Meet bots asking you for otp

[libert19]

You are aware of scammers trying to impersonate officials and lure you into handing them out info.

Those are obvious, most no longer fall for them.

So scammers have progressed bit further, they buy automated bots which call people, and ask for info. This doesn't seem that obvious as most consider automated voices to be genuine, or at least I do.

Read more: https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo

Don't give sensitive info irrespective what the source is.

[1715384179]

1715384179

[1715384179]

1715384179

[rhomelmabini]

I literally thought that recording was really from a real customer service and it was just too good to be true. Looks like scammers really doesn't settle for less and they also upgraded if there's something that may hinder their ways. I guess this is already rampant and I'm just hoping people will stay vigilant as always and never ever share any personal info.

This should be the instill onto people's mind:

"We urge all consumers never to share their banking password or a one-time code their bank sends them. Bank employees won’t call, text or email consumers asking for this info, but crooks will.”

[Oshosondy]

Don't give sensitive info irrespective what the source is.

If bot call me, it will bring more fear and suspicion, I will finally know it is from scammers if asking for information pertaining to myself, but some people may not know how dangerous giving out information pertaining to them to a stranger that the stranger can use against them.

This still lies in the fact that we should avoid phishing but I always wonder how people will be scammed this way, though the email phishing can be more effective especially to newbies that are just starting to know crypto.

We should avoid such calls, text message, email, even whatsapp, telegram and many other social...

[UserU]

Shit, this is even worse than those robocalls. And for those that don't install caller ID apps like TrueCaller might not even know before its too late.

Unfortunately many naive or elderly will still fall victims to this since the processes are way less complex than they should be...

If bot call me, it will bring more fear and suspicion, I will finally know it is from scammers if asking for information pertaining to myself, but some people may not know how dangerous giving out information pertaining to them to a stranger that the stranger can use against them.

This still lies in the fact that we should avoid phishing but I always wonder how people will be scammed this way, though the email phishing can be more effective especially to newbies that are just starting to know crypto.

We should avoid such calls, text message, email, even whatsapp, telegram and many other social...

Exactly. If it's requesting for your username and password, that's easily identified but all it requests is a mere OTP code. In my country, this modus operandi has already happened, but through Whatsapp messages:

Victim: *receives OTP on the device*

Shortly after, the scammer Whatsapp the victim.

Scammer: Hey (username), sorry to trouble you but I accidentally entered the wrong number for the OTP to make a purchase. Did you receive it?

Victim: Hi, yes. It's XXXXXX

Then the shit hits the fan

Imagine still thinking that your credentials are safe when they already had them in the first place.

[cryptoaddictchie]

Damn is this for real? Not shocked but the way it was done is really somehow given effort to just to scam people. I also heard like this on our country and some got victimized with such atrocity and greed. I know this could be minimized if people informed and guide about the potential scam activity of this kind.

[nakamura12]

I always ignore all emails that I received from unknown sender except the real ones. Scammers do find ways just to scam money from their victims. It is better to ignore the bot if you are not sure. As what rhomelmabini quoted, only crooks will ask for one time code, password, bank informations and other personal details that may use against the owner.

[libert19]

Don't give sensitive info irrespective what the source is.

And company which use OTP as security measure (especially OTP which use SMS) should add message not to give OTP code/number to anyone including staff of the company. They should maximize the limit of SMS message which is 160 characters.

It's a thing where I live but usually these messages tends to be written in English which most can't read, they would just read the numbers not the rest of it.

[Lucius]

Damn is this for real? Not shocked but the way it was done is really somehow given effort to just to scam people.

Why wouldn't it be real? No one can blame only bad people for doing bad things, because they only take advantage of the flaws and weaknesses of good people. And this method doesn't work without the hacker having the victim's username and password, because all he's looking for is the 2FA code that the same hacker actually sends by using the victim's username and password. In other words, not only do you have to be naive enough to tell someone your 2FA code, but you also have to be so careless as to reveal your username and password beforehand.

My advice is to use the option to block all incoming calls/messages from unknown numbers, if you are not already sure of your actions when the bot calls you.

To break into an account, a hacker will need a victim’s username or email address and password...But the victim may have multi-factor authentication enabled, which is where the bots come in... When the bot places the automated call and asks the victim to enter a code they just received, the hacker will simultaneously trigger a legitimate code to be sent from the targeted platform to the victim’s phone.

[Upgrade00]

I can imagine a lot of people falling for this type of scam as it utilizes many tools scammers he a lot; one of which is panic. When one gets a call or message that someone is ttin to access their account, they immediately would likely panic and want to get rid of the threat as soon as possible, rather than logging into their account and messaging support, replying the automated message would seem the quickest way to do so, and they'll be ripped off before they know what's happening.

Naivety also plays a role as Lucius pointed out. In the crypto space or on the internet generally,bone should treat any offer or contact as a scan until proven otherwise, this way they'll ask themselves some questions which would reveal that it indeed is a scan.

[taufik123]

Currently, there are many new methods that hackers use to trap their prey. the use of bots that request OTP like this is a type of malicious bot that can hack the accounts used including all connected accounts.

Security needs to be improved, we as account users must also update about the various scammer tools used so as not to fall into the trap.
Bots that call and request an OTP code like this can be detected with contact identification applications that are widely available today.

[Rengga Jati]

Don't give sensitive info irrespective what the source is.

Exactly, this sometimes happens and unfortunately, some people believe this and give their sensitive information. And they are commonly new, or in trouble, or in the ways of claiming something.
Just be careful because everyone here may be the target of that kind of scammers.
I do very agree that Never give sensitive information to other people, whoever they are:
- Even they are your friends
- Even they say that they will help you to solve your porblem
- Even they say that they want to give you certain rewards of money by claiming and giving the sensitive information

The sensitive information can be:
- OTP code (from Gmail, GA, message, and others)
- Private key
- Mnemoic cphrase
- password
- PIN
and others

[hatshepsut93]

These days it's better to just never answer unknown phone numbers if you don't expect one to call you, it's pretty much always just spammers and scammers. There are even apps for blocking all calls that are not from contact list, can be very handy if you get constantly attacked by some callers.

Such calls can even be used by attacks like sim-swapping or resetting your password.