Are debit cards really scary? We asked someone who has been a victim of fraudulent use

It's been a while since I last wrote a blog post,Morita!

Wow, there's an unprecedentedsauna boom.The drama "Sauna Road 2021"just aired its final episode the other day, but I think this movement will only continue to expand. I"heat wave masters" (people who use towels to blow hot air inside saunas)wouldn't be surprised if a drama focusing on

I was thinking of writing a blog post about saunas when I learned that a friend of minea victim of a crime. As someone who works in information security, I thought this was a serious matter, so I asked my friend for his cooperation and conducted an interview to gather information.

To raise awareness, I will state the conclusion first:

・Check the debit card function of your cash card and suspend it if it is not needed

Please implement this!

That's all I have to say, but if you'd like, please read on

Debit card fraud?

----"to prevent any more victims like yourself." What should I call you during this interview?

????　ShibaharaIt's fine to just stay asShibahara's website)

----Really?! I was thinking it might be more realistic if you hid the names or something..

Shibahara (hereinafter S)　: Well, do as you please.

----Now, let's talk about Mr. S! I was surprised when I saw your Facebook timeline, but what kind of damage did you actually suffer?

S　debit cardI was caught up inSeveral unauthorized withdrawals were made from my bank account...

----Wow, that's scary

S　On Friday night, September 13th, I received three consecutive emails from a certain online bank notifying me of my transactions. I was asleep because it was the middle of the night, so I didn't notice them at the time.

The next morning, I received a call from an unknown number. It turned out to be from a certain online bank. I discovered that my debit card information had been used fraudulently

According to the operator on the phone,the money was used to top up a certain e-money service somewhere.

As a result,unusable to prevent further damagehas been deactivated and rendered

--So that means you can no longer withdraw money?

S:　That's right. I didn't even have a bank account. Luckily, it wasn't my main account, and the amount of the loss wasn't high, so it didn't affect my life.

.The thought of losing all of that money in my main account is truly terrifying

----How did a certain online bank respond to this?

S　, a certain online bank, said that this is all they can do for now. They said they can't do anything until they receive the payment confirmation data from the electronic money provider. Next, I called the electronic money provider, but they said they can't do anything until they receive a request from the online bank, so I'ma difficult position.

Five days later, I was told that the confirmed data had arrived at a certain online bank and that they would send me the form for requesting an investigation into fraudulent use. They said that if I described the details of the damage and submitted it, they would conduct an investigation. Another five days later, the form finally arrived.At this point, 10 days had passed since the incident occurred.

I also filed a report with the nearest police station.other reports of similar incidents on the same day, there were apparentlyI was surprised to learn that debit card fraudis such a common crime.

----What happened after that?

The initial　procedures are complete, and the investigation is still ongoing (the interview was conducted on September 24th). I wonder how long it will take. They say the damage won't spread, but I'm worried every day.

I didn't have much of an appetite for lunch today, and300 grams of steakI only managed to eat

----(Well, that's enough.)

I　tooscared to ask for a replacement debit card.

Can even those who are knowledgeable about computer security be victims?

----Mr. Sover 30 years of programming experienceandworks in a wide range of computer-related fieldssovery knowledgeable about security. Plus,very cautious person in general.

Yes　, I am very careful about security because of my job.two-factor authenticationandmulti-factor authenticationI always use any available security measures,unique and different passwords for everythingI use

----So even people who are knowledgeable about this can still become victims

I　hate to brag, but I'm quite cautious, soI've never shown this debit card to anyone,and I've only taken it outside once, when I was depositing money into an ATM at a convenience store.

Of course,3D SecureI had

--What does the actual method look like?

I　don't really understand. According to an operator at a certain online bank,that authentication can be completed if you have the debit card number, name, and expiration date. However, as I mentioned earlier, I've never shown it to anyone, and I only took it out once to deposit money at a convenience store ATM. If it had been skimmed there, it would have been a much bigger problem in the neighborhood, and the police would have mentioned it too.

However, thinking about it again, it is strange that there were similar complaints on the same day

I also consulted with a colleague who is knowledgeable about security, but since there are multiple keys required for authentication, a random attack would be nearly impossible, so I can't think of a way to do it

If there had been any leak of internal information, it would have been a hot topic

--Have you taken this opportunity to gather information about debit card fraud?

Twitter　and the internet. It seems that some young people who can't use credit cards are using debit cards. And it appears that some of them have fallen victim to large-scale fraudulent use.

Unlike credit cards, debit cards are directly linked to your bank account, making you vulnerable to fraud. This– the immediate impact on your daily lifeis what's frighteningEven if you still have funds in your account, your debit card can be suspended, preventing you from withdrawing money.

With credit cards, the payment period is long, and if the use is deemed fraudulent, the payment will not be deducted at all

I think this difference is big

--Are there any self-defense measures?

probablydon't even realize that their ATM card has a debit card function. These days, it's often included as standard when opening an account. I recommend everyone check theirs.If you don't need it, I suggest you disable the debit card function immediately.

This incident has made me think about security again. It's sad, but I've realized that we must assume there are malicious people out there. I will continue with the security measures I've already implemented, but I will benot to own unnecessary cards or accountseven more careful

Maybe that's all we can do

----Indeed, not owning unnecessary things is the best self-defense measure. I will also try to organize unnecessary cards and accounts. Thank you for today!!

summary

There are various types of fraudulent use, but the most frightening of all is when money is withdrawn directly from a bank account

again,

・Check the debit card function of your cash card and suspend it if it is not needed

I hope everyone will implement this

From next time onwards, I'll be writing a blog about saunas!!