Skip to main content

e-SIM fraud : All you need to know about e-SIM and SIM swapping fraud

Awareness is necessity

Ever heard about the place, Jamtara? Many of you must have seen the famous series "Jamtara: Sab ka number ayega" on Netflix. It is located near Jharkhand's capital Ranchi. This place has become a hub for phishing and bank fraud.

Recently, Jamtara has come in the limelight because this place's fraudsters have started a new type of crime/ fraud, i.e. e-SIM fraud.


Do you know what eSIM is?

e-SIM stands for the "Embedded Subscriber Identity Module." You don't need to buy a telecom operator's SIM card separately and insert it into your mobile. e-SIM is a part of your smartphone's hardware. This e-SIM chip comes pre-installed on your smartphone. Its working is the same as our standard SIM, which saves information like IMSI number, some contact details etc. e-SIM is re-writable means previous telecom operator related details can be erased and new information can be written again by a new telecom operator.

This type of fraud can empty your bank accounts in seconds. This e-SIM fraud racket has started to spread all over India in recent times. Five people have been arrested in connection with the e-SIM racket. Police have suspected that they have access to over 300 nationalized and private bank around Punjab, Jharkhand, Haryana, West Bengal, Telangana and Bihar.

What are the tricks used by fraudsters to attack?

Below is the modus operandi of the e-SIM fraud racket explained by INDIATV news in their article.

  1. Jamtara's fraudsters first collect a series of mobile numbers. Then these thugs send a message stating that "your card will be blocked in 24hours if KYC details are not updated."
  2. Then they contact them via call imposing as customer care executive of any telecom operator that provides e-SIM service. In India, it is mainly airtel.
  3. Users are then asked to forward an email ID (sent by the fraudsters) to that particular telecom operator's customer care.
  4. The email ID belongs to the scammers so that they can register their email IDs to access the user's bank information. Once the message is sent, an auto-generated message is received regarding the e-SIM activation.
  5. Then another message is received containing a link to a Google form asking users to fill in details for the KYC updating. Once users fill in their details that include the bank account number.
  6. The e-SIM is activated, and a QR code is sent to the fraudsters (via email) to access the user's phone number as the physical SIM card gets blocked.
    7. This way, the scammers can use the phone number to get OTPs and enter the banking details in e-wallets to steal money from people.

Recent cases related to e-SIM swapping fraud

In India, people aren't aware of e-SIM, and fraudsters are taking advantage of this. The scammers are swapping the physical SIM which is present in the victim's mobile device with eSIM of the same number that will be with scammers.

The cyber cell of Hyderabad has received more than three complaints received between 14/07/2020 to 22/7/2020 regarding the same type of fraud. Modus Operandi is the same in all cases. At last, the victim received an auto-generated message from Airtel SIM card got blocked, and an amount of Rs.9, 20,897/- has been deducted from his bank accounts. Similar kinds of two cases occurred in the same month where the amount of Rs.5, 94,799/- and Rs.1, 03,990/- were deducted from the victims' accounts. Hence, the victims have requested the police to take necessary action.

How to stay safe from eSIM scam?

  1. Don't believe any fraudulent messages. Telecom companies never send such messages until you have requested to convert your SIM to e-SIM.
  2. Never submit bank details, passwords through Google forms or over calls.
  3. If someone calls you to ask about KYC details or update it, DO NOT give any details.
  4. Read auto-generated emails and messages carefully.
  5. If any updates or changes are to be done in KYC, visit the nearby store.
  6. Never share your computer screen or mobile screen with unknown by using Any desk or Team Viewer applications.
  7. DO NOT forward any emails or messages as instructed by the fraudsters. If you feel it is any scam or suspicious activity, contact the customer care and send "NO SIM" to 121 to stop the e-SIM activation process.

So the motive behind this article is to spread awareness about this kind of eSIM scams. As cybercriminals are becoming very smart day by day, they are using new ideas to make people fool.

Labels:

Comments

Post a Comment

Please do not enter any spam link here.

