Wednesday 11 November 2015

The Day I got hacked

Yesterday I got a call from a lady saying that I'm from Kotak Mahindra Bank, surprisingly, she knew my name and credit card number. She said RBI's policy has been changed so we are going to change your credit card, you will get a new credit card with enhanced credit limit. We need to transfer your points which you have earned to your saving account.
Meanwhile, she out-loud my card expiry date which was incorrect, I corrected immediately (oops!!)

Now she had my card number and expiry date, next she wanted my CVV number. She said we are going to transfer the points your account, we will connect your call to Bank portal, once connected please enter your CVV number. I agreed because Kotak follows the same process when you will request a Mobile Banking Pin (Smart enough!!) .

I followed her, as soon as I entered the CVV on my Mobile's key-pad, I could hear that the system in her side repeating the entered number which never happened while requesting for Kotal mobile pin (suspected!!).

I immediately disconnected the call, and contacted Kotak Customer Care service, explained the entire story. He said sir we are not aware of any such a policy from RBI. That must be a fraud call.
As the fraud lady already had my Card details (Card Number, Expiry Date and CVV), so Customer Care Executive suggested me block the card otherwise they might make a transaction using those details. So requested her to block the card. 

After a few minutes I got two consecutive messages, one requesting for OTP (one time password), another card cancellation confirmation from Kotak.

So they already had tried transaction, the OTP system saved my ass (Thank God!!).

These fraud people are smart enough and know how to play psychological hacks to get your Bank details. They know the process followed by your Banks.

Be careful, never ever believe on these idiots. If you get any such a call before asking any details, just fuck them off. Bank NEVER will ask for any such details.