Cyber Crime Vigilance: February 2013

RTGS - Online Fraud

Recently we came across a cyber fraud in the later part of December 2012 where the money was robbed from the account of a Co-operative Bank in a Nationalised Bank using RTGS.

(http://articles.timesofindia.indiatimes.com/2012-12-27/mumbai/36021011_1_real-time-gross-settlement-rtgs-bank-customers?goback=%2Egmr_4770864%2Egde_4770864_member_205601627)

After this there is no news on the above subject. Further investigation and its outcome are not known. The Bank’s names were also withheld.

Again on 2^nd February 2013 one more fraud involving RTGS came to surface and in both the cases the amount touches crore rupees.

(http://articles.timesofindia.indiatimes.com/2013-02-02/mumbai/36702648_1_bank-account-bank-spokesperson-transactions)

Some of the questions that haunt me day in and day out are:

Are we heading in the right direction?
Whether, really the regulators/banks have given a very deep level of thought to the safety and security of money deposited with the banks by its customers?
Whether there is a well defined policy in the Banking industry/RBI, protecting the interest of the customers? Response time etc.
Whether the Banks have sensitized their call center executives/grievance redressal staffs about quick action to be taken in case of a complaint about fraudulent transaction?
Whether the common man should opt out of Online banking in the absence of adequate safety and security in the banking system?

What is Real Time Gross Settlement (RTGS)?

It is the fastest way of transferring money from one bank to another on a real time in the Banking system. This payment is final and can not be revoked.

As per the vision document on payment and settlement systems vision document 2009-2012 of RBI “Safety, security, soundness and efficiency of the payment systems assume critical importance from the angle of systemic stability”

RTGS is considered as one of the safest and fastest mode of money transfer considering its various checks / control systems.

RTGS Remittance:

This can be done in two ways

Giving a physical request for transfer of money.
By online banking.

The following information is required to remit money through RTGS:

Amount to be transferred.
Account no. to be debited.
Name of the beneficiary bank.
Name of the beneficiary customer.
Account no. of the beneficiary customer.
IFSC code of the receiving branch.

Useful information to Criminals for RTGS fraud:

Your bank account no.
Your specimen signature. (if he uses the RTGS form for transfer of money)
Your username and password of online banking. (if he uses online banking for transfer of money)
Mobile no. registered with the bank. (Criminal had not deactivated the SIM card of the victim in this case.)

Mulund Case:

When it happened? The victim was in his office and he received SMS alert of RTGS transaction taking place and within a span of 45 minutes 1 Crore was stolen from his account.

Poor initial response: In his complaint the victim said when he “contacted the bank to freeze further transactions from my account, it asked that he first submit a police FIR"

Golden Hour: In such a horrifying situation whether the person should contact the Bank and stop further loss or he should go to the police station physically and lodge a formal complaint giving more time to the cyber criminals to clean his account.

No clear policies: This is where the Banks lack clear policies. The call centre staffs should be sensitised and any complaint of fraud should be attended by senior officials who can take decisions instantly to avoid further damage.

Investigation: Let us start this conversation with a Pat on Mumbai Police who have discovered the trail within a short time by arresting 11 persons and in the process teaches us a lesson on the basics of Banking.

The stolen money was transferred in 12 different account.

The 1st person called Periera was arrested whose account had only ` 600/- for the past 6 months and suddenly a credit of ` 30 Lacs appeared.

Bank’s alert monitoring system should detect such transactions i.e. unusually large credit and prompt action needs to be taken.

Another man involved when visited a cooperative bank to withdraw the stolen money slipped away before the police arrived on suspicion.

The Bank should train their staff in handling a fraudulent person in such a situation.

Rs. 39.50 Lacs was withdrawn from 4 different accounts. As per Police officers the said 4 accounts were opened with fake documents.

Banks has to increase their CASA to avail cheap funds and in the process violate KYC norms prescribed by RBI. This is the very basic step in Banking and also the main loophole in Banking Fraud.

Investigators have found that bank accounts were opened using fake documents and identities viz.. PAN card, voter’s identity card, electricity and telephone bill and stayed in rented premises.

Just like the Background verification is done before disbursing loan even for opening bank account Background verification needs to be introduced by the Banking industry to avoid such happenings.

The accused had used cyber café in commiting the fraud.

Strict regulations need to be enforced for cyber cafes.

A new rule of keeping the soft copy of photograph of the person using cyber café In addition to verifying ID proof needs to be introduced. This may help police in their investigation and deter cyber criminals.

One more pat for the Police – While searching for another culprit at Malad the Police found that he left the residence 2 years ago still the police team verified the room in which he stayed 2 years ago and found a wedding invitation of him containing true identity and another address. This led to his arrest.

While doing any investigation do not build a mental block like “this is not possible” Had the Mumbai police left without searching the room his arrest would have been next to impossible.

This person had procured 2 PAN cards in different names and used the same as KYC document to open bank accounts.

Caution: Till the time this is solved, please protect your username, password, account no. and specimen signature.

NEWS LINK:

http://www.business-standard.com/india/news/rbi-to-quiz-yes-bank-tomorrow-over-cyber-fraud/500864/

http://www.dnaindia.com/mumbai/report_vasai-resident-held-for-rs1-crore-fraud_1795604

Cyber Crime Vigilance

Monday 4 February 2013

Cyber crime involving RTGS

RTGS - Online Fraud

Know Me

Cyber Crime Topics