₦airaland Forum

Hello guys,

Do you know that the last four numbers of your ATM card are visible on POS receipt? And a fraudster with access to this receipt can use your last four digits to steal money from your account using the USSD platform.

I was at two places using my ATM card (not GTB card) for payment, and surprise, surprise.... The last four digits are visible on the receipt.. Very dangerous indeed! See attached photo

It appears we are at a cusp of getting funds (260,000) reversed to my account. Fingers crossed!

Also a bit of pressure from CBN's CPD. Here is a mail from them.
Many thanks mojeks !

Hello guys,

I think we may have some traction on this issue. See below a mail from GTB's E-payment support.

Many thanks to dipoolowoo for mounting media pressure on this issue. Many many thanks.

Immediately sent them a mail @ e-fraudteam.... But mail not delivered... GTB MAILBOX IS FULL!!

Got a tweet from GTBank.

bunmiano:
POSTEMAIL,it happened to me nt quite long,i can help u,its very easy,email me if u need d procedure to avoid unnecessary charges by the police

Hi bunmiano ... Welcome to the thread. I will definitely mail you tonight. Please do share your story here so that other people on here could learn how best to protect their accounts. Thanks

Caveatemptor:
If you are waiting for a thread like this to grace the front page,you are on a looonnngg thing.
@OP,
While I sympathise with your loss,your best bet is to take your battle to the doorstep of your foes-GTB and Etisalat. Continue to post your complaints on all their social media pages. On the other hand if you want more people on Nairaland to read your story follow asany people as possible and then share your posts or get people who already have a lot of followers to share your post.

Hi Caveatemptor, welcome. Please do share with your followers if you can. That will be appreciated.

Well, I'm fighting this fraud case the best that I can. My folks on Nairaland are also helping like Mojeks and dipoolowoo. I hope you could help too.
I can't really quit my day job and raise placards at GTB HQ... That will be suicidal. For now, I'm kinda chasing these GTB guys with petitions and letters; Not forgetting prayers.

Please do share any tips that could me help me prod GTB to pay back my 260,000.

Thanks

Osyxcel:
All banks deduct #100 maintenance fee for Cards. The #5 is for VAT.

This horrible GTBank deducted 488 for SMS alert for just one month!!! This is madness

Mimzyy:
This is really pathetic. Such an enlightening thread and it didn't grace front page. If it's all these useless yeyebrities news, it would have graced fp within few hours.

So sorry about your case Postemail, Do keep us informed on the updates, meanwhile, can i have you twitter handle so i can also help you reteweet the complain to my ffs?

That's how the foolish gtb people deducted 105 or so from my account and they tagged it as annual maintenance fee for my card. What nonsense maintenance for a card that is within my care? Why don't other banks deduct same? Gtb is f**ked up honestly.

Hi Mimzyy . Thanks so much for the support. I feel the same too about why this thread has not made it up to the front page. Some brilliant folks like byteem have posted interesting details on the vulnerability of USSD banking run by GTBank where customers could dial *737# to access their account. If I had read such info before this illegal withdrawal of 260,000 from my account, I 'd have cancelled my ATM card -that way plugging the loophole to my account. Well, I have learned in a harsh way.

Nice if you could retweet to your followers. I really want the news to go around and may be put a little pressure on GTBank to pay back stolen funds.

My Twitter handle is cole70997789

Thanks

On my Monday, I will be sending my petition to Customer Protection Dept of CBN. I have summarized and compiled all my documents into a PDF file for easy viewing by the official. I will also CC GTBank's fraud team. CBN requires petition to filed 14 days after non-resolution of a fraud. It's past 14days now....actually 21 days. I pray they do something akin to doing their job..

rydow:
Good One bro, But don't sleep on it ooo, and I don't think GTB is directly guilty at the moment. What about ETISALAT. Don't forget Someone SWAP your number which is an inside Job with Etisalat.

I think you need to be close with the Both of them at the same time. So One will not say they need to investigate with the Other keeping you on a Long thing. and MMM don FREEZE so NO LONG THing again oooo.

If they wouldn't DM you after 6 hours of your tweet, Keep Re tweeting oooooo. DON'T SLEEP ON IT ooo

Safe!

