Have you heard about the story of a Senior Citizen, losing his savings to a caller… in a matter of hour?

The Senior citizen is the victim, and the caller is the SCAMMER. This is a new threat, targeting unsuspecting Filipinos right on their mobile phones.

The scammer posed as somebody from SSS, convinces a victim to download a fraudulent “updated” govt mobile application. Under the guise of providing assistance, the scammer guides the victim through the installation process. The final instruction is often a simple-sounding one: do not turn off the phone until the installation is complete.

What the victim doesn’t realize is that this seemingly harmless act gives the scammer remote control over their device. Within an hour, and without any passwords or one-time passcodes, the scammer was able to access and drain all his online banking and e-wallets balances to another account.

What happened, how it happened? Please read on.

Fake App/Remote Access Scam

This is one of the most dangerous scams today because it gives criminals full control of your phone. It often starts with a phone call from someone pretending to be from a Social Security System (SSS) or a trusted company.

The scammer will tell you to install a “new” or “updated” app, often sending you a link that looks legitimate but is not from the official app store (Google Play Store or Apple App Store).

The Deception:

• They will guide you through the installation process, telling you not to close the app and to wait for the installation to finish.
• The installation will intentionally take a very long time.
• While you are waiting, the malicious app is running in the background. It gives the scammer remote access to your phone.
• Without you even noticing, they can control your screen, access your apps (online banking apps, e-wallet apps), and transfer all your funds to their own accounts. They may even be able to see your PINs or OTPs if they use a screen recorder or keylogger.

How to spot and avoid it:

• Never install apps from a link. Only download and update apps from the official Google Play Store or Apple App Store.
• Be suspicious of urgent, unsolicited calls. Government agencies and banks will not call you out of the blue and ask you to install an app to solve a problem.
• Official apps don’t work this way. The legitimate SSS app and other banking apps do not require you to keep them open for a prolonged “installation.”
• Trust your gut. If the call feels off, or if you’re being pressured to act immediately, hang up. You can always call the official, verified hotline of the company or agency to confirm.

What to do if it happens to you:

• Immediately turn off your Wi-Fi and mobile data to cut off the scammer’s access.
• Remove your SIM card.
• Contact your bank and e-wallet providers immediately to report the fraudulent activity and freeze your accounts.
• Report the incident to the authorities, such as the police’s anti-cybercrime unit.
• Be safer. Do not put all your money in a platform that you made available in your mobile phones.

Don’t Fall for Phone Scams!

Nowadays, you must be not so trusting, zero-trust as they say in the IT world. There are several other scams, baits! I bet you are receiving messages from well known companies, asking you to click links to claim your rewards from point? This isn’t them, their SMS Thread was hijacked! Details on my next blog.

Meantime, Stay Safe, Vigilant and INFORMED!