Hackers Target Kuwaiti Shopping Websites, Draining Bank Accounts of Victims

Kuwaiti banks report a rise in bank card hacking through local shopping sites. Victims unknowingly authorize fraudulent transactions after interacting with compromised websites. The banks claim customers share responsibility due to OTP sharing, while victims argue they were not informed of website security issues. Continuous consumer vigilance and securing online purchases are critical.
In a troubling trend, Kuwaiti banks have recorded increasing complaints from customers who have fallen prey to a sophisticated form of bank card hacking. This technique takes advantage of genuine local shopping websites, enabling criminals to secretly withdraw money from victims’ accounts through unauthorized transactions, often initiated from abroad.
The fraudulent scheme specifically targets patrons of well-known Kuwaiti shopping portals. Victims report completing legitimate transactions on these sites, only to find, days later, that their accounts have been depleted due to withdrawals originating from locations such as Italy, all while the cardholders remain in Kuwait.
The scam typically unfolds as follows: Customers attempt contactless payments on compromised websites and are informed of a failed transaction requiring them to re-enter their card information. Subsequently, they discover unauthorized withdrawals from their accounts, frequently for foreign purchases. This exploitation of local e-commerce platforms allows criminals to replicate card data stored on users’ phones, facilitating repeated withdrawals until the card’s limit is reached.
Banking officials contend that consumers share responsibility for these breaches, asserting that customers compromised their security by divulging their one-time passwords (OTPs). They argue that, due to valid OTP usage, banks and the Central Bank of Kuwait are neither mandated to indemnify the victims nor recover stolen funds. Conversely, victims maintain that they adhered to all necessary protocols for contactless payments and were unaware of the compromise of the websites they utilized.
Victims further highlight that some websites inaccurately marketed their support for various payment services such as Apple Pay, Google Pay, and Samsung Pay, which were not actually offered. This misrepresentation suggests that these sites were infected with harmful code, relieving customers of blame in the breaches.
As this problem persists, consumers must be vigilant and take proactive steps to secure their financial information when engaging in online transactions. It is crucial to ensure that the websites utilized are secure and to monitor account activity regularly to detect any unauthorized transactions promptly.
In conclusion, the rise of sophisticated bank card hacking in Kuwait presents a significant threat to customers utilizing local shopping websites. Fraudsters exploit vulnerabilities to initiate unauthorized withdrawals, leading to considerable financial loss. While banking authorities argue that victims bear responsibility for sharing OTPs, customers insist that they complied with all protocols. Continued vigilance and the adoption of secure transaction practices are essential for consumers to protect their financial assets in this evolving threat landscape.
Original Source: www.arabtimesonline.com