saintchibu:

OP did you check the email associated with the account? Who and who have access to your email? I know most online stores send the OTP to both your phone and email.
The real investigation has to start from you searching yourself for where you have exposed your ATM Card.
Its a pity but some how, you contributed to your loss. Think well!

slex:


I do in fact we all do. The boy is trustworthy to an extent but i will not rule anyone out at this point.

Send HOTLIST space ur account number to 08076665555

Dannys85:

It will alot of Good if u don't comment on issues u know nothing about.Banks are not liable to anybody's carelessness.GTbank have the best technology and customer service in the banking sector.

slex:
How this thief bypassed OTP authorization to remove money from my account beats my imagination.

Caringguy:

slex:
Thank you everyone for your suggestions and kind words. I was not able to reply everyone bit that didnt mean your comments were not important. I am better now and will do what i can to get the funds back but if i cant get them back i still thank God for the gift of life so that i can double my hustle and work harder to get what i lost a 1000 folds more.

God bless you all.

Lalasticlala whats your take on this matter?

rayralph:
Bro !!! Take heart

Educate yourself about the different fraud techniques out there and learn to protect yourself.

Be on the offensive.

Learn digital forensics and threats evaluation

Dannys85:
They still send OTP,I did a transaction few minutes ago they sent it

ekems2017:
Bros so sorry about that. But who confirmed the otp sent to your mobile number? Did you in anyway leave your phone and step out? There is something wrong somewhere

OlajumokeBread:

New scam ??

You're new to using ATM cards

Who doesn't know that you can go to a store, buy a $3 chewing gum and tell them to do a $8,000 cash back,
they would withdraw the $8,000 from the pos and hand it to you

You're obviously a new ATM card user

You can use someone's ATM card to buy anything without putting your pin

After the purchase, choose credit instead of debit and it won't require your pin

soberdrunk:
Some Nigerians are just very quick to codemn banks for every incident even when it might be their fault, am not saying the banks are 'perfect' or 'saints' but lets be honest sometimes, there is no way a scammer will be able to access your funds without having access to your information one way or the other......

Handsomebeing:
FYI I have stopped using my quickteller because it doesn't request for OTP anymore. I've blocked all online channel to that particular account. I can't shout.

Proudlyngwa:

And what if that scammer has acess to the banks IT system

metrosexual:


@ Handsomebeing, for QuickTeller, if you have a hard token device, it would request you enter your ATM pin plus your token pin as your OTP, that's even more secure than OTP through your phone number.

Everyone should go get a hard Token device from your bank.

When you have a token device, for 99% of all online transactions I have tried out, you would need to input your ATM PIN(4 digits) plus TOKEN PIN(6 digits) as your 10 digits OTP gateway, it would be rare for someone to know your ATM PIN and still have access to your token device, someone targeting you can easily get access to your phone for phone OTP purposes but would rarely know you have a hard token device. And I hope you know token pin changes every 30 seconds.

rayralph:
That's less likely but not impossible.

But Will the intruder withdraw just 80k when you have access to their whole financial set-up?!!.

Think about it bro..the intruder will be a billionaire and get away with it provided he can cover his tracks by spoofing and masking IP,DNS,USER AGENT etc.....and clear logs too.

slex:
Greetings everyone. I feel so bad , sad and traumatised right now because of how someone just decided to wake up one day and do evil to me. My essence of writing this is to use Nairaland as a means of educating more people on the dangers you may face when your ATM card has been compromised.


Yesterday after finishing up work for the day i did my usual closing time ritual; i shut my system down, switched off the AC and the sockets then started my journey and this was already 6-01pm. When i reached Chevron round about at exactly 6-37pm I heard the usual notification tone on my phone that i had received a message. I ignored after 2 mins i heard another then i removed the phone from my pocket and checked lo and behold what did i see?N20k debit alert from GTB twice.

I was like WHAT!!! when did i initiate these transactions and while still looking at the messages surprised another N20k debit alert came in after a few seconds yet another N20k totalling N80,000 naira. Like a man possessed I quickly Hotlisted my Account by sending an sms with the Hotlist format and after that i received a message that my Account has been hotlisted from GTB but it was already too late. The balance left after the N80k taken was just N7k.

My people , the feeling of seeing your money leaving your account in ral time is a very crazy experience I felt so helpless. Anyways I have gone to a GTB Branch and complained but they are telling me it can take a week to 3 months for investigations to be concluded. Me i want my money refunded and i dont even get why it has to take so long (45 days max) to resolve that issue. Thank God i have 2 other accounts but this has got me thinking that our banks need to protect s their clients more.

The thief used a POS/Web transfer channel to remove the money why?because he knows if he uses an ATM his face will be captured by CCTV or the camera on the machine meaning No be today him de do this kain thing.

tthere should be some sort of way to prevent unauthorised transfers honestly. Either when you want to pay with a POS machine a message shoud be sent to you requesting authorization before payment can be done on a POS machine. How this thief bypassed OTP authorization to remove money from my account beats my imagination.

Please be careful everyone.

From a pained member.

Proudlyngwa:

Not all intelligent people are smart, moreover the op said it was in 4 20k denominations, meaning he was either paying for something or the medium of withdrawal was limiting acess to just 20k.
This days its becoming easier to perform online frauds, nothanks to psiphing mails and key logger.

slex:


Boss, even at the bank they confirmed it wasnt used on an ATM.

You know when you use an Atm the alert u get will wite ATm-name of vendor LA STan9999********

But the alert i got was POS/web Service- -name of vendor LA STan9999********

@Jabioro thank you bro,i am kanking gtb on twitter like every hour No mater I will pursue this to the end.

@ipobarecrimi Where the water to take the medicine as money no de to buy purewater .lol

Lunagirl:
So what is the new method?

slex:


I do in fact we all do. The boy is trustworthy to an extent but i will not rule anyone out at this point.

Send HOTLIST space ur account number to 08076665555

rayralph:
Every tom and harry with the basic cryptographic know-how should be able to calculate the algorithm used for the hardware token key combination.


NOTE: NO SYSTEM IS SAFE !!!!

metrosexual:


Dude, did anyone state that any system is safe? So that point is inconsequential here!

And also, I'm still trying to comprehend the rational behind your rebuttal concerning hard token devices, its just like saying: "Any Tom, Dick and Harry with basic car alarm wiring know-how should be able to disable a car alarm system", so does that mean because of this fact having car alarms isn't a top security feature?


Its known the world over that hard tokens are a more secured tool and offer added security to transactions so I don't get your point here.
Or do you just feel good basking in the ambience of feeling "smart" that you just rebutted something?