Another bank faces data theft

Financial institution suspends international transaction services

KARACHI:

Overseas thieves have managed to rob a leading bank in Pakistan through internet banking, as they used compromised data of a number of debit cards to conduct fraudulent financial transactions in foreign currencies.

The event made the financial institution suspend the services of international financial transactions through debit cards of almost all the customers.

“The fraudulent transactions were conducted in dollar denominations (instead of Pakistani rupees).”

“We are under no cyber-attack. No data breach or hacking has happened,” a United Bank Limited (UBL) high official confirmed to The Express Tribune.

“But, yes, we have received complaints from some of our customers for fraudulent transactions through their debit cards,” he said, adding most of the fraudulent transactions happen after customers unintentionally share their secrets including passwords and PIN codes with unknowns.

“Those customers who lost money not because of their fault would get their money back (as per prevailing banking and insurance laws).”

Another official of UBL said the fraudulent transactions took place last week. “Most of the debit cards running to MasterCard networks were subject to the fraudulent transactions.”

Now, anyone who would like to use a debit card for internet banking purposes will have to get the service switch-on first. Otherwise, they will be denied due to suspension of the service for safety purposes.

“Multiple fraudulent transactions of small amounts from several accounts took place,” an official of the bank was quoted saying at an analysts briefing on financial results on Monday.

It, however, remained unknown as to how much money from how many bank accounts was robbed by the cyber criminals operating from abroad.

Earlier, the Federal Investigation Agency (FIA) initially reported that it had received complaints of fraudulent financial transactions from customers of three private commercial banks operating in Pakistan.

Later on, industry officials, however, only named UBL as an affected bank by the cyber criminals.

Cyber criminals hatched frauds through Google search engine.

“My UBL Mastercard got hacked on April 19, 2022 and $65 were deducted out of the blue before Iftar time,” Sohaib Irfan said on a social media platform.

“I immediately transferred all the money to a friend’s account and registered a complaint with UBL customer support and they blocked my card temporarily.”

“I am still getting texts of failed transactions due to blocked cards like someone is trying over and over again.”

“I have filed the dispute on April 20, I want you to reverse the unauthorised transaction. I have noticed many other users facing the same issue within the past week so it would be better if we report this to the FIA.”

Shuah Mir said, “yeah we will trust (the bank) when we get our money back, instead of using delay tactics UBL should reverse those unauthorised transactions which took place due to data breach”.

Khan Sher Ali Khan said, “Excellent, good job UBL staff!”

This was not the first time a bank operating in Pakistan became subject to cyber-crime.

Earlier, the same bank and others including state-owned National Bank of Pakistan (NBP), Habib Bank Limited (HBL) and BankIslami in the private sector became subject to cyber-attack or fraudulent financial transactions through different means.