Please what's DM?
I'm really knew to Twitter. Still fiddling with it somehow. When I tweet @gtbank does it go public?

I really want folks out there to know the dangers associated with USSD banking, especially the *737# thingy run by GTBank. If one creates a hashtag about this, does it go public? School me a little about tweeting.:-)

No, I'm not letting Etisalat loose. I'm actually seeking legal support to file a case against them. I have saved both SIM cards (both the swapped one and new one). I have saved all documents and acknowledged copies sent to Etisalat. If there's any NL lawyer willing to take on a fight against a big corporation, pls PM me.

Dipoolowoo @ businesspost.ng is also willing to take up the story on his news portal. He has contacted me and GTBank. Currently compiling a dossier of this fraud, before going live.

Once more, thank you guys. Thanks for the support. When I get my 260,000 back from GTB, will definitely send gifts to you all.

byteem:
WELL INTERNET BANKING IS NOT WITHOUT ITS FAILS BUT ITS A LOT SAFER THAN USSD BANKING... MUCH MORE SAFER.. FIRST U HAVE THE TWO FACTOR AUTHENTICATION SYSTEM WHICH REQUIRES YOU TO HAVE A PIN AND A UNIQUE TOKEN.. THEN U HAVE SECURITY CERTIFICATIONS REQUIRED BY CBN BEFORE SUCH PROCESS CAN BE APPROVED LIKE A PCIDSS ON PAYMENT SECURITY .. SO YES TO A LARGE EXTENT ONLINE BANKING IS VERY SAFE .. WELL SO LONG AS YOU DNT COMPROMISE YOUR PASSWORD AND YOUR TOKEN...

THEN MOST IMPORTANTLY THE ENTIRE PROCESS STARTS AND ENDS WITH THE BANK.. MOST BANKS HAVE VERY AIRTIGHT SECURITY MEASURES IN PLACES WITH THEIR CBA(CORE BANKING APPLICATIONS) WELL SOME ANYWAY.. WONT MENTION NAMES ... OTHERS ARE STILL PLAYING CATCH UP(SECURITY IS A CONTINUOUS AND HAS TO BE A CONSISTENT PROCESS CAUSE U HAVE TO ALWAYS BE A STEP AHEAD OF FRAUDSTERS) .. BUT BY AND LARGE ONLINE BANKING IS SAFE...

USSD BANKING ON THE OTHER HAND REQUIRES THE PARTNERSHIP OF BANKS AND TELCOS.. MAINLY BECAUSE SHORTCODES ARE INVOLVED.. WHICH HAVE TO BE MAPPED TO NETWORKS... THE TELCOS ARE NOT SUBJECT TO PCIDSS PAYMENT SECURITY STANDARDS ..OR OTHER STANDARDS LIKE THE BANKS ARE.. THEY MAKE THEIR MONEY VIA USSD TRANSACTIONS (AIRTIME SALES OR CHARGES TO LINES ON INITIATION OF TRANSACTIONS) MAINLY COS ITS A CONVENIENT WAY TO BUY AIRTIME AND CONDUCT BILL PAYMENTS FOR MOST ACCOUNT USERS.. .

REALITY IS THAT THERE HAS TO BE MORE SYNERGY BETWEEN NCC NIBSS CBN BANKS AND TELCOS IT SHOULDN'T ALWAYS BE ABOUT TRANSACTION FEES .. THEY NEED TO COME TO TERMS WITH THE FACT THE CONVENIENCE HAS TO BE BALANCED WITH SECURITY..

ITS CUSTOMERS FIRST...

Hi byteem . Thanks for the detailed info on Internet banking and security. I have lots of question on this topic. Hope you don't mind?


I'm trying to bash GTBank on tweeter about the insecurities of their savings account and *737#. They really have to enlighten customers about the dangers of USSD banking.

I rec

YOUNGELDER1:
you can use your desktop .

don't wait for Os upgrade 200k + this recession no be beans .

take the fight to Twitter & Facebook .

Thanks youngelder1.

I finally got my complaint to GTBank via Twitter. Honestly it took me a bit of messing around to finally get a hang of tweeting. Lord... I am really getting rusty and old.

