Connect with us

Social Stories

BEWARE: M’sian Shares How a ‘Maid Service’ Nearly Stole RM4,860 from His Bank Account


Ft Scam
Source: Smith Ang | Facebook & The Portugal News

Follow us on Facebook, Youtube, Twitter, and Instagram for the latest stories and updates daily.

The Covid-19 pandemic has unfortunately brought about a rise in online-based scams. Notable examples include the online ‘Tengku royalty’ scam and scams involving those in search of jobs.

Recently, Smith Ang, a Malaysian took to his Facebook to inform the public of a new and innovative ‘phishing’ technique. ‘Phishing’ is a scam used to steal user data including login credentials and bank account numbers and occurs when a scammer pretends to be a trusted entity to dupe a victim into doing so.

“This is the Most Sophisticated Phishing I’ve seen so far. And it happened to me minutes ago,” said Ang.
Screenshot 148
In his post, Ang detailed his recent activities and how he almost became a victim of the scam.
Scamming through good promos of cleaning services

He wrote, “I’ve been searching for cleaners, and Facebook prompted one of the ads that caught my attention. Promotion! Who doesn’t like a good 50% promo.”


Part two: “The Hook – The power of ‘Call To Action’
After getting your attention, Ang explained how the ad brought him directly to the “vendor’s” WhatsApp.

“As you can see in the WhatsApp chat, I was asked to download an app, an APK file to be exact. Rarely do vendors ask their customers to download APK files directly.”

“Most will give you a link to the official app store. Don’t trust anyone who sends you an APK file. That doesn’t mean the official app store is safe either,” he added.


Part 3: “The Trojan”
After having installed the app, it would request permission to read his SMS. This is scary!
“Huh? Why do you need that for a maid booking app? If an app requests permission for something more than it should, then it shouldn’t,” he said.


Part 4: Intel Gathering

He added, “The app is well-built, even had its PDPA disclosure done correctly. The registration info required is name, email, password and mobile number. Upon finding the date and package I wanted, I had to key in my address.”




Part 5: The Bank

The next part involved the supposed payment process. Instead of it being the real bank, it’s actually a FAKE bank login.

“Conveniently, the credit card payment is greyed out (under maintenance) and the only option available is FPX. There are a few banks to prey on: Maybank, Affin, Public, CIMB, BSN and RHB.”

“After selecting the desired bank, a very familiar bank interface appears in front of you. If you see the Maybank UI, there is a note: ‘Note: you are in a secured site’ that replaces the usual catchphrase.”

“So when filling up the bank login details, no matter what you put in, it will always show ‘Invalid User ID or Password [Err Code: FE0067]’, now, this gibberish error code is the same for all the banks you select. Don’t tell me all the banks are using the same system developer?”




“I had a bad feeling, but I brushed it off as I was too tired,” said Ang.


Almost losing RM4,860

The very next day, Ang detailed how he had received a text message which said “RM0 PBe DO NOT share this code. DuitNow Transfer RM4,860.00 to NOORALIF SAFWA.”

“I immediately logged into my bank account, and I received the ‘Duplicate Login’ and that’s when I suspected it. Without hesitation, I sprung into quick finger mode. I was fighting for access with the intruder for the login rights.”

“Whenever I tried to change my password, it (my account) will be logged out. Years of playing speed typing games during my younger days boosted my typing speed. I won the login match and changed the password,” he said.

He then noted all the possible data of himself that the scammer would’ve gotten if it was successful.

This includes:

  • Name
  • Phone Number
  • Email Address
  • Mobile Phone
  • Address
  • Bank User ID
  • Bank Password

“This is a very sophisticated operation. Why? It preys on our weakness (got promotion ah?) and the fact that the entire scam ecosystem is well planned. From the curation of the marketing and advertisement to the almost flawless app,” he said.

“For those who are unaware, when you allow the app permission to read your SMS, this will include the incoming PAC/OTP code that your bank sends (SMS) to you for dual-factor authentication,” Ang added as a closing note.

So always beware of the possibility of falling victim to such scams. Always remember, if it feels suspicious, it probably is.


Have you ever fallen victim to an elaborate scam? Let us know in the comments.


Also read: Beware! New Scam Lures Victims With Promise Of Full-Time & Part-Time Jobs

Frustrated Man Looking At Laptop And Phone Using Whatsapp

Follow us on Facebook, Youtube, Twitter, and Instagram for the latest stories and updates daily.

Just In

Inflation Fgt Inflation Fgt
News14 hours ago

PM: M’sia Has Low Inflation Rate Compared To Other Countries

According to Prime Minister Ismail Sabri Yaakob, the rise in living costs happens not only in Malaysia but worldwide, and...

Feat Image Traveller Pass Mysejahtera Ons Feat Image Traveller Pass Mysejahtera Ons
News1 day ago

KJ: MySejahtera’s Traveller Pass No Longer Needed For M’sians Returning Home Starting 4 July

Health Minister Khairy Jamaluddin has announced that the requirement for Malaysians coming back to the country from overseas to complete...

Feat Image Pre 20 Feat Image Pre 20
News2 days ago

Tourism Minister: M’sians Can Redeem Up To RM100 E-Vouchers To Purchase Domestic Flight Tickets

Tourism, Arts and Culture Minister Datuk Seri Nancy Shukri yesterday announced that five airlines are offering e-vouchers valued between RM25...

Cannabis Infused Food Thailand 1 Cannabis Infused Food Thailand 1
News3 days ago

Minister Urges M’sians To Not Consume Cannabis-Infused Food & Drinks In Thailand

Many Malaysians and Singaporeans love to go to Thailand for short vacays as it is cheap and nearby. Recently, Thailand...

My Post 2022 06 30T111452.423 My Post 2022 06 30T111452.423
News4 days ago

M’sian Couple Gets Into Accident & Steals Road User’s Car To Flee, Leaving Their Son’s Body Behind

After getting into an accident on Jalan Sungai Kelamah-Jelai-Gemas, Negeri Sembilan, a couple decided to leave the body of their...

Collage 15 3 Collage 15 3
News4 days ago

149 Immigrants Reportedly Die In Sabah Detention Depot In Last 18 Months, Politician Responds

Recently, a report by the Indonesian NGO titled ‘Like In Hell’ claims that immigrants held at a detention depot in...

My Post 2022 06 29T171355.246 My Post 2022 06 29T171355.246
News4 days ago

WATCH: Group In Sri Petaling Riot & Damage Cars In Fight, PDRM Investigates

Twenty individuals suspected of being involved in a fight on Monday at Jalan Radin Bagus, Sri Petaling, are being hunted...

Collage 13 4 Collage 13 4
News5 days ago

Blood Donation Campaign in JB Allegedly Gives Away Pork-Flavoured Instant Noodles, PDRM Investigates

A present must occasionally be appropriate to prevent any unintended misconceptions. A recent blood drive in Johor Bahru came under...


Latest Videos