| Dear friends, I run an online flowers and gifts delivery site www.clickhubli.com since 2001. I have similar sites like clickhubli.com which deliver flowers and gifts all over I take orders through payment gateway provided by a company called CCNOW based in We received 3 orders in the month of August and September 2008. All the 3 orders were placed by Mr.Reji Abraham ,6439,Market Street, Upper Darby, PA 19082,ph no : 0091 9815851068. All the 3 orders were placed for delivery to Ms.Komal Goel, HOUSE NO.28/1,U BLOCK,DLF PHASE, GURGAON, HARYANA 122001 We delivered following mobile handsets to her The details are:
So we did not get any payment for the 3 orders. After the chargeback also, the same fake orders were coming on the site. This time we received 2 orders which were for mobile handsets. One of the order had come from the same e-mail ID : mannats_bf@yahoo.co.in So I got a doubt that somebody is placing order from I traced the i/p address of the computers from where I received the orders and I got confirmation that the orders have come from Then I gave FIR against the unknown person to Hubli police station. Hubli-Dharwad police commissioner Mr.Shivakumar did a great help by taking immediate action and sent police to I had given a empty parcel to the police and told them that they have to go as a courier person. Meanwhile I called the recipient Sahil Sharma and told that he will receive the mobile today. I requested him to receive it himself but he refused to do so and sent his friend. Still police could manage to catch the criminal Sahil Sharma from The further story is as follows:
Chandigarh, Jan 9 (IANS) A 20-year-old student has been arrested on the charge of using credit cards of other people for online shopping, a police officer said here Friday. The student of hotel management, Sahil Sharma, is the son of a senior Haryana government official. His mother is a leading architect there. Sahil was arrested late Thursday evening after a joint operation was launched by the cyber crime investigation cell of 'Sahil Sharma used credit card numbers of people staying in the He said Sahil ordered three mobile phones worth Rs.150,000 from a Karnataka-based online portal of gift deliveries clickhubli.com. Sahil, who was in a Gurgaon hotel in August 2008, allegedly wrote in an e-mail that he was Reji Abraham, a resident of the But when the amount was deducted from the account of real Abraham, he filed a complaint with the company saying that he never placed any order. Enthused by his success, Sahil again placed orders with the same portal in the name of He gave the addresses of his college and home for the delivery of ordered mobile phones. 'We sent a decoy courier boy to make a delivery at Sahil's residence in Sector 23 and caught him red-handed while accepting the parcel,' Singh said. The owner of the portal had approached the Karnataka police Dec 31, which laid the trap jointly with Sahil worked for an international call centre in 2006 where he used to sell mobile phones to international customers and note their credit card numbers for the company's record. From there he managed to get these credit card numbers for fraudulent use, http://in.news.yahoo.com/43/20090109/982/tsc-student-arrested-in-chandigarh-for-o.html http://news.webindia123.com/news/Articles/World/20090109/1148148.html Thanks, Regards, Deepali |
Saturday, January 17, 2009
Fw: [HubliCity] Cybercrime happened on my site
----- Original Message -----
From: DEEPALI GOTADKE
Sent: Saturday, January 17, 2009 8:53 AM
Subject: Cybercrime happened on my site
Wednesday, December 26, 2007
Card crooks tap into data wires
First, it was skimmers. Now, credit card crooks in Kolkata may be getting more tech savvy, using wire-tapping gadgets to cash in on unsuspecting card users.
It's a new cause of worry for city police and CID. Wire-tapping is a complicated scheme and much more difficult to track down. It's a technical maze that involves telephone wires, receiving-terminals and a cable line parallel with telephone cables to copy the card details when it is swiped for a transaction.
The first time that the city police got an inkling of fake credit card rackets in Kolkata was when three Bangladeshis were arrested for using a card whose owner was in Singapore. Another fake card was seized in Burrabazar which was in use in New Zealand. Police still have no clue to how this card was copied.
Wire-tapping is the most likely method, they now say. Though they have not identified a racket as yet, cyber sleuths are sure the card racketeers are running a hi-tech operation in the city. Their suspicions were strengthened when a private bank recently held a workshop for CID to discuss fraud techniques.
