New scam alert: Flash calls replace OTP theft
If victims unknowingly provide these digits, scammers use them to authorize fraudulent transactions or gain access to personal accounts.
Police on Monday issued a warning about a new scam method where fraudsters use flash calls instead of traditional OTP (One-Time Password) theft to gain access to people's financial accounts.
A flash call is an automated authentication method similar to an OTP. Instead of receiving a text message with a numeric code, you get a missed call or a brief phone call from your service provider or financial institution. The last few digits of the calling number serve as the verification code.
In previous scams, fraudsters tricked victims into revealing their OTP codes via phishing messages or fake customer service calls. Now, scammers are exploiting flash call verification in the following ways:
-
They attempt to convince victims to share the last few digits of the missed call number, claiming it is necessary for authentication.
-
If victims unknowingly provide these digits, scammers use them to authorize fraudulent transactions or gain access to personal accounts.
Authorities have urged the public to be extra cautious and follow these safety measures:
-
Never share the last digits of a flash call with anyone, even if they claim to be from your bank or service provider.
-
Do not trust unexpected calls or messages asking for authentication codes or verification numbers.
-
Enable two-factor authentication (2FA) using authenticator apps instead of SMS or call-based OTPs, where possible.
-
Report suspicious calls immediately to your bank and the police.
