<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>cybercrime on S Anand</title>
    <link>https://www.s-anand.net/blog/tag/cybercrime/</link>
    <description>Recent content in cybercrime on S Anand</description>
    <generator>Hugo -- 0.164.0</generator>
    <language>en-us</language>
    <lastBuildDate>Tue, 11 Oct 2022 08:50:49 +0000</lastBuildDate>
    <atom:link href="https://www.s-anand.net/blog/tag/cybercrime/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>The OLX UPI con</title>
      <link>https://www.s-anand.net/blog/the-olx-upi-con/</link>
      <pubDate>Sun, 02 Oct 2022 16:42:15 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/the-olx-upi-con/</guid>
      <description>&lt;p&gt;&lt;img alt=&#34;The OLX UPI con&#34; loading=&#34;lazy&#34; src=&#34;https://www.s-anand.net/blog/assets/Thief.webp&#34;&gt;&lt;/p&gt;
&lt;p&gt;Before &lt;a href=&#34;https://www.s-anand.net/blog/moving-to-singapore/&#34;&gt;moving to Singapore&lt;/a&gt;, we listed our furniture and white goods for sale on &lt;a href=&#34;https://www.olx.in/&#34;&gt;OLX&lt;/a&gt;.&lt;/p&gt;
&lt;h3 id=&#34;caller-1-vinod-buys-a-bed&#34;&gt;Caller 1: Vinod buys a bed&lt;/h3&gt;
&lt;p&gt;On 18th April, I got a call from +91 70868 17420. He said he was Vinod, and owned a furniture shop in Ahmedabad. He wanted to buy our bed for Rs 6,000.&lt;/p&gt;
&lt;p&gt;It was not too bad an offer, so we agreed.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;I will pay by phone, sir. Give me your WhatsApp number.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: (Wow! He&amp;rsquo;s using &lt;a href=&#34;https://www.whatsapp.com/payments/in&#34;&gt;WhatsApp Pay&lt;/a&gt;? That&amp;rsquo;s a first.) &amp;ldquo;Sure. It&amp;rsquo;s 9741 552 552.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;I&amp;rsquo;ve sent a picture, sir. Please scan that.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Uh&amp;hellip; OK. I got this QR code on WhatsApp. I scanned it on PayTM. But it&amp;rsquo;s asking &lt;strong&gt;&lt;em&gt;me&lt;/em&gt;&lt;/strong&gt; to transfer to 9713902265.imb@icici. Is that right?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;Yes sir. Please type 6,000 and send. You will get the amount.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;He sounded so confident, I thought I had it wrong.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;But this will pay &lt;em&gt;you&lt;/em&gt; Rs 6,000. How will I get Rs 6,000?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;Sir, it is a business account. I sent you Rs 6,000. But you will get it only if you enter 6,000.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Vinod, I don&amp;rsquo;t think payments work that way&amp;hellip;&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;Sir, I will show you. I will pay you 1 rupee. You type 1 and send. You will get back 2 rupees.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;I didn&amp;rsquo;t mind losing a rupee, so I paid his account 1 rupee.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;Sir, now please check your account. You will have 2 rupees.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;And I did have 2 UPI credits of 1 rupee each from his account.&lt;/p&gt;
&lt;table&gt;
	&lt;thead&gt;
			&lt;tr&gt;
					&lt;th&gt;Date&lt;/th&gt;
					&lt;th&gt;Transaction Remarks&lt;/th&gt;
					&lt;th&gt;Withdrawal&lt;/th&gt;
					&lt;th&gt;Deposit&lt;/th&gt;
			&lt;/tr&gt;
	&lt;/thead&gt;
	&lt;tbody&gt;
			&lt;tr&gt;
					&lt;td&gt;18-Apr-2022&lt;/td&gt;
					&lt;td&gt;UPI/210885173447/NA/BHARATPE0990555/Yes Bank Ltd/PTMF7DD556B1DFF42538B3F24D52AFD0A0F/&lt;/td&gt;
					&lt;td&gt;1.00&lt;/td&gt;
					&lt;td&gt;&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;
