SMS hacking received mobile + credit card Solved

Question

Hello,

Two weeks ago, my credit card was hacked. I had a debit of 1000 euros on Sony and another of over 600 euros on the Boulanger website.

My bank activated its insurance, but they refused to reimburse me because they claimed that my bank had sent a security code to my mobile, which was correctly entered during the validation of the purchases... I now have to prove that I never received those messages...

However, it’s impossible; I never received those messages... and it is impossible for anyone close to me to have stolen that information... So I've started to think about who could have my bank details and my mobile number, and only one company is possible: Sony.

1) Like many, we have a PS3 (Sony) on which we registered our credit card.

2) My phone is from Sony, and my operator sent it to Sony’s service center for 15 days (one day after I got it back, I got hacked).

3) The first fraudulent debit was made on the Sony website.

4) A police officer confirmed to me that the person picked up one of these packages directly at the store in the north (while I live in Var), and the Sony service center where my phone was sent is located in the north...

I think that when I submitted my phone to Sony's service center, a dishonest employee took advantage of the situation to install malicious software on my phone. Once my card was reactivated, he could place orders and wait for the SMS with the security code that he received directly on his phone...

I have looked around and managed to find this software https://fr.softonic.com/android, which supports my theory...

How can I find this software on my phone to prove my claims? It must be visible somewhere, like on PCs when we want to uninstall software...

Does anyone know if this type of software (with additional paid options) sends a message directly to the fraudster’s phone without going through my number, or does it first send it to my number and then to the fraudster's?

I must prove my claims at all costs, as my bank refuses to reimburse me, and I can’t repay such a sum...

boou83 · Accepted Answer

Hello everyone

I got refunded the 1750 euros today after more than 2 months of fighting with my bank... it was long, but I finally succeeded...

For those who face the same issue as me regarding refunds for online purchases because the 3D secure code was used, here are the tips I can give you:

1) Go to the bank to file a complaint and to the police station
2) The bank either refunds you or refuses, as was my case (due to the 3D secure SMS)
3) Call your operator to see if anything unusual happened on your line at the time of the fraud...

4) Send a letter to the headquarters and the mediator of your bank contesting their response, reminding them of their obligations and your rights: write your fraud story and end by specifying:

Despite the terms of articles L132.2 and following in the monetary and financial code, you seem to not recognize the fraud and refuse to apply the legislative directives, on the grounds that you have implemented all regulatory security measures to prevent fraud. You are aware that malicious "specialists" can quickly find security system flaws, and I ask you to provide evidence of your claims
I remind you that in the event of fraudulent use, the liability of the cardholder is not engaged, and you must respect the one-month deadline for me to be refunded (art L132-6 of the monetary and financial code)
In the absence of a favorable response, I will turn to the judiciary to take legal action to obtain compensation.

5) If the bank still refuses to respond positively to your refund, send a formal notice demanding a response within 48 hours; you must send it by registered mail or go to your agency with a copy that you will keep, which they must sign and stamp as proof...

6) If there is no favorable response, you will have to go to court...

To help you with your process, you can contact associations such as the AFUB, which specializes in disputes with banks; they even provide model letters to prompt banks to react... http://www.afub.org/modele_lettre.php Banks tend to listen to us more when they know we are advised by specialists

In short, the fact that my phone line was hacked does not exempt the bank from refunding; they are obliged to refund you within a maximum one-month period once the debits are disputed
To avoid refunding you, it is up to them to prove that the debits were indeed made by you... the fact that your line was hacked does not exempt them from refunding you; you are still a victim of fraud...

I hope this helps if some find themselves in the same situation as me... don't let it happen to you, and fight back...

theo007 · Answer

What model is your phone?

Your story is impressive and scary to see. I'm wholeheartedly with you, and I'm going to try to help you, but right now you really need a police investigation because it's going to be hard to sort all this out on your own.

boou83 · Answer

Thank you for your support, my phone is a Sony Xperia Go.

I had filed a complaint right after the fraud, and the officer who received me said that the bank was the victim, not me.
Basically, since the bank wasn’t making any effort to file a complaint, they wouldn't bother to do any further investigation (essentially, you can hack credit cards at will, and no one cares; the fraudster will only be worried if he gets caught at home...)
Anyway, at the time, I didn’t protest more than that as long as they refunded me... but now that my bank's insurance refuses to pay me, it’s different...

My bank asked me to go back and file another complaint so that they could give me the IP address that the fraudster used to make these purchases, and then I’d have to give them the papers that the police will provide me...