"We haven't got any case where wire-tapping was used to dupe somebody but we are sure the racketeers are out there. We are trying to find the right technique to detect such crimes and also adopting safe-guard measures," said a senior CID officer.
Wiretapping works in three phases. The first phase involves tapping into the wires of the main server to capture card data as it is processed for a legitimate transaction. The next step is to transfer the encoded data to another server, at the fraudster's end, where it is decoded. In the last phase, the data is used to produce counterfeit cards. The technology is definitely more complicated than a skimmer - a gadget which copies the details of a card from a measured distance. In advanced countries, encrypted cables are installed to prevent telephone wire tapping but awareness is low in India.
"The cable linking the electronic data capturing machine (EDC) and the distribution point box is a very sensitive area which is targeted by the racketeers. When the card is swiped on the EDC, the machine records the financial data in the card's magnetic strip and feeds it to the DP box, from where it moves to the main server of the telephone service provider and is finally transferred to the servers of banks where the transaction is recorded. The hackers target the area between the EDC and the DP box, tap into the wires, steal data and send it to another server," said an anti-fraud officer of a private bank.
Police officers say it is difficult to trace such rackets. "For the first phase, the fraudsters need only a map of the telephone wiring, a receiving terminal and cables matching the ones used by the telephone service provider. These are not very difficult to manage and anybody who has a flair for technology can use it to store the data. High-end technology comes in the next level," said an officer.
Police suspect card fraudsters in Kolkata could be using the technology to copy the data and send it to other cities in India and abroad. They have a good reason to suspect this. In the last one year, such units have been busted in Delhi, Jaipur and Hyderabad. "We heard about it and are looking for effective measures to prevent wire-tapping," said Jawed Shamim, deputy commissioner, detective department. Kolkata Police could also take tips from south-east Asian countries like Thailand and Philippines, where such rackets are active and where law enforcement agencies have more experience in handling such crimes.
It's a new cause of worry for city police and CID. Wire-tapping is a complicated scheme and much more difficult to track down. It's a technical maze that involves telephone wires, receiving-terminals and a cable line parallel with telephone cables to copy the card details when it is swiped for a transaction.
The first time that the city police got an inkling of fake credit card rackets in Kolkata was when three Bangladeshis were arrested for using a card whose owner was in Singapore. Another fake card was seized in Burrabazar which was in use in New Zealand. Police still have no clue to how this card was copied.
Wire-tapping is the most likely method, they now say. Though they have not identified a racket as yet, cyber sleuths are sure the card racketeers are running a hi-tech operation in the city. Their suspicions were strengthened when a private bank recently held a workshop for CID to discuss fraud techniques.
"We haven't got any case where wire-tapping was used to dupe somebody but we are sure the racketeers are out there. We are trying to find the right technique to detect such crimes and also adopting safe-guard measures," said a senior CID officer.
Wiretapping works in three phases. The first phase involves tapping into the wires of the main server to capture card data as it is processed for a legitimate transaction. The next step is to transfer the encoded data to another server, at the fraudster's end, where it is decoded. In the last phase, the data is used to produce counterfeit cards. The technology is definitely more complicated than a skimmer - a gadget which copies the details of a card from a measured distance. In advanced countries, encrypted cables are installed to prevent telephone wire tapping but awareness is low in India.
"The cable linking the electronic data capturing machine (EDC) and the distribution point box is a very sensitive area which is targeted by the racketeers. When the card is swiped on the EDC, the machine records the financial data in the card's magnetic strip and feeds it to the DP box, from where it moves to the main server of the telephone service provider and is finally transferred to the servers of banks where the transaction is recorded. The hackers target the area between the EDC and the DP box, tap into the wires, steal data and send it to another server," said an anti-fraud officer of a private bank.
Police officers say it is difficult to trace such rackets. "For the first phase, the fraudsters need only a map of the telephone wiring, a receiving terminal and cables matching the ones used by the telephone service provider. These are not very difficult to manage and anybody who has a flair for technology can use it to store the data. High-end technology comes in the next level," said an officer.