					&lt;td&gt;18-Apr-2022&lt;/td&gt;
					&lt;td&gt;UPI/210868024141/UPI Payment/9713902265.imb@/Axis Bank Ltd./ICId74ef953e7bd4588bbcf226880cd4864&lt;/td&gt;
					&lt;td&gt;&lt;/td&gt;
					&lt;td&gt;1.00&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;
					&lt;td&gt;18-Apr-2022&lt;/td&gt;
					&lt;td&gt;UPI/210868024950/UPI Payment/9713902265.imb@/Axis Bank Ltd./ICIb8cafc942184402dafda89620319a9e9&lt;/td&gt;
					&lt;td&gt;&lt;/td&gt;
					&lt;td&gt;1.00&lt;/td&gt;
			&lt;/tr&gt;
	&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Sure, Vinod. You paid me 2 rupees. But when I pay you Rs 6,000, there&amp;rsquo;s no guarantee you&amp;rsquo;ll pay me Rs 12,000. Why don&amp;rsquo;t you come in person, collect the sofa, and pay me then?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;What sort of man are you? I already sent you money from my account. I cannot get it back now. I will have a loss. You tell me &amp;ndash; how will you give me back my money?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: (Um&amp;hellip; He really does sound convincing.) &amp;ldquo;Vinod, I&amp;rsquo;m really not comfortable with this. Let&amp;rsquo;s not go ahead.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Vinod&lt;/strong&gt;: &amp;ldquo;You&amp;rsquo;re an asshole. Get off the line!&amp;rdquo;&lt;/p&gt;
&lt;h3 id=&#34;caller-2-gaurav-buys-a-recliner&#34;&gt;Caller #2: Gaurav buys a recliner&lt;/h3&gt;
&lt;p&gt;On 15th May, I got a call from Gaurav at +91 84865 47620.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Gaurav&lt;/strong&gt;: &amp;ldquo;Sir, you have a sofa set on OLX for Rs 60,000. Can you give it for a lower amount?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Well, I&amp;rsquo;m OK with Rs 55,000, but not less.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Gaurav&lt;/strong&gt;: &amp;ldquo;OK sir. I will pay by UPI. Can I make a 50% advance payment, then you can take off the listing from OLX?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;OK, sure.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Gaurav&lt;/strong&gt;: &amp;ldquo;What is your UPI account?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;9741552552@upi.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Gaurav&lt;/strong&gt;: &amp;ldquo;I have paid Rs 27,500. I have sent you a picture. Can you scan it and enter 27,500?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;I got an image that requests a payment to &lt;a href=&#34;mailto:bharatpe09905995207@yesbank.ltd&#34;&gt;bharatpe09905995207@yesbank.ltd&lt;/a&gt;. But that&amp;rsquo;s for ME to transfer to YOU. I have not received your payment.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Gaurav&lt;/strong&gt;: &amp;ldquo;I have already paid the advance sir. If you type 27,500 and send, you will get it.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Sorry, Gaurav, I&amp;rsquo;m not going to do that. Bye.&amp;rdquo; (click)&lt;/p&gt;
&lt;p&gt;By now, I was a &lt;em&gt;bit&lt;/em&gt; wiser.&lt;/p&gt;
&lt;h3 id=&#34;caller-3-priti-buys-a-recliner&#34;&gt;Caller #3: Priti buys a recliner&lt;/h3&gt;
&lt;p&gt;On 15th May, I got a call from yet another person. I forget his name. It might have been Priti.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;He&lt;/strong&gt;: &amp;ldquo;Sir, I want to buy your recliner. How much is it for?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;How will you pay and how much, please?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;He&lt;/strong&gt;: &amp;ldquo;Sir, I will pay on UPI. I can pay up to 55,000, sir. I will transfer the money and send you the confirmation code, sir&amp;rdquo;&lt;/p&gt;
