Beware (Awas Modus) of a new type of scam known as the fake BTS method. This scam targets almost all banks because fraudsters exploit the base transceiver station (BTS) of a mobile network provider.
A fake BTS (Base Transceiver Station) is an illegal device used to impersonate the official BTS towers of cellular operators. It impersonates a legitimate operator’s BTS, allowing fraudsters to send bulk SMS messages to nearby mobile phones without being detected by the official operator’s system.
Image: How Fake BTS works
This device is generally used to send fraudulent SMS messages. The most common method currently is the fake points redemption scheme, in which scammers provide a link to trick victims into entering their personal data. This data is then used to access the victim’s finances or direct them to a malicious link designed to steal sensitive information, such as banking credentials.
Chronology
Here is the sequence of events in the fake BTS scam:
- The fraudsters operate a fake BTS device from their car (as described above).
- They send an SMS containing a phishing link through an official-looking SMS channel, impersonating BCA (a tactic known as spoofing).
- The SMS includes information about an offer to redeem points that are about to expire or other misleading details.
- Believing the message is from BCA, victims (BCA customers) click on the provided link.
- Customers select an item to redeem, often with an additional admin fee of a certain amount.
- Customers enter their payment details, choosing either a Credit Card or Debit Card as the payment method.
- When the customers attempt to make the payment, the website deliberately generates an error message, prompting them to re-enter their payment details, such as card number, CVV/CVC, OTP code, etc.
- Meanwhile, the fraudsters, operating behind the scenes, capture the entered data through the phishing website and use it to carry out unauthorized transactions at online merchants (usually overseas merchant)
Security Tips
Here are 4 security tips that will help you avoid SMS scams Fake BTS:
- Don't be influenced by the sender's number, but focus on the content of the SMS. If you are asked to click on a link, let alone fill in personal data, it is definitely a scam!
- Don't be easily tempted by things related to lottery programs. BCA Prize Festivals never offer to exchange points other than in the myBCA or BCA mobile app.
- Never give/fill in card numbers, CVV/CVC, OTP codes, etc., to anyone.
- If you receive dubious information, confirm its accuracy via the haloBCA app, call 1500888, or contact Bank BCA's WhatsApp at 08111500998.
These are security tips if you get caught up in the Fake BTS SMS scam. Hopefully, this article can help educate BCA customers to avoid fraud.