Police suspect card fraudsters in Kolkata could be using the technology to copy the data and send it to other cities in India and abroad. They have a good reason to suspect this. In the last one year, such units have been busted in Delhi, Jaipur and Hyderabad. "We heard about it and are looking for effective measures to prevent wire-tapping," said Jawed Shamim, deputy commissioner, detective department. Kolkata Police could also take tips from south-east Asian countries like Thailand and Philippines, where such rackets are active and where law enforcement agencies have more experience in handling such crimes.
SOURCE TOI
Friday, November 2, 2007
Fw: PIN NUMBER REVERSAL
----- Original Message -----
From: Gayatri Rai
To: Gayatri Rai
Sent: Friday, November 02, 2007 16:12
Subject: PIN NUMBER REVERSAL
For
<>PIN NUMBER REVERSAL (GOOD TO KNOW)
If you should ever be forced by a robber to withdraw money from an ATM machine, you can notify the police by entering your Pin # in reverse.
For example if your pin number is 1234 then you would put in 4321. The ATM recognizes <>that your pin number is backwards from the ATM card you placed in the machine.
The machine will still give you the money you requested, but unknown to the robber, the police will be immediately dispatched to help you.
This information was recently broadcasted on TV and it states that it is seldom used because people don't know it exists.
Regrds
Gayatri
Sunday, September 23, 2007
Doctor conned - Fake Online Lottery
A city doctor fell prey to an online lottery fraud and lost Rs 30,157 to seven foreign conmen. The conmen had lured Dr Vadiraja B N by sending a mail stating he had won $5 lakh in lottery.
The accused are Ayodam, Dr Tony Cheung, Clement Wang, Ella Doris, Dr Young Chu, Tschipanda Mande and Mashun Khamrag. On April 17, 2007, Dr Vadiraja was informed about the prize money by a mail from Ayodam, who claimed to be the vice-president of International Promotions, Japan Jumbo Draw, Hong Kong.
Later, the doctor was told that the lottery money had been transferred to commerce bank of Philippines for onward transfer to his account in Bangalore. He was asked to remit $750 to the bank account of Tschipanda.
The doctor followed their instructions promptly. He grew suspicious when he was again asked to remit $1,650. After enquiry, he realised the lottery was fake.
The accused are Ayodam, Dr Tony Cheung, Clement Wang, Ella Doris, Dr Young Chu, Tschipanda Mande and Mashun Khamrag. On April 17, 2007, Dr Vadiraja was informed about the prize money by a mail from Ayodam, who claimed to be the vice-president of International Promotions, Japan Jumbo Draw, Hong Kong.
Later, the doctor was told that the lottery money had been transferred to commerce bank of Philippines for onward transfer to his account in Bangalore. He was asked to remit $750 to the bank account of Tschipanda.
The doctor followed their instructions promptly. He grew suspicious when he was again asked to remit $1,650. After enquiry, he realised the lottery was fake.
Sunday, September 16, 2007
Fw: [HubliCity] Beware Of Cash Deposits at ATM
----- Original Message -----
From: Sunil Nalavade
Sent: Sunday, September 16, 2007 10:15 AM
Subject: Beware Of Cash Deposits at ATM
One of my colleague who deposited Cash of Rs,15,000/- at UTI ATM , Kalburgi Building, Deshpande Nagar Br. lost Rs. 2500/- as the bank called him and informed him the next day that, the deposit was 12500/- and not Rs.15000/- My colleague who had deposited Rs.500 x 29 and Rs. 100 x 5 Notes, when checked the envelope at the bank, he found Rs.500 x 5 notes short. The bank informed him that they cannot do anything about it.
So guys beware, deposits at ATM's are not safe. Unless they have ATM's with scanners, and I think the govt should not allow cash deposits with non scanner ATM's as the culprit cannot be caught.
Regards
Sunil Nalavade
Sunday, September 9, 2007
Card fraud: How does it work?
Often heard / read horror stories about credit card frauds. How people end up footing huge shopping bills of items they actually never purchase.
And now, with ecom taking off in the country, the realm of credit card criminals has expanded further. The credit card nightmares are increasingly making their way to the virtual space.
In fact, according to Delhi Police, online credit card fraud has sharply increased over the last two years.
And now, with ecom taking off in the country, the realm of credit card criminals has expanded further. The credit card nightmares are increasingly making their way to the virtual space.
In fact, according to Delhi Police, online credit card fraud has sharply increased over the last two years.
