Revolut customers warned of targeted scam texts and malicious Google ads
Consumer advice site issues alert about phone and web scams
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Customers of Revolut, thebanking servicesprovider, have been targeted by a series of scam texts and maliciousGoogleads.Scammersare employing phishing texts and elaborate advertising that contain bogus phone numbers in order to steal data.
According to the UK consumer advice website Which?, one victim has lost nearly £8,000 as a result of amalicious attack. It says that last week alone five people got in touch with them after receiving text messages, which had apparently been sent from Revolut with most stating ‘your account has been temporarily locked’.
People receiving the messages were also asked to click on a link and update their photo ID. Other messages have referred toauthentication codesand have asked recipients to visit a web page if they ‘did not request this code’.
Security threats
The web addresses used in the links take unsuspecting users tofake sites, with carefully adjusted URLs such as the https://revoiut.help example on the Which? website that used an ‘i’ instead of an ‘l’.
There have been other variations on the theme, with one text appearing to come from revolut-supportgb.co, but with another web address disguised behind it. Revolut has previously warned of scammers posing as their phone support agents in ablog postat the beginning of January.
The consumer who lost £8,000 called a number that appeared on a fake Revolut Google advert. After being told to resubmit his ID following an email saying it had expired, he used Google to search for a Revolut phone number in order to confirm everything was legitimate.
During the course of speaking to people purporting to be from Revolut, he was told to download a remote access tool called TeamViewer QuickSupport. This gave them access to his mobile phone in order to verify his account, via theRevolut app. As a result, the victim had £7,938 removed from his account. Revolut has since reimbursed the customer in full.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
A spokesperson for Revolut told Which?: “Revolut takes the protection of all our customers extremely seriously. We are fully aware of the industry-wide risk of customers being duped by organised criminals. Our sophisticated and comprehensive anti-fraud systems have a very strong track record of preventing and reporting fraudulent transactions.
To ensure our customers are alert to the risk of fraud, we regularly send alerts and general security advice via in-app notifications, email, social media and our blog. We know how stressful these situations can be for customers and do everything possible to help victims of fraud retrieve their funds.”
The consumer advice website underlines that you should never be asked to share your login details,one-time passwordor asked to install anything on your phone. Similarly, if someone claims to be from Revolut over the phone, ask them to send you an in-app message to confirm that they are a real agent.
Via:Which?
Rob Clymo has been a tech journalist for more years than he can actually remember, having started out in the wacky world of print magazines before discovering the power of the internet. Since he’s been all-digital he has run the Innovation channel during a few years at Microsoft as well as turning out regular news, reviews, features and other content for the likes of TechRadar, TechRadar Pro, Tom’s Guide, Fit&Well, Gizmodo, Shortlist, Automotive Interiors World, Automotive Testing Technology International, Future of Transportation and Electric & Hybrid Vehicle Technology International. In the rare moments he’s not working he’s usually out and about on one of numerous e-bikes in his collection.
Is it still worth using Proton VPN Free?
Don’t search for information on cats at work — you could be at risk of being hacked
Washington state court systems taken offline following cyberattack
