TN police warn public about ‘SBI reward points scam’

CHENNAI: Cybercrime police in Tamil Nadu have warned people to be cautious about an ‘SBI reward points scam’.
The state cybercrime wing police claimed that they have received 73 complaints related to the scam recorded on the National Cyber Crime Report portal from Tamil Nadu alone in May and June.
The cybercrime cops stated that the fraudsters hacked the access of victims' mobile phones and devices to send fake messages about SBI reward points.The hackers compromise WhatsApp accounts and send these fraudulent messages to official and personal WhatsApp groups, often changing the group icons and names to "State Bank of India" to cheat the public.
The messages contain links that claim to help victims update their bank details and redeem their reward points, but instead lead to financial losses. In May and June 2024, Tamil Nadu received 73 cyber complaints about this scam through the National Cyber Crime Report Portal.
The scamsters create a sense of urgency by claiming that the points are about to expire. When victims click the link provided, they are prompted to download an APK file disguised as an official SBI reward points application or update.
By installing this file, the victim unknowingly installs malware in their device, which steals sensitive information such as banking credentials, passwords, and OTPs. The malware also gains access to the victim's WhatsApp account, using it to share the phishing link with their contacts, thus spreading the scam further.
On entering the bank details, the victim is asked to submit an OTP sent to the phone. The fraudsters intercept this OTP, allowing them to gain unauthorized access to the victim's bank account. With the captured bank details and OTPs, the fraudsters can transfer funds or perform other fraudulent activities, resulting in financial losses for the victim.
Tamil Nadu Cybercrime Wing additional director-general of police (ADGP) Sanjaykumar has advised the public to take several precautions to protect themselves.
This can be done by activating two-step verification on social media accounts to add an extra layer of security. This requires a PIN in addition to the OTP sent to the phone. The officer asked people to be cautious of messages from unknown contacts or unexpected messages from known contacts, especially those containing links or requests for personal information.
If you suspect that you have been a victim of similar fraudulent activity or have come across any suspicious activity, report the incident by dialling cybercrime tollfree helpline No 1930 or register a complaint on www.cybercrime.gov.in