Here's how these fraudsters actually go about accomplishing their murky tasks and, also, how as credit card owners you can get better of them.
Unscrupulously yours
The fraud may often start from the restaurant or the petrol pump we often frequent. As the first step for these fraudsters is to recruit an unscrupulous bartender, waiter or a shop assistant to steal information from customers' credit or debit cards.
Skimming to perfection
These recruits are given a pocket-size device with a scanning slot which looks like a pager and can be even worn on a belt. This contraption is called a skimmer.
As the customer pays by the card, these unscrupulous employees quietly swipe the card before it actually reaches the pay counter. This copies the information from the magnetic tape.
As the customer pays by the card, these unscrupulous employees quietly swipe the card before it actually reaches the pay counter. This copies the information from the magnetic tape.
Cloning perils
The card details are copied on to counterfeit cards, complete with security holograms markings. Now the splurging starts at customer's expense.
However, the poor customer remains completely unaware that his card has been cloned until he notices huge bills or he gets a query from his credit card company about his sudden unusual spending.
However, the poor customer remains completely unaware that his card has been cloned until he notices huge bills or he gets a query from his credit card company about his sudden unusual spending.
Scared? But remember, safety saves
Always give your phone number to the company for verification of suspicious transactions.
Notify the bank immediately whenever the monthly statement doesn't arrive on time.
Notify the bank immediately whenever the monthly statement doesn't arrive on time.
Be on your guard
Be wary of any phone call or email seeking details of your account.
Always remember to shred your credit card statements after checking the transactions.
Always remember to shred your credit card statements after checking the transactions.
Beware those photocopies!
Remember, its suicidal to give the photocopies of both sides of your credit card to anyone. The last three digits of the account number printed at the back of the credit card are required for the completion of any online transaction.
The Card Security Code (CSC), sometimes called Card Verification Value or Code (CVV or CVC), is a security feature for credit or debit card transactions, giving increased protection against credit card fraud. There are actually two security codes. The first code, called CVC1 or CVV1, is encoded on the magnetic strip of the card and is used for transactions 'done in person'. The second code, and the most cited, is CVV2 or CVC2. This CSC is often required by merchants to secure 'card nor present' transactions (those done via Internet, fax, phone or by email)
The Card Security Code (CSC), sometimes called Card Verification Value or Code (CVV or CVC), is a security feature for credit or debit card transactions, giving increased protection against credit card fraud. There are actually two security codes. The first code, called CVC1 or CVV1, is encoded on the magnetic strip of the card and is used for transactions 'done in person'. The second code, and the most cited, is CVV2 or CVC2. This CSC is often required by merchants to secure 'card nor present' transactions (those done via Internet, fax, phone or by email)
Go by 'https' NOT 'http'
Remember genuine websites use encryption technologies. Any website using encryption will have https instead of http.
Also, while traveling, always be careful about using credit cards at Internet cafes or anywhere with a wireless connection.
Also, while traveling, always be careful about using credit cards at Internet cafes or anywhere with a wireless connection.
Source : IndiaTimes
Online credit card fraud: A growing reality
In India, credit card fraud is mostly limited to the physical space. Online con jobs make up just about 1% of the total numbers here, unlike 40% in the developed world.
But, as consumers graduate to the shop-easy internet and pay with their cards, instances of fraud are bound to rise. As J Y Umranikar, additional DG, state CID, says, "(While) we don't have statistics, as access to the web increases, reported cases of card fraud will rise 20-30 % every year. And this is only a surmise based on past experience.'' Umranikar insists that in online transactions, contracts are one-sided and the customer is always held responsible in case of fraud.
Phishing, where a consumer gets a fictitious email from a fake site or blog seeking sensitive card information, is a commonly-used defrauding mechanism. To top it, "people are careless in offering their card details,'' he adds.
While consumer organisations TOI spoke to had little information about online fraud, card companies say it is increasing in e-ticketing, eshopping and the service sectors, where no physical delivery of goods is involved. Shockingly, B Madhivanan, general manager at ICICI Bank, informs that 60% of online card fraud occurs only while buying an air ticket. He says that one way out is to insist on customer identity at the time of actually boarding a flight. Indian Airlines, for instance, asks for 'a' particular proof of identity, which a consumer has mentioned in the online form, such as a driving licence or a passport. So till ID becomes mandatory across all airlines, a consumer could as well be prepared to notice an inflated card statement despite going strictly by the rulebook.