Anyway thanks guys. You all have been more than wonderful. It makes me feel good knowing that there are guys out there willing to help and support. A million thanks to Mojeks , I owe you a big fat gist when GTBank pay me back my 260,515naira they stole from me.

Here're my tweets and response from GTBank

okikiosibodu:
postemail
Both parties know they have moles within them. I repeat, the best place to start from is Etisalat, they can fish out whoever did your sim swap. If they refuse to corperate, I bet they will put themselve to order when you involve NCC. All those Telcomms fear NCC. I think NCC should be ablt to take it up on your behalf. For any operation to be done from within a telecommunication firm (using where I work as an example) the applications have log in requirements, and they are unique to each staff. So whatever you do, will have a shortcode/abbreviation your details on it. If anything happens, all they need do is is get the short code, and run it on their database to ge the full details of the bearer. One without log-in details, can never log into the portal ('cause in the first place, the details were created one by one, and customised for each person).
With all said, I believe that's how all telcom firms operate. Don't let the case die, I won't be happy with you if you do. They must cough it out. Even if you don't need the money, donate it to charity. Many souls will pray for you

@ okikiosibodu

I promise you Bro, I will definitely keep up the fight to get my 260,000 back from GT Bank, and hopefully score one against Etisalat.

Will always update the house. All ideas and support are welcomed.

Happy Sunday y'all

mojeks:
Report to CBN, they told the banks that they will now be liable to any fraud on the USSD channel, http://thenationonlineng.net/banks-pay-mobile-money-transactions-fraud/.

Thanks Mojeks

Thanks for the support. I have replied your mail.

Interesting to know that they are liable for frauds on USSD channel. Were the banks like GTB ignorant of the obvious risks especially at the Telecom end of this service? Or just the usual half-baked policy from industry leadership? I reckon it's been over a year or so they have been marketing this *737# USSD banking to their customers.. They should have secured the platform somehow. It's pure madness using the last four digits of an ATM card as PIN for 200,000 Naira transaction.

Any links to the CBN petition page?

okikiosibodu:
postemail
OP this must have been a very painful experience for you. I remember when I was first introduced to *737*rcard amount# to purchase airtime on the GTBank platform (I was still serving then -NYSC thingz), I paused for a while and thought it through. The question that came next was "What is the security in this service" (I mean it ought to have pin or something ) 'cause anyone can pick up your phone, purchase airtime, and transfer the airtime to to line especially if you have never used the credit transfer service on your telcom. The response the GTB guy gave me was lame but I didn't push 'cause I figured out he couldn't handle the question and didn't want it to be obvious to me. His respons was "For anyone to have access to your phone, you must have trusted the person".
OP, if on the long run you don't recover your money, atleast don't let the perpetrators go unpunished...help save possible victims in the future. First of all, make a police report, and then take up the case with Etisalat (one I know you'll win). Etisalat should be ab to fish out which of their staff performed the sim swap ('cause I believe the transaction must have required a staff's ID, to gain access to the necessary portal for the activity). From their, you'll be able to apprehend the GTB cohort. Please , don't rest until justice is done. Please give us an update, well be glad to see it. One love

Hi okikiosibodu, thanks for your support. Yes, I have a police report and affidavit. Looking for a vibrant lawyer willing to help me fight this case. The lawyer I have been meeting is old and not in good health to take up the fight.

It's painful loosing 260,000 this year end to the Etisalat/GTB fraudsters; and both companies are not investigating the case. If the bank know there are loopholes at Etisalat, why don't they fight Etisalat for all losses?

byteem:
I REPORTED AN ILLEGAL TRANSFER FROM MY ACCOUNT TO SEVERAL BANK ACCOUNTS .. WHILE THE OTHER BANKS REVERSED THE TRANSACTIONS WITH AN INDEMNITY GTB SAID THEY NEEDED A COURT ORDER.. WHAT BLODDY COURT ORDER.. SOMEONE HACKED INTO MY ACCOUNT AND TRANSFERRED FUNDS TO VARIOUS ACCOUNTS .. WITH GTB CCOUNT AS A CLEAR RECEIPIANT AND BENEFICIARY OF FRAUDULENT FUNDS... YET THEY HOLD DOWN MY MONEY..THEY CLAIMED THEY PLACED A LIEN ON THE ACCOUNT BUT PLAYED THIS GAME AND I WAS UNABLE TO GET BACK MY MONEY FOR CLOSE TO A YEAR..

