Preventing fraud on "WeChat fake red envelopes" and "ticketing phishing sites" during the holiday season

The Spring Festival is approaching, visits and family travels are ushering in, the scam refurbishment method is aimed at people who are about to travel; many social softwares use "send red envelopes" to increase popularity and highlight the holiday atmosphere, and various fake red envelopes with malicious link viruses sneak in. . In this regard, the network security department of the public security organ reminds the general public to be vigilant and keep their eyes open, to effectively prevent online fraud from "WeChat fake red envelopes" and "ticketing phishing sites", and never to cause losses to property and personal information due to coveting small and cheap .

1. Be careful of traps when grabbing "red envelopes"

If you see someone sending a "red envelope" on WeChat, would you just click on it? Watch out! Perhaps there is a "trap" of fraud. The WeChat "red envelope" was originally a form of entertainment between friends and family, but it is now being used by criminals as a new method of fraud.

Case study: WeChat lost 10,000 yuan for grabbing a red envelope and scanning a QR code

According to media reports, Ms. Zhou, who lives in Nanjing, often participates in WeChat's "robbing red envelopes" campaign. A few days ago, one of her "friends" sent her a red envelope, and the red envelope also contained a link to "open a 500 yuan voucher."

Ms. Zhou clicked on the link and found that she had grabbed the first prize of the "500 yuan voucher", immediately clicked on the designated website to receive the award, and entered a lot of personal information such as ID card, mobile phone number, WeChat account and so on. After entering the information, the other party also asked her to scan a QR code. Although Ms. Zhou was hesitant, she decided to scan the code when she thought it was sent by her friend. Just a few minutes after scanning the code, Ms. Zhou received a bank text message, and the bank card was transferred to 10,000 yuan.

Ms. Zhou immediately called her friend to verify the situation. The friend told her that the WeChat was stolen. Ms. Zhou discovered that she was deceived and immediately called the police.

Upon detection by the public security organ, the QR code scanned by Ms. Zhou contained a Trojan horse program. The suspect used a Trojan horse program to steal Ms. Zhou's personal information, and then forwarded Ms. Zhou's payment verification text message through the Trojan, and stolen her 10,000 yuan.

With the popularization of network technology and mobile Internet, criminals can easily embed phishing URLs in interactive interfaces such as WeChat and other apps. Once users open links, their personal information is stolen. WeChat red envelopes are used by many criminals. These people will be hidden in a large number of WeChat groups or circle of friends. By distributing red envelopes embedded in the download addresses of phishing websites and Trojan horse programs, they steal user information and even control users' mobile phones.

Safety Tips: Six kinds of "red envelopes" cannot be robbed

1. Don't touch the red envelopes that require personal information. When receiving the red envelope, it is required to enter the payee's information, such as name, mobile phone number, bank card number, this is likely to be fraud. In fact, regular WeChat red envelopes can be collected by clicking on them, and automatically deposited in WeChat wallets without filling in personal information.

2. Sharing links to grab red envelopes is fraud. Seeing the red envelopes shared by the circle of friends, such as sending phone bills, gifts, coupons, etc., click on the link to request attention first, and you have to share it with your friends. This kind of red envelope is suspected of inducing sharing and fraudulent users, click the report in the upper right corner.

3. Red envelopes grabbed with friends need to be cautious. In the circle of friends, there are a lot of activities to grab red envelopes with friends, requiring a certain amount of money, such as 100 yuan, in order to withdraw cash. Pay special attention to playing this kind of game. Whether the developer of the red envelope page is regular is probably a scam that attracts fans.

4. High-value red envelopes are not credible. The limit of a single WeChat red envelope is 200 yuan, so if you receive big red envelopes such as "666" and "888", you can basically be determined to be a liar.

5. Be alert to the "AA red envelope" scam. There is also a kind of "AA red envelope" to be wary of. Such red envelopes often make slight changes to the WeChat AA payment interface, plus the words "send money" and "cash gift package", which make users mistakenly think that they are receiving red envelopes. WeChat red envelopes have their own exclusive orange-red interface, and do not need to enter the AA collection interface; in addition, users do not need to enter a password to receive red envelopes, click to receive to deposit in WeChat coin purse.

6. The red envelopes and passwords may be fraudulent. If a merchant or friend sends a WeChat red envelope, but you have to enter the password when you open it, you must be vigilant, because this may be a fake red envelope. There is absolutely no need to enter a password when receiving a real WeChat red envelope. Therefore, don't easily click on unidentified red envelopes, coupons, etc. in the WeChat group to avoid the leakage of personal privacy information.

Second, the ticket change scam has a lot of pitfalls

Every holiday travel peak, more and more people choose to order air tickets to visit relatives, and then some fraudulent gangs take advantage of the guise of "special ticket", "ticket change" and so on. "Ticket change" not only has SMS prompts, but also "customer service staff" take the initiative to call, but also "official website" confirmation, such scams make people have to believe. In the new year, the tricks of criminals are also escalating, and the tricks of single-handed tricks are hard to be fooled, so the scammers start to play "combination punches".

Case Study: Advanced Combination Refurbishment "Fare Change" Fraud

Miss Xu in Nanjing encountered such a high-level combination of deception. On the same day, she was already waiting for boarding in the airport waiting hall, and suddenly received a text message from the "airline" saying that the flight she was taking could not take off normally due to mechanical failure. If she changed her visa, she would receive a flight delay fee of 200 yuan.

Seeing this text message, Miss Xu was half-trusted, but her personal information in the text message was accurate. At this time, the airport waiting screen also pops up a prompt for flight delay. Seeing this information, Ms. Xu's doubts gradually dissipated, and she was ready to dial the consultation hotline in the text message to handle the change. At this time, the "customer service" call came by itself. On the phone, the other party first apologized for the flight delay, and then asked Miss Xu to log in to the airline's "official website" to fill in relevant information such as bank cards, saying that she would immediately call Miss Xu's flight delay fee on the card.

So far, Miss Xu opened the "Official Website" link from "Customer Service" without any doubt. However, not only did Miss Xu not get the 200 yuan delay fee, but the 4000 yuan in her card was also transferred away.

safety warning:

Such frauds are very confusing because they involve the disclosure of personal information. When receiving SMS such as "flight cancellation, flight change, ticket refund and change" and other similar content, be sure to verify through multiple channels such as airline customer service phone, airport customer service phone or on-site verification, and do not blindly believe in unknown information And telephone, let alone click to visit the URL in the information.

1. The criminals first “clone” airlines or regular ticket-buying websites, and then distribute false low-price discount ticket information through forums, blogs, Weibo and other channels, and conduct search engine optimization for some popular routes to trick netizens to visit. Once there is a ticket information that is significantly lower than the normal fare, pay attention to the precautions and screening, and be careful of the trap of low price temptation.

2. Although the pages of the fake ticket purchasing website are very similar to the normal website, the overall quality and effectiveness of the website are poor, and even many functions have failed. While you are in a hurry to buy tickets, you can find the vulnerabilities of these websites by careful inspection.

3. In order to quickly divert stolen money, fake ticket purchase websites prefer to use direct remittance. If you encounter a situation that requires users to send money directly to their personal accounts, it must be a fraudulent website.

4. The vast majority of fake ticket buying websites will open customer service phone numbers starting with 400, 9501, and 800, making everyone mistaken for the other party as a regular company. The scammers have taken advantage of everyone's trust in these calls to succeed. Therefore, please do not blindly trust these customer service calls, but verify through multiple channels.