&lt;p&gt;I let out a huge laugh, and continued laughing for a good 5 seconds.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;He&lt;/strong&gt;: &amp;ldquo;Sir, what happened, sir?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;Oh, this is so hilarious. How much money do you make in a month with scams?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;He&lt;/strong&gt;: &amp;ldquo;Sir, what sir?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Me&lt;/strong&gt;: &amp;ldquo;I&amp;rsquo;d love to interview you for my blog. Do you change SIM cards often? Do you use channels other than OLX? What do you do in case someone files a cyber-crime complaint?&amp;rdquo;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;He&lt;/strong&gt;: (click)&lt;/p&gt;
&lt;h3 id=&#34;cyber-crime-reporting&#34;&gt;Cyber-crime reporting&lt;/h3&gt;
&lt;p&gt;This con is &lt;a href=&#34;https://help.olx.in/hc/en-us/articles/360010024959-Payment-Link-Scams-UPI-FAQ-s-&#34;&gt;well-documented on OLX&lt;/a&gt;. I decided to file an online cyber-complaint at &lt;a href=&#34;https://cybercrime.gov.in/&#34;&gt;https://cybercrime.gov.in/&lt;/a&gt;. The process was not too painful. This is what the form asked for.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Category of complaint&lt;/strong&gt;
&lt;ul&gt;
&lt;li&gt;Online and Social Media Related Crime&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Online Financial Fraud&lt;/strong&gt;
&lt;ul&gt;
&lt;li&gt;Business Email Compromise/Email Takeover&lt;/li&gt;
&lt;li&gt;Debit/Credit Card Fraud/Sim Swap Fraud&lt;/li&gt;
&lt;li&gt;Demat/Depository Fraud&lt;/li&gt;
&lt;li&gt;E-Wallet Related Fraud&lt;/li&gt;
&lt;li&gt;Fraud Call/Vishing&lt;/li&gt;
&lt;li&gt;Internet Banking Related Fraud&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;UPI Fraud&lt;/strong&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Hacking / Damage to computer,computer system etc&lt;/li&gt;
&lt;li&gt;Online Cyber Trafficking&lt;/li&gt;
&lt;li&gt;Online Gambling / Betting&lt;/li&gt;
&lt;li&gt;Ransomware&lt;/li&gt;
&lt;li&gt;Cryptocurrency Crime&lt;/li&gt;
&lt;li&gt;Cyber Terrorism&lt;/li&gt;
&lt;li&gt;Any Other Cyber Crime&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Have you lost money? Yes/&lt;strong&gt;No&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Approximate date &amp;amp; time of Incident/receiving/viewing of content: &lt;strong&gt;18 Apr 2022&lt;/strong&gt; &lt;strong&gt;18:10&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Is there any delay in reporting? &lt;strong&gt;No&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Where did the incident occur?
&lt;ul&gt;
&lt;li&gt;Email&lt;/li&gt;
&lt;li&gt;Facebook&lt;/li&gt;
&lt;li&gt;Instagram&lt;/li&gt;
&lt;li&gt;Snapchat&lt;/li&gt;
&lt;li&gt;Twitter&lt;/li&gt;
&lt;li&gt;WhatsApp&lt;/li&gt;
&lt;li&gt;Website Url&lt;/li&gt;
&lt;li&gt;Youtube&lt;/li&gt;
&lt;li&gt;LinkedIn&lt;/li&gt;
&lt;li&gt;Telegram&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Other&lt;/strong&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Other Media: &lt;strong&gt;OLX&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Supporting Evidence (Upload Media/Image/Pdf): &lt;strong&gt;Uploaded&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Please provide any additional information about the incident: &amp;hellip;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;My thanks to Vinod, Gaurav, and the third friend. I filed my first police complaint 🙂&lt;/p&gt;
&lt;p&gt;How the police responded is another story&amp;hellip;&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id=&#34;comments&#34;&gt;Comments&lt;/h2&gt;
&lt;!-- wp-comments-start --&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Sai&lt;/strong&gt; &lt;em&gt;15 Mar 2023 9:37 am&lt;/em&gt;:
Haha. Thanks for sharing this.