WAS ABLE TO RECOVER THE FUNDS TRANSFERRED FROM OTHER BANKS.. GTB FINALLY RETURNED MY MONEY RECENTLY AFTER CLOSE TO A YEAR ...EVEN THEN SOME AMOUNT HAD BEEN WITHDRAWN BY THEIR CUSTOMER WHO RECEIVED FUNDS STOLEN FROM MY ACCOUNT..OBVIOUSLY THEIR AUDIT FLAGGED IT WHEN TRYING TO CLOSE AND BALANCE BOOKS FOR Q4..


NOTE USSD TRANSACTIONS ARE MADLY INSECURE...SAFETY HAS BEEN SACRIFICED ON THE ALTER OF CONVENIENCE ... STICK TO INTERNET TRANSFER BUT AVOID USSD TRANSACTIONS ..EVEN IF THE BANKS HAVE SAFE MEASURES ITS MOSTLY INSECURE FROM THE TELCO END COS THEY TELCOS DNT HAVE AS MUCH CONTROLS AS BANKS HAVE FOR PASSWORD PROTECTIONS..SO THE TELCO IT GUYS HAVE A FIELD DAY WITH UR PASSWORD AND THEY NEED TO IS SWAP UR LINE ..

IF TELCOS AND BANKS ARE GOING TO PARTNER ON THE PROVISION OF USSD BANKING SERVICES THEN NCC HAS WORK WITH CBN TO REGULARIZE THE USSD ASPECT FOR TELCOS AND ONLY GIVE CLEARANCE FOR USSD TRANSACTIONS TO BE RUN ON A TELCO PLATFORM IF PROPER SECURITY MEASURES ARE IN PLACE.. OBVIOUSLY NCC LACKS THIS CAPACITY.. IT SHOULD GO BEYOUND JUST APPLYING AND GETTING SHORTCODE APPROVAL..

Did they do the illegal transfer from your account through USSD banking or Internet (app) banking?

How safe is Internet banking? I have a phobia for any of this sorta convenient banking at the moment. I just feel they are all compromised somehow.

I have opened an account with Stanbic IBTC. I will be migrating to Stanbic. For this account, I have neither requested for ATM card nor cheque book. I want it "bank hall" banking only. Although it's tough, i think I'm better safe than the nightmare I have been through these few days going to lawyer, police , court affidavit and to the HQ of Etisalat and GTB.

@ all mods, lalasticlala etc.. Let the words out; USSD banking through these telecom providers is unsafe. Let the people on Nairaland and elsewhere learn about this. Move this front page, pls. Transacting with short codes like *737# makes your bank account so vulnerable.

byteem:
WHEN IT COMES TO FRAUD MANAGMENT GTB IS WHACK.. THEY DNT CARE ABOUT THEIR CUSTOMERS .. OK MAYBE THE HIGH GROSSING ONES WITH HUNDREDS OF MILLIONS .. U MAKE A COMPLAINT AND THEY ACT LIKE THEY ARE DOING YOU A FAVOUR BY RUNNING YOUR ACCOUNT..THATS MINUS THE LARGE AMOUNTS THEY FRAUDULENTLY DEBIT IN THE NAME OF MAINTENANCE.

I REPORTED AN ILLEGAL TRANSFER FROM MY ACCOUNT TO SEVERAL BANK ACCOUNTS .. WHILE THE OTHER BANKS REVERSED THE TRANSACTIONS WITH AN INDEMNITY GTB SAID THEY NEEDED A COURT ORDER.. WHAT BLODDY COURT ORDER.. SOMEONE HACKED INTO MY ACCOUNT AND TRANSFERRED FUNDS TO VARIOUS ACCOUNTS .. WITH GTB CCOUNT AS A CLEAR RECEIPIANT AND BENEFICIARY OF FRAUDULENT FUNDS... YET THEY HOLD DOWN MY MONEY..THEY CLAIMED THEY PLACED A LIEN ON THE ACCOUNT BUT PLAYED THIS GAME AND I WAS UNABLE TO GET BACK MY MONEY FOR CLOSE TO A YEAR..