Popular posts from this blog

How to Pass CompTIA Security+ SY0-701 in 2 Months (839 Score Breakdown + Resources)

How I Scored 839/900 on CompTIA Security+ SY0-701 — 2-Month Prep Strategy That Actually Worked Score: 839/900  |  Exam: CompTIA Security+ SY0-701  |  Prep Time: 2 Months  |  Total Questions: 76 (including 3 PBQs) I'm not going to sugarcoat it — CompTIA Security+ is not easy, but it is very passable with the right strategy. I cleared it with an 839 out of 900, and in this post I'll share exactly how I did it, domain by domain, so you can replicate the approach without wasting time. My 2-Month Study Plan Month 1 — Domain-by-domain study: Read, take notes, and build comparison tables and mnemonics for tricky concepts. Month 2 — Heavy practice testing: Full focus on practice tests and PBQ simulations. Time management drills every session. The biggest mistake people make is spending 90% of their time reading and only 10% practicing. I flipped that in month 2 — and it made all the difference. Domain 1 — General Security Concepts What to focu...
Post a Comment
Read more

Bank fraud Awareness : Be careful about ATM card fraud , Debit card fraud , Credit card fraud

Awareness is necessity " Be careful whenever you are sharing personal details on the Internet." "Be careful whenever you are giving permission 'Allow' to applications during installation in your mobile." As a Cyber volunteer, I have analyzed some case studies of these kinds of frauds. Let me share one case study with you !! One person was getting messages continuously in his mobile regarding OTP ( One Time Password). These OTPs automatically shared with someone else by any third-party application installed on his mobile. That someone else can be considered as cybercriminal in this case. And suddenly, money gets debited from his account, and after 7-8 transaction messages, his account statement was empty. Here are some messages received by the victim. The secret OTP for online purchase is 222343 on card ending XXXX. Valid till HH:MM:SS. Do not share OTP for security reason. Rs. 9999 is Debited to A/c...XXXX on d...
3 comments
Read more

Splunk in Plain English — A Practical SOC Guide

Imagine you are a detective, and every device on your network — servers, laptops, firewalls, cloud systems — is leaving footprints everywhere. The problem is there are millions of footprints every single day, scattered across thousands of different files. Your job is to find the one set of footprints that does not belong. That is exactly the problem Splunk solves. It is the platform that collects every footprint from every device, puts them in one place, and gives you the tools to find the suspicious ones — fast. In this blog, I will take you through Splunk from absolute scratch — what it is, how it works under the hood, how to write SPL queries like a pro, how to build dashboards and alerts, how to set up a SOC lab, and most importantly, the interview questions you will definitely face if you are going for a SOC analyst role. I have completed the TryHackMe Advanced Splunk rooms including SPL exploration, SOC lab setup, dashboards and reports, data manipula...
Post a Comment
Read more

How to Protect ourselves from Online Banking frauds: Tips & Ticks

Awareness is necessity Nowadays, Online banking frauds are increasing day by day, and awareness about Internet use, Internet Security and cyber crime can be helpful in mitigating cyber crime. So here I am sharing some security guidelines you should follow during bank transactions as given by Delhi Police. Safe Bank Transaction Tips: Always do banking transactions on self-computer and mobile devices, installed with original operating system. Use the latest Antivirus software in order to detect and stay protected from most of the threats and vulnerabilities in the applications installed on computers. Never disclose ATM PIN codes and OTP “One Time Password” sent by the bank through SMS or on Email with anyone, even if he is an employee at the bank, as bank never ask you about the codes of your account or any credit card details. Avoid using public computers for making banking transactions. Avoid electronic banking transactions if you are connected to the Internet via...
Post a Comment
Read more

Deep Dive into Cybersecurity: Security+ Level Knowledge Without the Certificate

📚 My Cybersecurity Learning Journey Key Topics from a 17-Hour Security+ Course 🔹 CIA Triad Explained Confidentiality: Ensuring that sensitive data is only accessed by authorized users. This is often achieved using encryption and access controls. Integrity: Ensuring data is accurate and untampered. Techniques like hashing, checksums, and digital signatures help validate that data hasn't been altered. Availability: Making sure systems and data are accessible when needed. Achieved through backups, redundancy, load balancing, and fault-tolerant design. 🔹 Types of Threats Malware: Includes viruses, ransomware, worms, and trojans that compromise devices or networks. Social Engineering: Manipulating users into giving up confidential info. Example: Phishing emails. Insider Threats: Employees or contractors misusing access, accidentally or intentionally. Advanced Persistent Threats (APTs): Long-term targeted attacks, often by well-funded threat actors. Zero...
Post a Comment
Read more