Beware of Social Media Phishing Scams.

[I_Anime]

A friend of mine was a victim of phishing scam  in X (formerly known as Twitter) .  I will try to make it short , he had issue with his Greg account . I think concerning their fee so he tag them on X not knowing that he had already made himself target for scammers then a fake grey support account dm him on X with a link , due to desperation he filled the like without being conscious, then few mins later he device went off by itself before he manage to put on back found out that his phone has been wiped , and his email has been hacked and he received a notification of his funds being sent out of his grey wallet , the scammer even went to his kuda bank  to show how vulnerable one is  when their email is hacked.

And I learnt something from this event , even him also learn something new but from experience (which is quite sad ), some of the things I learnt is that , don’t message customer support outside any application, don’t use same password over and over again (try using various of passwords when opening any account ), Be conscious with the type of link you click, and make sure you are well impacted when it come to privacy and security cause as we get smarter so as the scammers get smarter also .

[Felicity_Tide]

~snip

And I learnt something from this event , even him also learn something new but from experience (which is quite sad ), some of the things I learnt is that , don’t message customer support outside any application, don’t use same password over and over again (try using various of passwords when opening any account ), Be conscious with the type of link you click, and make sure you are well impacted when it come to privacy and security cause as we get smarter so as the scammers get smarter also .

Phishing scams are still very rampant these days.
Since there are no actual systems in place to checkmate these guys across the internet space, it is best for every internet user to help themselves in the best ways as possible. And the rate at which some users ends up falling for things that looks too easy to spot the flaws, makes you wonder if the cautious part of their thinking isn't concerned with what could possibly go wrong.

I tried searching for Grey/Greg wallet account on X, but nothing came up. I'm not sure of the exact verified account that your friend mentioned. we as humans can avoid a lot of troubles just be verifying things properly.

[Orpichukwu]

His first mistake was opening a message from someone who claimed to be part of the support team. Real support don't message first; they will ask you to DM them in order to create awareness that it's them, and they are usually verified.

And for the Kuda, unless they have changed their security settings, even if you have someone's Kuda email and password, logging in on a new device will require authentication, which is sent to your mobile number. If you bypass it without passing through the verification, they always require you to verify it before you can send something out from the account.

[Creeper0]

The simplest advice here is, do not click on any link sent by someone you know or don't know. Especially do not accept any link from people who have unreliable friends or people with low depth of relationship. I never click on any link, but rather try to search that website or try to find out the content of the link. Or currently you can take the help of AI to click on any link. If you give a link to AI and ask it if it is a phishing link or not? Then it can give you a basic idea.

You can even read the link address to understand what kind of link it is or whether it is a link you are familiar with! If you do not find the link convenient, then ignore the message. It would be best, ignore any kind of link. There is no need to trust anyone, especially when you have small or large funds stored on your device.

[Donk1]

This really tuff for your friend and the fact that he fell for this scam was because he was already tired and stressed out because of his account issue and am sure that was how the scammers got him. It's certain now that we should never trust DMs from any support on any social media, X or not. always use the real official website and never forget to enable the two factor authentication on your email, bank account, and also your social medias accounts.Because right now we need to value our security more than anything because basically right now that they have hacked your friend's phone, who knows which other things they will do with that his email with your friends name on it? That's just it folks. We should be very careful.

[DaNNy001]

His first mistake was opening a message from someone who claimed to be part of the support team. Real support don't message first; they will ask you to DM them in order to create awareness that it's them, and they are usually verified.

And for the Kuda, unless they have changed their security settings, even if you have someone's Kuda email and password, logging in on a new device will require authentication, which is sent to your mobile number. If you bypass it without passing through the verification, they always require you to verify it before you can send something out from the account.

Omo me sef I know very well that login into someone kuda no fit just work like dat and no be only kuda sef because almost all these fintech bank get that protocol of verification before accessing it and even when you manage pass that phase it will still require otp as u talk am or sometimes facial verification accept only if the account u dey log am in for device wen already dey familiar with the kuda account then possibly this verification Dem fit no hold but aside from that u must confirm verification.

[Dr.Bitcoin_Strange]

Well, it's not entirely the fault of those people that are falling into such kind of scams, they are just inexperienced and had to bear the risk of losing their funds because of lack of awareness. I had the opportunity to learn about all these social media scams from an early time as soon as I got into Bitcoin. I have already read and listened to the experience of many people, that's why am always careful.

[Emjay24]

His first mistake was opening a message from someone who claimed to be part of the support team. Real support don't message first; they will ask you to DM them in order to create awareness that it's them, and they are usually verified.

They do, in fact when I wanted to implement First bank payment gateway on a clients site, I made a request and tagged them on X and they sent me a DM and came to my post to ask me to check my DM. The mistake he made was to fill out his wallet credentials in the form and I think the dude didn't have 2FA on his email account for it to be hacked and he was crazy enough to fill out his wallet seed phrases or priv. keys. In a nutshell, if this story is true the friend in question carelessness led to his ruin unless he is a digital newbie.

And for the Kuda, unless they have changed their security settings, even if you have someone's Kuda email and password, logging in on a new device will require authentication, which is sent to your mobile number. If you bypass it without passing through the verification, they always require you to verify it before you can send something out from the account.

Same reason I did not believe the Kuda part of the story, Kuda and Opay for which I'm sure always validates a new device like you've illustrated before granting you access.

[SatoPrincess]

Phishing scams don dey become rampart for naija these days. I no know who teach these boys this thing way them won use am finish people. A friend of mine recently got his wallet wiped clean after clicking a phishing link. His ordeal was quite similar to the one in the OP, it’s very painful to lose everything you worked hard to achieve throughout the year. Make everyone sha dey careful.