Man, you have schooled me on a lot of things. First of all, I thought GTB was one of the best until this incident. They have been nonchalant about this and continuing to sell a very defective service (USSD banking *737#). The Anti-fraud office has only 5 desks and 5 guys fighting fraud in Nigeria. These guys are swamped.

Sometimes I wonder what the guys at GTB's Research and development are doing. They definitely need this sorta feedback from us to perfect or develop their services. Why run a banking service that's totally insecure at the TELCO end? I believe the guys at the ETISALAT are assessing the data going to GTB servers and there may be no encryption of these data. Any ideas about encryption of these data in USSD banking?

With this insight from you, Now I'm beginning to think the four last digits of my ATM card number were compromised at ETISALAT; and there was no data encryption. Honestly these banks gotta do something to protect our money. But they don't seem to care. ... Oh boy, what a country!

iboboyswag:
Mr postemail, I am sorry for your loss. I believe the bank are not taking lightly your case and would get across to you as soon as they require further input from you.

Hi iboboyswag. Nice to read your post. Thanks for your support.

I think if GTB cares enough about their customers they could have stopped using the last four numbers of ATM card as a PIN in their USSD banking. Imagine using an account number as PIN? That's super vulnerability!

priceaction:
Your first point to recovery, IMHO is to track where was your account swapped? Who swapped it without your authorized signature and contacts? Who block your services on that day? That is why I believe your first suspect is your network provider not the Gtb. The person might have details of your past transactions and collaborate with a Gtb staff. Please take your first fight to Etisalat by bombarding them with your facts and accusing them collaborating with fraudsters. Go to their Twitter page and retweet it to their big fans and bosses. Copy their headquarters and their big bosses. And threating then with legal battles.
They have all the records of events on each line, so they can track the culprit if it is inside job besides don't think the person involved is low level, they may be ogas and cartel working together both in banks and telecomms.

Lalasticlala help this man now. How wicked can you people be?because he is not a celebrity?

Hi priceaction. Thanks for you support. Your story makes an interesting read. How did the fraudsters get your cheque? Well, I think it shouldn't be that hard since they have an insider in the bank? They could fill the application form for a cheque book; sign similar signature as yours. What could have happened if your account officer failed to reach you on the phone?

As per tracing where my SIM was swapped, I went to Etisalat head office. They promised to investigate and call me. Since then I never heard a word from them. But I think they could swap the SIM at any of the numerous Etisalat shops around the country. The last four numbers of ATM card is also an easy bit from an insider. They waited till around weekend midnight to raid my account. First withdraw was a 30,000...then another 30,000 ending it with a 200,000 transfer to one ABIODUN @ Union bank. I felt so horrible that day! E no go better for these people!

rydow:
@Postemail,

Have you tried there twitter handle?. I got my money deducted uselessly yesterday. I accused the concerned on twitter, they reply immediately and request for a DM.

Post all this petition on twitter AND there facebook, Instagram page, dem go do something sharp sharp.

Yes, just got me a phone that can download Twitter. So I expect to take up the fight there since they have not reformed their defective banking after 12 days of my petition. Think of it, you know how much these fraudsters can move a day using *737#? At least 230,000 a day with ease! There is a transfer limit of 200,000; and emergency rescue fund 30,000 GTB gives through ATM on request through *737#. since I have banking with GTB, I never knew of this emergency cash called GTRescue. This kinda reinforces my belief that these fraudsters have an insider in the bank.

dayleke:
I still can't believe this is not on front page by now....
Yet dat woman bought a 2016 RR,it was on FP.
Another actress with a customized plate SUV dey FP.
A man with a "land rope" aka snake for his hair is on FP.
And this one that can benefit even people beyond NL still dey languish for here....
Seun and other mods,which way now?

Well, dayleke , I'm quite amazed as you are when I see an important public notice that would protect a lot of people from this GTB fraud not brought to front page. I wonder what criteria are used by the mods to put a thread up?