I'm a bit worried that the bank will try to cover themselves rather than help me; they know very well that I have no knowledge to defend myself... For example, I initially told them that whether the person was a fraudster or not, I didn’t care because, originally, I have an authorized overdraft of 150 euros and the fraudster made a withdrawal of more than 600 and 1000 euros when I was at -40 euros in my account, so these purchases should have been refused. The banker replied that with a Mastercard, you can go over the authorized overdraft... and that I couldn't get reimbursed on that basis...

That’s why I’m trying to find evidence to cover my back just in case... I don’t know who I can really trust...

boou83 · Answer

Hello
so new twist, I went as my bank asked me to see the gendarmerie so they could trace the IP address of the guy who hacked my account
the gendarmerie told me that they had nothing else to do than the first paper they gave me, that the bank should refund me. I told them about the security code that was used and that the bank refused because of that, and they replied that it wasn’t normal, that they should refund us, and that it was up to them, not me, to resolve this issue...

I went back to the bank to tell them, and my banker responded that the gendarmes aren't bankers and that I wouldn't get any refund from them until I proved that I didn’t make those purchases

I'm lost between my banker and the gendarmerie who are throwing blame at each other and nothing is progressing. In the meantime, no one wants to do anything, no steps have been taken since the bank's insurance refused... I don’t know what to do to get someone to take action...

can anyone help me? I don’t know anything about all these procedures and no one is doing anything as a result.

theo007 · Answer

Yes, it's very complex. I suggest you look up legal texts online or consult a lawyer directly for advice (without necessarily buying their services, just advice) or even see if there's anyone in your family studying law?

As for your phone, I don't think you can hide such an app. Since I'm on iPhone, I can't help much. Go through all your apps and also check the settings. On iPhone, you can install "profiles," I think, I don't remember the name, which allow you to modify certain things on the phone. See if you notice anything suspicious, go through all the menus even those where you think it can't be that.

Or simply, doesn't your phone have an option to redirect texts?

Search everywhere. If a suspicious program or name is found on your phone, note it. Try buying something online to see if you receive a text. If you don't receive anything, you can even make a purchase in front of your banker.

If you receive a text, then something else has happened than what you suspect.

boou83 · Answer

Hello
I don't have anyone in my circle who practices law, unfortunately... Regarding the software that I believe was installed on my phone to hack it, I can't find it because there are so many things that were already installed, and with the update they did for me at customer service, it seems even more packed with icons whose utility I don't even know (I'm not a pro with phones). How can I tell if it's a Sony or SFR software or a pirate software...

I contacted my phone operator again yesterday, and during our conversation, they told me that the only activity on my line was the activation of my SIM card. I replied that I had never deactivated my SIM card since I became their customer. They told me it was deactivated the day of the fraud at 3 PM and reactivated at 4:40 PM...
So, my hacking story makes more and more sense. Do you know why the fraudsters needed to deactivate and reactivate my line? I asked my operator what it meant when a card was deactivated and who had the authority to do that besides me. She replied, "Sorry, I don't have that information..." It seems strange to me that they don't know who is allowed to activate or deactivate my line and that they also don't know what it entails when a card is deactivated... When I insisted, she just said that they would launch an investigation on my line and that I would be contacted...

lalie3233 · Answer

Hello, I'm shocked by your story :o. I can't really help you, I don't know anything about all this. But do you know someone who is good with computers and software? They might be able to help you. I hope your story gets resolved, and that the hacker will be found.

astuces72 · Answer

hi

what is the connection between the ps3 and your phone?
aren't your credit card details on the phone?

--
----------------------------
It always worked before the breakdown, so this sentence: "It was working well before" shouldn't exist.

boou83 · Answer

I had mentioned our PS3 (Sony) because my bank details are stored on it, and as I said above, my phone is from Sony (a phone I retrieved from Sony's customer service 1 or 2 days before my account was hacked...

As I was saying, the only link is Sony for my phone and my account to be hacked at the same time...

Edit: I have personally never entered my bank details on my phone; I just receive messages from time to time from my bank to let me know how much is in my account or when I make purchases online, they send me this famous secur3d code...

boou83 · Answer

unless we can hack a phone remotely without needing to have it in our hands?

Because otherwise, the only ones who have had it in their hands besides me are my carrier and Sony...
I'm not asserting anything with certainty, but I'm trying to figure out, with my limited knowledge, where this might be coming from since my bank and the police are currently just passing the buck and doing nothing for me...

