HOW THE SCHEME WORKS
Bank customers are contacted by phone from a number that caller ID indicates is from their bank. The impersonator then asks about recent transactions to lead the customer to believe there is a fraudulent activity involving their account. Bank customers are then advised to cut up their bank card but are instructed to leave the chip intact for return to the bank. Next, the impersonator arranges for an accomplice, also allegedly “from the bank,” to pick up the bank card (with chip intact) from the customer’s residence. If the impersonators do not currently have the customer’s PIN, the accomplice or impersonator will use social engineering techniques to obtain this from the customer. It has been reported that if the customer has not already done so, the accomplice may “assist” the customer by cutting the card and leaving the chip intact, before departing with the remnants. With the chip and PIN, the impersonators can steal funds from the bank customer’s account.
It is unknown how the impersonators are obtaining personal information (name, address, and bank account information). At this time, it is not believed specific demographics are being targeted.
VICTIM REPORTING
The FBI requests these fraudulent or suspicious activities are reported to the FBI IC3 at www.ic3.gov as quickly as possible. Be sure to include:
- How the complainant was contacted, including phone numbers.
- Any aliases utilized.
- Please include the keywords #BankChipHack.
Those affected should also contact your financial institution account providers immediately to regain control of your accounts, change passwords, and place alerts on your accounts for suspicious login attempts and/or transactions.
