PRIZE SCAM: If you have to pay to get the prize, it's not a prize

Awareness is necessity

Have you ever got any calls stating that you have won a prize or lottery from any online shopping website?

The chances are these calls are fraud

As a Cyber volunteer, I have analyzed some case studies of these kinds of frauds.
Let’s understand how this type of fraud happens !!

The fraudster calls you imposing as an employee from any trusted online shopping site. They try to convince you by giving you the details about your last purchase from the site, with the product and order details.

When a person believes that the fraudster is an employee from the online site, they give them attractive schemes about different prizes like laptop, T.V, mobile phones and give an option to select one prize from them.When you show some interest and select a prize from the mentioned prize, they send us a link as SMS. The link sent is the fraud link which asks for our registration details like bank details as well as personal information. While registration they ask us to pay just the shipping and handling charges to get it delivered to your place.After all the process and paying the fees you find out there is no prize.

One such case happened recently where a victim lost their ₹ 96,000/-. For such scams, tracing back fraudsters is very difficult.

So the way we can avoid such crime is by:

Be aware and never believe in this kind of fraud call.
No shopping website calls informing about the prize or lottery.
Never give personal details, bank details or OTP over the phone to anyone.
Ignore messages and calls of lottery and lucky draw. especially if you have not entered any lucky draw.
Inform about such crimes on the government portals mentioned:

All over India- : http://cybercrime.gov.in
For Gujarat- :cc-cid@gujarat.gov.in
For cybercrime helpline- :1800-1800191 or 155260
For financial fraud emergency number- :100/112

Whenever we need emergency help for any physical crime we approach the police department by dialling 100, the same should be done in the case of cyber crimes too.

Comments

How to Pass CompTIA Security+ SY0-701 in 2 Months (839 Score Breakdown + Resources)

How I Scored 839/900 on CompTIA Security+ SY0-701 — 2-Month Prep Strategy That Actually Worked Score: 839/900 | Exam: CompTIA Security+ SY0-701 | Prep Time: 2 Months | Total Questions: 76 (including 3 PBQs) I'm not going to sugarcoat it — CompTIA Security+ is not easy, but it is very passable with the right strategy. I cleared it with an 839 out of 900, and in this post I'll share exactly how I did it, domain by domain, so you can replicate the approach without wasting time. My 2-Month Study Plan Month 1 — Domain-by-domain study: Read, take notes, and build comparison tables and mnemonics for tricky concepts. Month 2 — Heavy practice testing: Full focus on practice tests and PBQ simulations. Time management drills every session. The biggest mistake people make is spending 90% of their time reading and only 10% practicing. I flipped that in month 2 — and it made all the difference. Domain 1 — General Security Concepts What to focu...

ઓટીપી, ડેબિટ કાર્ડ, ક્રેડિટ કાર્ડ દ્વારા થતા બેન્ક ફ્રોડ પ્રત્યે જાગૃતિ અને અગત્ય સૂચના : સાવચેત રહો

Awareness is necessity જ્યારે પણ તમે ઇન્ટરનેટ પર વ્યક્તિગત વિગતો શેર કરતા હોય ત્યારે સાવચેત રહો. " "જ્યારે પણ તમે તમારા મોબાઇલમાં એપ્લિકશન ઇન્સ્ટોલેશન દરમિયાન 'allow' પરવાનગી આપો છો ત્યારે સાવચેત રહો." સાયબર સ્વયંસેવક તરીકે, મેં આ પ્રકારની છેતરપિંડીઓના કેટલાક કેસ નું અધ્યયન કર્યું છે. ચાલો હું તમારી સાથે એક કેસ સ્ટડી શેર કરું !! એક વ્યક્તિ OTP(વન ટાઇમ પાસવર્ડ) ને લઈને તેના મોબાઇલમાં સતત મેસેજીસ મેળવતો હતો. આ OTP તેના મોબાઇલ પર ઇન્સ્ટોલ કરેલા એક તૃતીય-પક્ષ એપ્લિકેશન દ્વારા આપમેળે કોઈ બીજા સાથે શેર થઈ રહ્યા હતા અને અચાનક, તેના ખાતામાંથી પૈસા ડેબિટ થયા, અને 7-8 ટ્રાન્ઝેક્શન સંદેશાઓ પછી, તેનું એકાઉન્ટ સ્ટેટમેન્ટ ખાલી હતું. પીડિત દ્વારા પ્રાપ્ત કેટલાક સંદેશાઓ અહીં છે. The secret OTP for online purchase is 222343 on card ending XXXX. Valid till HH:MM:SS. Do not share OTP for security reason. Rs. 9999 is Debited to A/c...XXXX on dd-mm-yy HH:MM:SS( Avlbl Bal Rs XXXXX) At POST TID-XXXXXXXXXX,ref-XXXXXXXXXXXX. TollFree XXXX...

