One of the methods used by cybercriminals is to hack social media accounts on platforms like Facebook, Messenger or Instagram. Private accounts are taken over and used to send messages requesting payment card information, security credentials, etc. that can then be used to defraud victims.
This type of cybercrime has been perpetrated in Iceland and follows this and similar patterns: Once the criminals have hacked and taken over a Facebook, Messenger or Instagram account, they message people on the owner’s contact list. The message encourages the recipients to participate in an online competition or game that requires that they send their phone number. This is followed by a message that the recipient will get a text containing a code that he or she also needs to send. The criminals will then go on to ask for debit card information, credit card number, validity period and CVC, all in order to participate and receive winnings from the game or competition.
If you send your payment card information as well as the code from the text message, the criminals have enough information to use your card to withdraw funds, even max out the card. It is very unlikely that the stolen funds can be recovered and you could end up suffering the damages.
Please never respond to such messages with your payment card number, login information to online banking or security code you get in a text, social media platforms or emails. If one of your social media contacts asks for such information, that person has almost certainly been hacked.
