stealing one time passcodes is a growing criminal trend. i started investigating how one gang offered to help fraudsters do it with a highly professional automated service. otp agency marketed themselves through the telegram app. they used videos like this to advertise their services while hiding who they were. the group was even on the review site trust pilot. it was a highly rated service. so, how did it work? imagine a criminal client of otp agency has got hold of your details. they try to buy something and when they do, your bank sends you a one time passcode to check that it is you making the payment. at this point, the criminal uses otp agency to trigger
scylla intel, was also on the case. my professional focus is disrupting financially motivated cybercrime. we re not revealing his identity for security reasons. are services like otp agency, are they a one off? i would describe it as a growing market. and whereas fraud is this nebulous term, what s developed now are these services that makes cybercrime incredibly approachable. scylla was looking into a wider network of uk based cyber fraud groups, including otp agency. but after information was shared with the police, otp agency suddenly disappeared. it doesn t seem to have deterred others from offering a similar service. this colourful cartoon looks like a gateway into serious crime using one time passcodes.
realise how damaging was this one time passcode. stealing one time passcodes is a growing criminal trend. i started investigating how one gang offered to help fraudsters do it with a highly professional automated service. otp agency marketed themselves through the telegram app. they used videos like this to advertise their services while hiding who they were. the group was even on the review site trust pilot. it was a highly rated service. so how did it work? imagine a criminal client of otp agency has got hold of your details. they try to buy something and when they do, your bank sends you a one time passcode to check that it is you making the payment.
i discovered an american cyber intelligence firm, scylla intel was also on the case. my professional focus is disrupting financially motivated cybercrime. we re not revealing his identity for security reasons. are services like otp agency, are they a one off? i would describe it as a growing market. and whereas fraud is this nebulous term, what s developed now are these services that makes cybercrime incredibly approachable. scylla was looking into a wider network of uk based cyber fraud groups, including otp agency. but after information was shared with the police, otp agency suddenly disappeared. it doesn t seem to have deterred others from offering a similar service. this colourful cartoon looks like a gateway into serious
at this point, the criminal uses otp agency to trigger a robo call to you, posing as your bank. i ve obtained a demonstration of one of these calls from inside otp agency. it shows just how convincing they can be. john seymore, this is an automated call from halifax bank. they pretend to be calling to prevent fraud. they say if you want to stop the transaction, you need to give them your one time passcode. an authorised payment of £85.23 was made using your debit card ending in 1312. in order to cancel this transaction, please enter the code that you received by text message followed by the hash key after the beep. if you follow these instructions, the criminals will have everything they need to take your money. i was not the only one investigating them.