Irrespective of the fact that this is a fight against a service sold by big corporation -GTBank, is still an advisory on how customers with a savings account at GTB can protect their money from "swappers" who will swap their phone number and use the last four numbers "on" their ATM card to steal up to 230,000 a day from their savings account. I repeat *737# easy banking is vulnerable and needs an urgent measures to protect account holders. Last four digit of ATM card(4234 5743 5689 XXXX) should not be a PIN!

Fellow N'landers, I need more ideas on how to chase GTB for my 260,000. I'm quite at the end my wit on this case. I'm currently chasing 'em on the social route, and multiple petitions.

Any ideas, fellas?

dayleke:
Haba!!!!!
Seun!!!!
Lala....!!!!
Help ur fellow man now.....
Since how many days now?
Do you know how many people can benefit from this?
What are you scared of?

Yes, a lot of people can benefit from this case. And also it could force GTB to reform this defective phone banking that requires the last four digits of ATM card as pin.

rydow:
If nah Snake matter now, You go don see am for FP!

This is a serious matter that requires urgent assistance and this Man has been calling on the MODS, sending mails yet they seem so reluctant to do something. In a situation like this I think we need to collectively look for a way to stop crime and not a way to pity who is concerned. Abi MODS now need tips to do something?

My advice is that you take this up on there Facebook and Twitter handle (Etisalat and Gtb). You will be contact As immediate as Possible.

Cuz as days is passing by, your case is slowing down , and some people will start consoling you to take heart and accept fate.

Don't be surprised when your lawyers start preaching about Leaving everything for God.

Buy a 10k tecno, download twitter, downloaded FB. Attack them... On every post, attract them , on the profile , attack them. They will fix your issue immediately.

Safe!

Thanks a lot rydow.

I will get a cheap phone for the sake of mobbing GTB and Etisalat on Twitter and FB.

Quite amazed why it hasn't hit front page since this message enlightens people about how to protect themselves against this fraud. I have mailed lalasticlala and other MODs.

Think about it, all phones have IMEI number. It's quite easy for Etisalat to identify the phone IMEI that accessed their network with my cloned number. This way they could aid police by tracking this phone. I believe these fraudsters aren't that sophiscated enough to dump both phone and sim after every raid on an account. They may trash the SIM but not the phone. They still be using the phone with other SIMs. It could be an easy case to solve if they put their heart to it.

As per police office I went to, the guys were busy eating kola nut and telling me "sorry"

Well, there's still no positive report on this issue; and I have not gotten my 260,000 back. I need every help possible from fellow landers.

@ lalasticlala

Hope you could assist by moving this to FP to get the attention it deserves. Thanks.

Update:
Another petition sent to Consumer Protection Council.

Contact
Headquarters Plot 1105
Dar-es-Salaam Street
Off Aminu Kano Crescent
Wuse II, Abuja. Hotlines: 08056002020, 08056003030 e-mail: contact@cpc.gov.ng Regional Offices

Lagos Office
No. 18 Ilupeju By-Pass, Ilupeju, Lagos

Today I sent a petition to National Communication Commission. I think Etisalat is also responsible for this fraud. If one of their staff had not assisted these fraudster in swapping my phone number, they would not have been able to assess my GTB account.

NCC contact
For Complaints: TEL: 0800 CALL- NCC (TOLL FREE) i.e. 0800 -2255 – 622 EMAIL: consumerportal@ncc.gov.ng
Lagos Office Nigerian Communication Commission
9A Bankole Oki Street,
Behind Ikoyi Club, Ikoyi,
Lagos. Tel: 234-1-72093224, 2690603,
2690712
Fax: 234-1-2690750

Good morning N'landers, happy Sunday. Remember me in your prayers. "make baba God touch GTB to give me my money back"

Thanks Myles1 for your email and expression of support. Yes, I did speak to a lawyer about the incident. He was the one that advised me to write a petition to both Etisalat and GTB.

warribloood:



This what we call partnership in crime

This kinda fraud is not for rookies. It requires "solid" contacts inside both GTB and Etisalat.

Can you imagine how much these guys must have made through this GTB saving Account *737# banking vulnerability? It must be in millions!

So many people may not notice that their numbers have been swapped, and their account raided.