I went through exactly the same thing when I was relocating to Sgp too quite recently.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;&lt;a href=&#34;https://fully-faltoo.com&#34;&gt;Pratyush&lt;/a&gt;&lt;/strong&gt; &lt;em&gt;14 Oct 2022 8:04 pm&lt;/em&gt;:
Hey, thanks a lot for sharing this.
Please also share how the police responded. We too filed a police complained but never saw any action.&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- wp-comments-end --&gt;
</description>
    </item>
    <item>
      <title>Mumbai Police use a hacker</title>
      <link>https://www.s-anand.net/blog/mumbai-police-use-a-hacker/</link>
      <pubDate>Mon, 18 Nov 2002 12:00:00 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/mumbai-police-use-a-hacker/</guid>
      <description>&lt;p&gt;The &lt;a href=&#34;http://www.mid-day.com/news/city/2002/november/36356.htm&#34;&gt;Mumbai police are using a hacker&lt;/a&gt; to resolve some cybercrimes. It&amp;rsquo;s interesting to note some of his efforts: freeing the IDBI, HDFC sites from hackers, and tracking Chhota Shakeel&amp;rsquo;s money laundering. &lt;a href=&#34;http://www.techrose.org/filtercoffee/20021101.html#12308&#34;&gt;via FilterCoffee&lt;/a&gt;&lt;/p&gt;
</description>
    </item>
    <item>
      <title>Web scams</title>
      <link>https://www.s-anand.net/blog/web-scams/</link>
      <pubDate>Mon, 15 Jul 2002 12:00:00 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/web-scams/</guid>
      <description>&lt;p&gt;More &lt;a href=&#34;http://www.msnbc.com/news/775457.asp&#34;&gt;web scams&lt;/a&gt;.&lt;/p&gt;
</description>
    </item>
    <item>
      <title>Hacking arrest</title>
      <link>https://www.s-anand.net/blog/hacking-arrest/</link>
      <pubDate>Thu, 25 Apr 2002 12:00:00 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/hacking-arrest/</guid>
      <description>&lt;p&gt;The first case of &lt;a href=&#34;http://economictimes.indiatimes.com/articleshow.asp?art_id=7871588&#34;&gt;hacking&lt;/a&gt; under the IT Act has been registered. Had to be someone out of jurisdiction, didn&amp;rsquo;t it!&lt;/p&gt;
</description>
    </item>
    <item>
      <title>Hackers who make six figures</title>
      <link>https://www.s-anand.net/blog/hackers-who-make-six-figures/</link>
      <pubDate>Sun, 17 Jun 2001 12:00:00 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/hackers-who-make-six-figures/</guid>
      <description>&lt;p&gt;If you don&amp;rsquo;t believe in online theft, read the diaries of &lt;a href=&#34;http://stacks.msnbc.com/news/550567.asp?cp1=1&#34;&gt;hackers who make six figures&lt;/a&gt;, or stores of &lt;a href=&#34;http://www.latimes.com/business/cutting/features/lat_junk010503.htm&#34;&gt;junk-mail hoaxes&lt;/a&gt;. If you&amp;rsquo;ve already been had, share your sorrow at &lt;a href=&#34;http://adcops.com/&#34;&gt;Card cops&lt;/a&gt;.&lt;/p&gt;
</description>
    </item>
    <item>
      <title>Credit cards stolen from big shots</title>
      <link>https://www.s-anand.net/blog/credit-cards-stolen-from-big-shots/</link>
      <pubDate>Tue, 06 Feb 2001 12:00:00 +0000</pubDate>
      <guid>https://www.s-anand.net/blog/credit-cards-stolen-from-big-shots/</guid>
      <description>&lt;p&gt;The &lt;a href=&#34;http://www.wired.com/news/technology/0,1282,41630,00.html&#34;&gt;greatest hacks&lt;/a&gt; ever. And now, &lt;a href=&#34;http://www.independent.co.uk/news/Digital/Update/2001-02/cyber050201.shtml&#34;&gt;credit cards stolen&lt;/a&gt; from Bill Gates, George Soros and Yoshiro Mori.&lt;/p&gt;
</description>
    </item>
  </channel>
</rss>