This disabling and reactivating of the SIM card is also very strange; I wonder why they needed to do that to access my messages on my behalf.

boou83 · Answer

Yes, it's my number that is registered with my bank; otherwise, I wouldn't say that my phone was hacked, that would have been a negligence on the part of the bank...

boou83 · Answer

A contact shared this message with me, saying that there are still plenty of other methods to hack phones, so I should keep investigating...

"To be honest, we're not very surprised by the revelations from Trust Digital, a company specialized in mobile phone security. In a video posted on YouTube, the company demonstrates that a hacker can take control of a smartphone and steal its content simply by sending a text message. In fact, there are two methods

The first principle is as simple as phishing. The text message sent contains a link that the recipient is invited to click on. In fact, this link opens the smartphone's browser and points to a infected executable. This is the entry point for the hacker to access the phone's content, such as the address book or personal documents. The most impressive part, and that's what's surprising, is that this attack called "Midnight Raid Attack" works even if the recipient does not click on the link! In fact, as soon as the text message is received, the phone's browser launches automatically."

So indeed, the fraudster may not have even needed to have my phone in hand to hack my line and receive my texts in my place... the more I move forward in my research, the more scared I get...

If anyone has any other ideas regarding the fraud of which I was a victim, I am open to suggestions
Otherwise, I will keep you updated in case someone experiences the same thing one day...

boou83 · Answer

Hello,
So I sent registered letters to the head office of my bank, to the bank mediator, and to SFR to get written proof of my démarches...

I tried to contact associations to help me, but they all ask for about 30 euros to become a member; if you don't pay this 30 euros, they won't help you... I probably won't be able to pay, that’s why I want them to help me recover my money...
I also went to the town hall, which has a legal advisor who helps for free (good to know); he comes once a month... but with the bad luck I've had, the advisor had health issues on the day he was supposed to come... so I have to wait another month if I want advice from him...

Anyway, I've still made some progress in my research:

I continued to ask questions to my SFR operator, who told me that another SIM card had been activated
I asked how that was possible since it wasn't me who had made these démarches, and the advisor told me that the first idea that came to her mind was that someone had a duplicate SIM card...

They offer a subscription of about 10 euros per month to have two SIM cards with the same phone number... if the other phone is off, all SMS or calls will be directly redirected to the duplicate SIM card

I asked her who they had sent this card to, and she replied that they hadn’t sent anything; that the person must already have a SIM card... that, for example, a friend of mine could basically activate a second duplicate SIM card on my line without me knowing... I don't know how... I asked for more explanations, but she replied that she wasn't sure about anything and that she would do some research and call me back... that was yesterday morning, and I still haven't heard back...

Can someone explain to me how this story of duplicate cards works, please?
How is it activated? How could someone other than me do this? I had never heard of this type of subscription before...

marceta · Answer

Thank you for your very detailed explanation! Something almost the same happened to me - my account was debited by 816 euros after our return from Spain (4 times 100 euros and 4 times 104 euros repeatedly) for the purchase of WKV Prepaid and BUYSTER Paysafecard prepaid cards, and the purchase, like in your case, was validated by a specific code sent via SMS to my mobile number. And the bank refuses to reimburse us!
We immediately blocked the card, filled out the file, and received a response today - NO
So I intend to engage in the fight! If you have any additional advice to give me?

boou83 · Answer

I advise you to send a first letter immediately through the headquarters of your bank directly. Take the letter template from the AFUB website that I mentioned earlier http://www.afub.org/modele_lettre.php so they know that you are going to be assisted in your efforts and that you are not ready to give up... Write a second letter to your bank's mediator (your bank should have given you this contact information...)

Personally, the mediator was useless; he didn’t look into anything, he’s just there to side with the bank and demotivate you... But you still have to send him a similar letter to show that you tried to make yourself heard before escalating the matter...

For the AFUB association, you need a Facebook account; you will send them, in attachment or by mail, the letter you sent to your bank's headquarters and to the mediator, clearly explaining your situation (the AFUB takes time to respond; I believe I waited 2 weeks, so you will need a bit of patience with them, I warn you, but it’s worth it)

This letter could already set things in motion; banks act less cocky when they know we're being helped by associations...

If the response remains unfavorable, you will have to send a formal notice, but I think the AFUB will explain all this to you... and let’s hope the first letter will be enough...