[Lembo69]

Now scammers are very clever, they are not only on X (Twitter) but also on Telegram or other sites. Even though we are aware, we are still facing their new tricks. It is not that your friend was not aware, but their phishing method is also through a simple phone call, which only by receiving the call they get the necessary information and detailed information about the wallet. So we should be so careful that we should refrain from receiving calls from anonymous people. And we should create our passwords in such a way that phishing scammers cannot figure it out even if they want to.

[Btcdeybodi]

I say sorry to anyone that still believes that stuffs on social media are real and when you are dealing with a platform, instead of chatting their support from the app you choose to visit and lay complaints on their social media handle, what do  you expect?

I could remember when i had issues with my bank account and after trying to rectify it from one of their branch but to no avail, someone told me to go to their twitter account and lay my complaints there, but i declined immediately that i would rather exercise patients than doing that.

Phishing scams is becoming very common this days that is why it is important to activate anti-phishing codes to your email so that you can identify mails coming as a scam and the real mails coming from the platform you are using.

[adultcrypto]

You friend did everything wrong in this story especially when they gave him for to fill with sensitive information,  that would have made him realised it was a scam attempt. Without supplying them sensitive information, there is no way they can access his banking app and other parts of his device. It has been stressed never to click on any unknown link as that is like exposing oneself to phishing. I hope yo friend learns from that incidence.

[Mhizlove]

It is really a pity that he went through this phase in life. One thing about scammers is that once they see a complaint online they see an opportunity and seize by acting to be the customer care and send a fake link. It is good that you people learnt from this because from what just happened, it's crystal clear that we shouldn't click on any link that is sent to us in our social media DMs or received as text messages, especially when it's not a verified account.
Another lesson to learn is that you shouldn't use the same password on all your accounts because these scammers are wicked and whatever makes them know one, it will be easy for them to access the other accounts without stress. And when contacting customers care, do that directly from the main app or their website and don't follow people randomly on Meta X . Because we are getting more enlightened so also are scammers, they use new patterns or tricks everyday and I will urge everyone to be at alert and secure your information very well.

[EluguHcman]

That your friend must be inexperience with security risks in the space because I don't understand how he think communicating a platform officials for assistance or complaint issues outside the sites domain will be reliable or the right thing to do.

I have no clue of this Grey or Greg platform you are referring to but don't they have customer care support in their site where he would had communicated the help centre?
Taking the platform to the X or social network was very unreasonable while stepping on the unverified link was the worse mistakes that gave the scammers unauthorized access to the device.

A lot of users are still in the dark or are being ignorant to understand that hackers targets victims through phishing link's and malicious files. Of course if we also don't keep skepticism with the internets we could be vulnerable to csm victims.

[Ndabagi01]

I don’t know how this scams works but I have come across many users on X tagging the support of a service they need to resolve something on, I never imagined that scammers will take advantage of that as you’ve explained in this your post. Although, I’m also not too surprised because scammers can go into any length to always want to win over their victims easily and make everything look non-suspicious.

We should always try not to act too fast in desperation when we’re having difficulty with what requires a customer support of a service we’re using to fix, especially when it involves finances. We should always be careful and look out for red flags in whatever we do even when we’re already engaging with one. And the best way is to always have them contact us on their platforms and not out of their platforms, so it’s important not to escalate our problems to the public in order not to get feast on by scammers out there.

[Sally9256]

His first mistake was opening a message from someone who claimed to be part of the support team. Real support don't message first; they will ask you to DM them in order to create awareness that it's them, and they are usually verified.

And for the Kuda, unless they have changed their security settings, even if you have someone's Kuda email and password, logging in on a new device will require authentication, which is sent to your mobile number. If you bypass it without passing through the verification, they always require you to verify it before you can send something out from the account.

That's right because I actually use kuda bank app and it's just exactly as you have explained it. Most of these banks have a tough security system which makes it difficult to bypass. Sometimes I get annoyed when trying to log in my account from a different device, so many security system and I ask why do they have to set up all this security system now I see why it's a good thing.

Scams are very rampant now so we have to be careful with how we interact with people online and always verify any link we are about to click. Scammers are always waiting for the slightest mistakes so we can't afford to be caught off guard.

Also it's very difficult for people who live private life to be a target, being to active on social media and sharing your problems there can lead to being a victim so we should be very careful with whatever information we share.

[I_Anime]

I don’t know how this scams works but I have come across many users on X tagging the support of a service they need to resolve something on, I never imagined that scammers will take advantage of that as you’ve explained in this your post. Although, I’m also not too surprised because scammers can go into any length to always want to win over their victims easily and make everything look non-suspicious.

We should always try not to act too fast in desperation when we’re having difficulty with what requires a customer support of a service we’re using to fix, especially when it involves finances. We should always be careful and look out for red flags in whatever we do even when we’re already engaging with one. And the best way is to always have them contact us on their platforms and not out of their platforms, so it’s important not to escalate our problems to the public in order not to get feast on by scammers out there.

Ofc they can well they have already know that you are desperate and you making it obvious is just luring yourself to them, like a fish playing with a fishing hook . And he was not that experienced when come to things like this , but after experiencing this event he had to start making research about things like this so that he won’t fall as victim for such again

[promise444c5]

Didn’t get the whole  point clearly though but if it’s what i’m thinking i.e  phone switched of not because of low power then that wasn’t a phishing  but rather a malware was downloaded and installed or updated an existing an existing application before hijacking the entire the device.
Hence, if you meant  he only inputted some sensitive details on the site or wherever the link traces to then his phoned died due two a low battery health or he completely switched it off before the disaster then that would be a  phishing scam.