In April this year, a 26-year-old Mumbai executive keyed in her credit card number and the three-digit security code on the e-booking site of an airline. She bought a ticket for Bangalore. In July, she was shocked to find a Rs 20,000 additional credit drawn from her account. "Two tickets from the same airline were booked on two different days in June using my card,'' she says. The first was a Dwarka-Mumbai ticket for Rs 6,000, and the other, a Delhi-Dubai one for Rs 14,000. She did not get a response from her card company till August. "Then I approached the police to file an FIR. But they told me they did not know what a credit card was.'' Exasperated, she went to the cybercrime cell, which in turn asked her to first lodge an FIR with the police.
She got a cybercrime officer to speak to the police and finally got her complaint registered. On receiving a complaint, card companies say, a consumer is given a temporary credit that matches the disputed amount, and a case is resolved in a maximum of 60 days. The Mumbai executive , though, has been waiting for almost three months now. For safer transactions, an advanced card such as Verified by Visa (VbV) and Mastercard SecureCode comes in handy. Here, a consumer requires a password during a transaction to validate his identity.
But, as consumers graduate to the shop-easy internet and pay with their cards, instances of fraud are bound to rise. As J Y Umranikar, additional DG, state CID, says, "(While) we don't have statistics, as access to the web increases, reported cases of card fraud will rise 20-30 % every year. And this is only a surmise based on past experience.'' Umranikar insists that in online transactions, contracts are one-sided and the customer is always held responsible in case of fraud.
Phishing, where a consumer gets a fictitious email from a fake site or blog seeking sensitive card information, is a commonly-used defrauding mechanism. To top it, "people are careless in offering their card details,'' he adds.
| For safer online transactions * Use a secure web browser, look for an 's' after the 'http' in the web page address. * Keep your password secret. * Never send payment information via email. * Reputable merchant sites use encryption technologies to protect private data from being accessed by others during a transaction. * Monitor your monthly statements, especially after an overseas trip. * Check transactions, even the small ones, because criminals test stolen accounts by buying inexpensive items. * Investigate suspicious activity to prevent fraud * Notify your financial institution of suspicious email activity. * Only open and respond to emails that are from somebody you know. |
While consumer organisations TOI spoke to had little information about online fraud, card companies say it is increasing in e-ticketing, eshopping and the service sectors, where no physical delivery of goods is involved. Shockingly, B Madhivanan, general manager at ICICI Bank, informs that 60% of online card fraud occurs only while buying an air ticket. He says that one way out is to insist on customer identity at the time of actually boarding a flight. Indian Airlines, for instance, asks for 'a' particular proof of identity, which a consumer has mentioned in the online form, such as a driving licence or a passport. So till ID becomes mandatory across all airlines, a consumer could as well be prepared to notice an inflated card statement despite going strictly by the rulebook.
In April this year, a 26-year-old Mumbai executive keyed in her credit card number and the three-digit security code on the e-booking site of an airline. She bought a ticket for Bangalore. In July, she was shocked to find a Rs 20,000 additional credit drawn from her account. "Two tickets from the same airline were booked on two different days in June using my card,'' she says. The first was a Dwarka-Mumbai ticket for Rs 6,000, and the other, a Delhi-Dubai one for Rs 14,000. She did not get a response from her card company till August. "Then I approached the police to file an FIR. But they told me they did not know what a credit card was.'' Exasperated, she went to the cybercrime cell, which in turn asked her to first lodge an FIR with the police.
She got a cybercrime officer to speak to the police and finally got her complaint registered. On receiving a complaint, card companies say, a consumer is given a temporary credit that matches the disputed amount, and a case is resolved in a maximum of 60 days. The Mumbai executive , though, has been waiting for almost three months now. For safer transactions, an advanced card such as Verified by Visa (VbV) and Mastercard SecureCode comes in handy. Here, a consumer requires a password during a transaction to validate his identity.
Source : India Times
Subscribe to:
Posts (Atom)