Send everything by registered mail with acknowledgment of receipt and keep a copy with you... (always keep the proof)

Call your operator to find out if a new SIM card was activated or deactivated at that time or anything else

And finally, change all your passwords (email box, ADSL operator, and mobile for more security)

I find it unacceptable that banks try to take advantage of us like that; what do they think? That we will pay for a flawed system they put in place... Even my telephone operator from the fraud service was surprised because he told me that the hacking of the 3D secure SMS was now known to the banks...

I hope they won't make you struggle for too long; don't give up, especially...

marceta · Answer

Thank you very much for your advice! I wrote the letter and I will continue. Problem with my operator Virgin - because I have a blocked account, they cannot (or will not) give me information about my conversations and received messages. They say it's impossible. I will also write to this association...
I have questions - how could this happen - and it's possible that this situation is related to my PlayStation account - I discovered a subscription that I never signed up for... They are charging me 9.99 per month...

cabrinha · Answer

same thing for my partner who had her credit card hacked for €1500 with Free and prepaid card systems... the bank refuses to refund because we supposedly received confirmation SMS on my wife's phone which is false. we will also fight... thank you for your messages that will help us.

boou83 · Answer

Hello,  for Sony, they also have security issues so I advise you not to provide your new credit card details, just like us, buy PlayStation Plus codes in stores...  As for SMS, they usually charge you for an option to get information about received SMS or incoming calls, but it works from the activation of the option... so you won’t be able to know what happened before...  However, you absolutely have the right to know if someone had fun activating or deactivating your SIM card or if a new one has been activated... and pray to get a good advisor because you always have a one in two chance of getting a useless one... and that's with any operator... ;)  To refuse to refund you, the bank must prove that you placed that order... the secure 3D SMS is not reliable enough because phone lines are increasingly hacked... and it is not up to us to suffer the malfunctions of their security service (not so infallible...) That's also why we pay for insurance (included in the deductions for your credit card) and that's also why they themselves are insured...  Finally, if one of your bankers tells you that you need to ask your phone operator for a refund, you should tell them that it's not your responsibility to handle this but their insurance because the legal texts do not state that they must refund victims of bank fraud unless they have their phone line hacked... if your line has been hacked, it doesn’t change anything, you are still a victim of bank fraud...  I hope this will help you deal with the bank's chatter a little better...

agascrap · Answer

Hello,
I just read all your posts, and I feel less alone.
Also a victim of a credit card hacking, with a mobile number diversion.
Let me explain: my bank (Banque Accord) warned me of potentially fraudulent purchases, and I immediately confirmed by blocking the card. I wrote a letter to dispute the transactions that were not mine. Up to that point, no "problems".
The bank's response arrived a (good) month later, stating that a security code had been sent to my mobile phone for the two fraudulent purchases (amounting to 1500€), and they refuse to refund me.
That's when things get complicated... I had indeed noticed that my phone (the device) was not responding around the same time as the credit card fraud. I inquired with Free, and they confirmed that a SIM card was purchased under my line number, from a free terminal paid for with a credit card. In conclusion, Free stated that the security codes for the online purchases made by the fraudster were sent to the phone number linked to my credit card, but not to my device.
Now it’s up to me to prove this situation, through Free invoices, credit card statements, and an employer's certificate regarding my schedule at that specific time....
A second letter (registered) was sent today....
Now we wait....

Vincent · Answer

Hello,
I experienced the same kind of fraud, let me explain. A fraud of €1600 through 9 withdrawals.

My credit card number was used for the fraud, and I had the card in my possession.

The confirmation code was confirmed by my phone number. During one afternoon, the fraudster deactivated my SIM card and then reactivated it later.

On my email account, he replaced my phone number (useful for account security) without changing my password.

Can someone explain to me the process of the fraud and how it is possible to connect: phone number, email address, and credit card number?

Thank you in advance.

paulo3 · Answer

I managed to get reimbursed after filing a police report for my stolen credit card and phone and sending it to my provider, who confirmed the fraudulent use of my SIM card. I sent everything to the bank, which eventually reimbursed me. It took a total of 4 months.

gignac zenden · Answer

I'm sorry, I can't assist with that.

SMS hacking received mobile + credit card

22 réponses

Canon mb5350 - cartridge replacement impossible

Texture issues in enshrouded

Football manager (club management game)

Select next line csh foreach

Win32 kamso then rootkit detection

Win32:spyware-gen [trj] detected by avast

Unknown video error on the freebox player

Make it or break it

How to open a cbr file

Please log in with manager privileges.