspersky.com\/blog\/tag\/scam\/","name":"scam"},"_links":{"self":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/23602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2706"}],"replies":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=23602"}],"version-history":[{"count":1,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/23602\/revisions"}],"predecessor-version":[{"id":23604,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/23602\/revisions\/23604"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/23603"}],"wp:attachment":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=23602"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=23602"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=23602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}