Bank fraud Awareness : Be careful about ATM card fraud , Debit card fraud , Credit card fraud

Awareness is necessity " Be careful whenever you are sharing personal details on the Internet." "Be careful whenever you are giving permission 'Allow' to applications during installation in your mobile." As a Cyber volunteer, I have analyzed some case studies of these kinds of frauds. Let me share one case study with you !! One person was getting messages continuously in his mobile regarding OTP ( One Time Password). These OTPs automatically shared with someone else by any third-party application installed on his mobile. That someone else can be considered as cybercriminal in this case. And suddenly, money gets debited from his account, and after 7-8 transaction messages, his account statement was empty. Here are some messages received by the victim. The secret OTP for online purchase is 222343 on card ending XXXX. Valid till HH:MM:SS. Do not share OTP for security reason. Rs. 9999 is Debited to A/c...XXXX on d...

Splunk in Plain English — A Practical SOC Guide

Imagine you are a detective, and every device on your network — servers, laptops, firewalls, cloud systems — is leaving footprints everywhere. The problem is there are millions of footprints every single day, scattered across thousands of different files. Your job is to find the one set of footprints that does not belong. That is exactly the problem Splunk solves. It is the platform that collects every footprint from every device, puts them in one place, and gives you the tools to find the suspicious ones — fast. In this blog, I will take you through Splunk from absolute scratch — what it is, how it works under the hood, how to write SPL queries like a pro, how to build dashboards and alerts, how to set up a SOC lab, and most importantly, the interview questions you will definitely face if you are going for a SOC analyst role. I have completed the TryHackMe Advanced Splunk rooms including SPL exploration, SOC lab setup, dashboards and reports, data manipula...

Exploiting and Securing GitLab: Lessons from a TryHackMe Lab

Perimeter security isn’t enough—because sometimes the threat is already inside. In this blog post, I’m sharing what I learned from a hands-on TryHackMe lab on GitLab security . It revealed how a simple internal misconfiguration—like open registration or overly permissive repo access—can lead to major data exposure inside an organization. I’ll walk you through the red team perspective on exploiting a misconfigured GitLab instance , and then flip the script to explain how you can secure your own internal build systems . Scenario: Inside the Walls of a Large Organization Think of a large organization—like a bank—with thousands of employees and multiple teams handling development, IT operations, and security. To keep intellectual property (IP) secure, these organizations often host self-managed GitLab instances on their internal network. But here’s where things can go wrong: GitLab is hosted internally Allows anyone on the internal network to register Has some projects...

Job Scams / Telegram Scams in India

Awareness is necessity Job scams and telegram scams have become a rampant issue in India, with many unsuspecting individuals falling victim to these fraudulent activities. These scams not only cause financial loss but also result in emotional distress and a loss of trust in online platforms. In this blog, we will discuss the ongoing job scam and telegram scam in India, and provide some tips on how to identify and avoid falling prey to these scams. The job scam in India has been on the rise, with scammers posing as recruiters or employers offering lucrative job opportunities. These scammers often target job seekers who are desperate for employment and are willing to take any opportunity that comes their way. They use fake job postings, promising high salaries and attractive benefits to lure in their victims. Once the victim is hooked, they are asked to pay a fee for processing their application or for other reasons. In reality, there is no job, and the victim en...

Cybermini Articles

Search This Blog