Rahul Mehta Gandhinagar LsCandidate
which of the following card / BHIM / PayTm hacks are possible / impossible ?
(A) Smart phone dealer changes the android code or adds a chip or installs an app which informs all id / passwords to him
.
Is it possible for dealer / retailer or his staff to
.
(A.1) open the smart phone box
.
(A.2) make small changes in andorid OS or install an app
.
(A.3) then pack the phone as it is
.
(A.4) The app has function that it will report id , password etc to some server owned by that dealer / retailer etc
.
Now a user who is less tech aware will know that the smartphone he bought has already been tempered at OS or app level
.
So can the hacker siphon money out of the end user's bank account ?
.
-----------,
,
(B) The smart phones in India are made by assorted Chinese / Korean / Taiwaneese / US companies. Is it possible for them to put chip / firmware (like bootloader) / OS that can report end users' is / passwords etcto hackers' servers ?
.
.
-----------
.
(C) Such credit card frauds have actually happened --- the theif managed to get card number and also see CVV . And he also managed to se the PIN (could be waiter who is close to credit card user). Then after stealing the credit card, he made transactions (like buying goods at shopt etc). In such cases, credit card company does NOT refund the money because credit card company says that "how can thief know the PIN"? And cyber crime police doesnt recover the goods etc in even 5% cases. But apps like BHIM are immune to this type of fraud.
.
In USA, if the card owner says that he didnt do the transaction, then card company has to bear the cost OR prove that the card owner is making false statements PERIOD.
.
-----------
.
(D) Another type of credit frauds which actually happens is --- ther person doesnt physically steal the card but manages to get card number and also CVV. Then he steals the phone on which OTP SMS comes. And before the person disables the sim card and gets a new sim card, the thief can do several online credit card purchases. Even if the smart phone has password lock, this doesnt help. Because the thief can put the sim card in a new phone. But apps like BHIM are immune to this type of fraud.
.
-----
.
(E) any other way in which phone seller or phone repair guy can defraud the end user and siphon money from end user's account?
.
----------
.
Knowing about all these ways is important because unlike USA, the credit card company or bank does NOT cancel the charges that occurred fraudulently !!! And IPS etc in India takes months to even give first hearing , and courts takes years to handle even simple cases. The compensation rate and recovery rate in online frauds isnt published by govt !!! IPS are trained to give answers / warning that will discourage the victim to even file the complaint !!! (eg in one case, the IPS told the victim that "see , if later the complain is found to be false then you wll be imprisoned" !!!) This is to create am illusion that card / online payment frauds dont happen !!
.
So lets make a list of ways by which thiefs etc can steal money from card or bank account owners with help of bank staff or phone sellers or phone repairers and also manufacturers