Kuwaiti Shopping Sites Targeted by Sophisticated Hacking Scheme

Kuwaiti banks report a rise in bank card hacking incidents exploiting local shopping sites. Victims unknowingly make purchases that lead to unauthorized transactions, primarily from abroad. Banks argue customers are to blame for sharing OTPs, while victims claim the websites were compromised and misleading about security features. This situation highlights the need for consumer vigilance and security awareness.

In a troubling incident, Kuwaiti banks have noted a rise in customer complaints concerning sophisticated bank card hacking. Fraudsters are exploiting local shopping websites, enabling them to drain victims’ bank accounts through unauthorized transactions, primarily initiated from abroad.

The new hacking scheme particularly targets users of renowned Kuwaiti e-commerce platforms. Customers report making genuine purchases, only to later find their accounts depleted due to unexpected withdrawals often traced back to Italy, while they remained in Kuwait.

The fraud scheme unfolds in several steps: Customers make contactless smart payments on compromised websites. They receive prompts for a one-time password (OTP) and following a purported transaction failure, they are asked to re-enter their credit card information. Subsequently, they discover unauthorized withdrawals appearing in their accounts days later, frequently linked to international transactions.

This alarming trend takes advantage of weaknesses in local e-commerce sites, allowing criminals to replicate card data stored on customer devices. Consequently, the stolen information is utilized for multiple withdrawals, often exhausting the card’s limit before the victim is cognizant of the breach. By the time individuals contact their banks, significant losses have already occurred.

There exists a contentious dynamic between banks and victims regarding liability for these breaches. Banking officials argue that customers are accountable for their security lapses by unwittingly sharing OTPs. They assert that banks, along with the Central Bank of Kuwait, bear no obligation to compensate victims or retrieve lost funds since the transactions were executed with valid OTPs.

Conversely, victims assert that they adhered to secure payment protocols and were unaware of the compromised nature of the websites they employed. They highlight that many sites misleadingly claim compatibility with payment services like Apple Pay, Google Pay, or Samsung Pay when such options are not actually available. This contradiction further indicates that the websites were infiltrated with malware, suggesting that the hackers should be held responsible for the breaches.

To mitigate risk, individuals should remain vigilant and employ protective measures when engaging in online shopping. Additionally, they must verify the authenticity of websites and payment options used to safeguard their financial security.

The recent surge in hacking incidents targeting Kuwaiti banking customers reflects an alarming vulnerability within local e-commerce platforms. Customers have expressed concern over unauthorized transactions following legitimate purchases, while banks position the responsibility on users for compromising their security. The ongoing dialogue raises important questions about accountability in the face of such advanced fraud techniques and underscores the necessity for individuals to take proactive measures in protecting their financial information.

Original Source: www.arabtimesonline.com