Victims say the beneficiary of the illegal transactions was the Unionbank account of a certain “Mark Nagoyo”.
BDO Unibank account holders have reportedly lost thousands of pesos in deposits due to an online banking scam involving unauthorized transfers to a Unionbank account with a fake name.
BDO users took to social media starting Saturday, December 11th to complain that illegal transactions were being made through their accounts to transfer funds to a certain “Mark Nagoyo” account at Unionbank.
In Filipino is the word “nagojo” means making a fool of someone.
The fraud was so massive that a public Facebook group called “Mark Nagoyo BDO Hacked” has since been set up with several users reporting similar cases of hacking.
So far, a common pattern has emerged among the victims of the hacking scandal: the alleged cybercriminals were somehow able to access the victims’ BDO accounts, even if they were careful not to click on alleged phishing links or to reveal their bank details to the public.
BDO customers were surprised to receive email and SMS notifications from BDO letting them know that the bank transfer – which is typically thousands of pesos – was successfully processed. In some cases, the hackers managed to bypass BDO’s One-Time Pin (OTP) security feature in order to enforce the illegal transactions.
Facebook user Mela Abesamis said she lost pounds 50,025 as a result of the hacking program. Abesamis said she first received a text message from BDO at 1:11 a.m. on Saturday saying there had been an alleged transfer of 50,025 pesos from her account but it was not enforced.
A few seconds later she received another SMS from BDO and the amount had already been debited from her bank account.
As in the other cases reported on social media, the alleged beneficiary of the illegal transaction was Nagoyo’s account.
“Sobrang maingat ako sa phishing scams. Here you will find information on unusual links and you can use the BDO direct debit / bank account. Now you can activate OTP, but this time without OTP…. Nagulat na lang ako kasi nakatanggap na lang din ako ng email stating that I have sent money to another bank (the Unionbank). ” Abesamis said on Facebook.
(I am very careful when it comes to phishing scams. I also don’t click on unusual links and hardly use my BDO direct debit / account. My OTP is activated, but this time I did not receive an OTP … I was surprised when I suddenly got an email saying that I had sent money to another bank (that’s Unionbank).)
Facebook user Charisse Matanguihan, who works for a government bank, was also a victim of the plan on Thursday, December 9th. In Matanguihan’s case, the suspects appear to have siphoned money from other people’s accounts by impersonating them.
She said she woke up on Friday morning, December 10th, because she missed calls and texts from several people accusing her of getting her money. Upon reviewing her bank accounts, Matanguihan found that she had lost much of her deposits with BDO and four unauthorized transfer confirmations had been made on her account.
“I work for a government bank so I have to maintain my integrity. I’m afraid my reputation will be ruined despite being a victim too. So I urgently need your help to investigate and file a case with whoever is behind all of this, ”said Matanguihan.
The BDO Unibank announced in a statement on Sunday, December 12th, that it was already investigating the alleged hacker scandal.
“BDO Unibank has been informed of concerns related to one-time pins (OTP). The bank would like to assure its customers that it will examine each of the cases and contact those affected, ”said the bank.
BDO then reminded its customers to never pass on their access data and OTP and to change the passwords of their online bank accounts regularly.
Bangko Sentral ng Pilipinas (BSP) also said it is currently in “close coordination” with BDO and Unionbank to ensure the public is taking “remedial action” including reimbursement to affected consumers.
“Rest assured that we will continue to work together and engage stakeholders to ensure the security and integrity of the financial system and the protection of financial consumers,” the BSP said in a statement. – Rappler.com