Gt previous case edeposit gone kena hack or something

Kdi
Versa
Stash away

yes, this is terrible. i think the scary one is the one transferred the money out with notification or owner knowing.
what if those small amount transferred out, which something dont ring a bell to us also ..
if big amount, we will definitely aware when checking statement, but small amount ....

There may be legit cases where the bank is to blame, but we will never know for sure. No bank will ever admit to something like this as it would cause panic and then bank run.

At the same time, no user will openly admit that they messed up either as it is too shameful.

Do it like Cheque, needs 2 days floating.

Probably to disable instant transfer. And allow IBG which requires 1 day floating.

But as I know, even IBG is used and sent, the transaction cannot be reversed although it is not credited. So louzy system.

Kena few time the scammer called me , so i ask them on the credit card number that i got charged with, apprently it is few year old credit card number, which now already changed.

Maybe next time we can ask them, do you need us to rescue you from the scam center ? because if you see the recent malaysian case in cambodia the guy who broken back and leg shared his testimonial with MCA that few thousand malaysia is there in those scam center. If they dont perform will kena beaten.

Astro AEC 8pm yesterday.


Thee are two types of scams. Macau scam and phone hacking.
Macau scam requires scammer calling the potential victim. The recent cases were mostly phone hacking as reported in the above news media.

The following are some of the precautions you can do:
1) Turn off unknown source APK installation.
2) Activate/enable APP Approve or APP Authorize.
3) Set "View only" for account with substantial balance. (Not all online banking support this feature)
4) Go to settings > permission > SMS, check if any unfamiliar apps are allowed to access your SMS. If yes, deny it.
5) Do not side load any unknown APK into your main online banking phone. Instal it on separate phone if you insist.

is there any bank still provide hardware token for OTP verification?

more and more banks force us to use app authorization nowadays

those kena scam one, no one telling the truth, don't want coporate give their phone to investigate, buat tak tau saja

This post has been edited by wong_86: Jun 15 2022, 10:35 AM

SMS (OTP/TAC/PAC) security is too venerable to breach, that's why banks up the security level to app authorization. At least until the app authorization can be breached again by the hacker.

As for the physical token, it's not very practical. Prone to malfunction, can't replace battery, hassle to bring along and the biggest problem of all... misplaced it somewhere.
Affin bank however, came out with App version token called Affin Secure. Can carry along wherever you go, never out of battery. Physical token has become obsolete.

This is one of the example of scam sms? if we respond by calling the no, then the scammer may access to our phone and even the banking details?

but it's the same app that you are doing your transaction on, i feel dumb that the 2FA is coming from the same source

my aunt got the same SMS this week while she doesnt even have MBB account

Police should form a team to allow for those scam phone calls for report (the number) and catch those who rents the phone number.

Affin secure is a dedicated app just for transaction approval only. Can't do other banking transactions.

This Affin secure apps will receives secured information from Affin sent to registered phone numbers..

If the scammer managed to "hijack" the phone number....???
Just like example this recent s'pore ocbc case?

Why some OCBC customers in SMS scams did not get OTPs
https://www.straitstimes.com/tech/tech-news...id-not-get-otps

Why does an SMS appear to be from OCBC when it isn't?
Why do banks use SMS if they are unsecure?
https://www.google.com/url?sa=t&source=web&...K-rrD9W-ZOowkDi

so nice to see that our neighbor country news are being transparent in telling which bank's customers got scamed

our local OCBC only use app for verification now and no SMS OTP at all

Affin Secure is a digital token that only works on an authorized mobile device. You can approve transaction without the SIM being inserted in the phone.

I am not sure how Affin secure works.
But if no need sim in phone,... How Affin knows that the apps in authorised device?
Will it be like the device that downloaded the apps will then act like those physical token that does not need sim?

Also, does one need to carry the non sim inserted device along with the normal sim card inserted device to do online transaction?

Will it be like carry a normal sim card inserted smartphone to do the transaction together with those secure token (individual tac generating device)?
I am currently using the secure token from pbb,... Yes you are correct to mention that it has some inconveniences.

This post has been edited by MUM: Jun 16 2022, 01:36 AM