Carding is a kind of Fraud based on unlawfully retrieving data from bank cards. Once this information is collected, the cybercriminals reproduce it in virtual cards to make online purchases, he warned BBVA’s users.
According to the bank, previous attacks by cybercriminals to subtract data from cards This can be:
- Phishing, smishing, and vishing are “Social engineering” techniques that consist of manipulating and deceiving people. Cybercriminals use malicious links in emails, SMS messages, or phone calls to impersonate official bodies, companies, or financial institutions with the aim of obtaining private information from victims or infecting their devices with malware.
- Overfly: Technique based on the use of devices with NFC wireless technology and applications capable of reading information from contactless cards (over very short distances, less than 10 cm).
- Collection of data from websites that have suffered a security breach or information leak.
As soon as the cybercriminals Make sure the bank details received from the card are valid, and then check the available funds on the card. They start with low-value purchases with a dual objective: to prevent the victim from noticing them and to verify that the information on the card is correct. They then buy higher-quality products.
According to the Internet User Security Office (OSI) in Spain, this type of fraud-on-card offense increases at times when more products are being bought online, such as during Christmas, summer sales, etc. Cybercriminals take advantage of these times to try to hide fraudulent allegations in the high volume of purchases made by users.
Tips to protect yourself from carding
- Do not provide bank details on websites you have accessed via a link contained in an email or text message that you find suspicious. Also, do not download any attachments with such communications. It is always preferable to access a website by typing the address into the browser rather than through links.
- If you make an online purchase, do so at trusted electronics stores, and make sure the web address is the official address.
- Avoid entering your credentials for online banking or other services when your device is connected to a public Wi-Fi network. If necessary, use a VPN (Virtual Private Network) so that the information is transmitted in encrypted form.
- Carry out regular checks on your banking transactions.
- If possible, use a prepaid or virtual card.
- With the BBVA app, you can block online payments on your cards. If it gives you more peace of mind, go to your “Global Position”, select your card, and click “Restrict Operations” to ban online purchases when you don’t need to use your card to do so.
- Always keep the browser and applications on your devices up-to-date.
- Only download apps from official markets, such as Google Play or the App Store, or from the developer’s official website.
