Advertisements
One new type of scam Financial concerns are worrying bank customers and require increased vigilance.
Criminals are now using advanced social engineering tactics combined with remote control of cell phones to bypass the security of applications.
This type of fraud simulates official calls from the bank to convince the victim to install malicious programs.
Knowing how to identify the signs and adopting preventative behaviors is essential to protecting your account and avoiding substantial financial losses in your daily life.
This practical guide was prepared by digital security experts to help you understand this threat. Check out the topics we will cover below:
- The current landscape of the new fraudulent tactic.
- How criminals employ social engineering.
- Comparative table between traditional fraud and the new tactic.
- Tips for immediate protection of your banking app.
- Frequently Asked Questions (FAQ) about the topic.
What is the new type of scam in the banking sector?
Criminals have refined their techniques to bypass the advanced authentication systems of financial institutions, using a dangerous combination of advanced social engineering and unauthorized remote access software.
Unlike older scams, which relied exclusively on capturing passwords via fake websites, this threat acts directly on the customer's already validated device, making automatic detection by banks much more difficult.
The scam begins when the victim receives an urgent call.
The scammer poses as a bank security employee, claiming that a suspicious transaction needs to be canceled immediately.
How does the criminals' approach work in practice?
During the call, the scammers use the victim's real data to gain their trust.
Next, they instruct you to install a supposed security application or update for the banking system.
This app actually gives criminals complete remote control of the phone.
With access granted, they are able to make transfers, take out loans, and change passwords without triggering traditional alarms.
The sophistication of the attack surprises even experienced users.
According to reports on the Evolution of cybercrimes at FEBRABANFraudsters use fake call centers that mask the real number of the call.
Because of this masking, the number that appears on the victim's cell phone screen is exactly the same as the official number of the bank's customer service channel, generating a false sense of security.
Comparison: Traditional Techniques vs. New Modality
To facilitate the visual identification of this threat, we have organized the main operational differences in the table below.
++ 5 Behaviors That Make Your Digital Bank See You as a Risk
Pay attention to the warning signs presented in each type of criminal approach:
| Feature | Traditional Scams (Phishing/Cloning) | New Modality (Social Engineering/Remote Access) |
| Attack Vector | Suspicious links via SMS or email | Direct phone call with real data |
| Action Required | Click on the link and enter the password. | Download remote support app |
| Origin of the Call | Unknown or private numbers | Masked number identical to the bank's number. |
| Main Target | Capturing login credentials | Full control of the authenticated device. |
| Risk Level | Medium (blocked by biometrics) | Very high (device check instructions) |
How can you protect yourself from this new digital threat?
The main rule for ensuring your financial security is to never install applications recommended by third parties during a phone call, regardless of who the caller claims to be at the time of the call.
Financial institutions never request the download of remote access tools to perform transaction cancellations, routine checks, or security procedures on customer accounts.
Important: If you receive a suspicious call about unknown transactions, hang up immediately.
Next, contact your bank using an official channel found directly in the app.
If you have provided any data or installed any suspicious program, turn off your Wi-Fi and mobile data connection immediately.
This disrupts the criminals' remote control over your device.
Read more: What to do when your digital bank goes offline right on payday?
Finally, always keep your operating systems and banking applications up to date.
Frequent updates fix security vulnerabilities used by hackers to break into mobile devices.
How to identify a fake contact
Criminals use real personal data and mask the phone number to impersonate the bank's official call center.
During the call, they create a false sense of urgency by claiming there have been intrusions or suspicious purchases on the account.
The main warning sign is being pressured to download a support app or confirm passwords.
Legitimate financial institutions never ask users to install software or enter security codes during phone calls.
Immediate actions following suspicion
If you suspect the call, hang up immediately and do not click on any links sent via message.
Disconnect your phone from the internet to prevent remote access if you have downloaded any files.
Next, contact the bank using the official channels in the app or the number printed on your credit card.
Filing a detailed police report is also essential to contest any fraudulent transactions and protect your rights.
Conclusion
Protecting your assets requires up-to-date information and a consistently proactive approach.
Be aware of the signs of social engineering and share this warning with family members to prevent more people from falling victim to this scam.
For detailed support on how to proceed in cases of confirmed fraud, please consult the official channels of [organization name/source]. Federal Government Consumer Portal to securely register your incident.
Frequently Asked Questions
Does the bank call to confirm suspicious transactions?
Yes, but the bank never asks you to download apps, type passwords on the numeric keypad, or perform test transfers to cancel fraudulent transactions during the call.
What should I do if I fall victim to this new type of scam?
Disconnect the internet from your cell phone immediately, call your bank from another device to block the accounts, and file a police report with the Civil Police as soon as possible.
Is it safe to use PIX after receiving a call from the bank?
Never make transfers via PIX at the request of supposed bank employees. The bank has internal mechanisms to cancel transactions and does not require payments from the customer to resolve problems.
++ FEBRABAN offers tips for customers to protect themselves from the latest banking scam.
