Transworld Tech Blog

Of Phishes, Clones and Cons

2009-01-18T19:37:00Z

Its Monday morning. Ugh. Turn on your computer and check that mail! What’s this?

“In accordance with new KYC [Know Your Customer] norms, please login to your bank account by clicking on the link below and update your personal details. Thank you for your cooperation.”

Oh well – you click the link, the bank’s home page opens, you key in your user id and password and ….. ‘Network Error!’ Hmmm… something wrong with the website. You try again. And then forget it – you’ll do it another time.

Ah, never mind. End of the month – you get your bank statement and …. Hey wait a minute! What are all these transfers and withdrawals? Hands shaking, you call the bank [helpline, dial 1 for English, 2 to cry, 3 to die…] and “Sorry sir, these are withdrawals you have made with your user id and password online”. But.. but “Thank you for calling the Left bank of the Ganges, you were talking to Unhelpful Kumar, have a nice day.” Nice day?

That email was a con, leading you to a fake website, a clone of your bank’s page [and a very good one], leading you on to giving your user id and password to the crook at the other end, gleefully waiting for another sucker to bite the dust.

Welcome to the world of online fraud - You’ve just been phished!

Another time, you get a call from your credit card bank, asking if you’ve made any online purchases recently. You think about it and say “I may have – a few dollars worth of magazine subscriptions or an email account payment.” Well sir, you will be pleased to learn that your online purchases at Paypal to the tune of $2150 [Rs. 1 Lakh] have been honored by the credit card issuer.

Did’nt make that purchase? Welcome again to the world of online fraud – your card has just been misused and the bank expects you to pay!

Every time you give out your personal details [and you need to that for everything – a driver’s licence, that passport to Indian Officialdom, our famous ration card, a cellular phone, an insurance policy et al], you are inviting someone to take you for a ride. These are all the details that are needed for a paying bank to “verify” the user of your credit card or bank account.

Use your card at a restaurant, a store or worse, provide a photocopy to a hotel or vendor for “record”, you are, as the saying goes, literally asking for it. A copy of the card and your mailing address is all that’s needed to put you in the doghouse. So what do you do? Stop using your credit card or your bank account? Not a bad idea in these times - but it doesn’t work for you, does it?

A few simple precautions and a basic knowledge of the law will certainly minimize damage. Do not part with your personal information to an agent, salesperson or an indirect channel like that nice car loan agent. If you have to, provide that information directly to the authorities concerned. And for god’s sake, you NEVER need to give out your user id and password to anyone, not even to the nice guy at the bank – not even your home internet password.

Most people use easy to remember passwords – their date of birth combined with their name or that of some one close to them. A patsy for even a novice hacker! A strong, difficult to break [no such thing as unbreakable] password would have a combination of random letters, alphabets and even special characters like a +. Change your passwords regularly and don’t share them!

Do not access your bank accounts from other people’s computers; most certainly not from cybercafés. Windows has an unhealthy habit of ‘remembering’ passwords and user names – note how the user name automatically gets filled into the box when you put in the first character.

Memorise your ids and passwords [I know, I know – easier said than done] or if you HAVE to write them down, please lock them away. Keep a list of your card numbers under the same lock and key, incase you have to report their loss. Try not to leave those keys around the house! If you travel, keep them with someone you trust – just like your will.

Don’t answer emails like the one above – no bank needs you to provide them with your user id and password by clicking on a link – they already have your details. Carefully check the spelling of the link – a phish ALWAYS has a different link. If it was the same as your bank’s, it would take you to the REAL page! Its safer to type in the link yourself when you want to login to your account.

If you DO get phished or conned, report it at once and DISPUTE the withdrawals or charges in writing. The Reserve Bank of India requires your bank to reverse the charges when disputed by you, pending an investigation. You do NOT need to pay them and then have your complaint heard, in spite of what the bank tells you.

Once you claim that the charges or withdrawals are fraudulent, it is for the bank to investigate and prove that the charges have indeed been incurred by you. Provided you have exercised reasonable caution, you cannot be held liable for a fraudulent withdrawal or charge.

A delay in reporting the fraud could end up making you liable – you must show that you have reported it at the first and reasonable available instance. Keep the card, even after you have it blocked – you will need to produce to show that you still have it in your own possession. Charges on a lost card are your liability till you report the loss. Some banks will insure you for that kind of loss or offer a limited liability plan.

If you are unfortunate enough to have a relative or friend steal and misuse your card or bank id, you will probably decide to grin and bear it – the bank isn’t going to let you off the hook.

All said and done, if you do not throw caution to the winds and exercise reasonable security, you will probably have only the headache and perhaps some heartache to contend with – a small price to pay for the freedom and flexibility that the internet gives you.

Satyam's Satya - Living with insecurity

2009-01-09T14:00:00Z

If there is one thing that is definite about life, it is uncertainty. For the shell shocked, dazed and stumbling Satyam stakeholders, there was little difference between the terrorist attacks in Mumbai and Ramalinga Raju’s mea culpa.

In an instant, very like Hiroshima, hundreds of thousands, if not millions, of lives have been affected, nest eggs, savings, educational plans and even life insurance policies (yes, they invest in Satyam too!) have been vaporized or dramatically eroded to next to nothing.

And very like Hiroshima, the damage will continue to affect and afflict our future generations, eating away like a disease at the very fabric of what we perceive to be our social security system.

Our children and their children are already handicapped, challenged even before they are born, by the fact that their very fundamental education and childhood is now directly in jeopardy. And so are the aged and elderly, the retirees and their parent dependants – all bereft of their little pensions and savings.

When the terrorists hit Mumbai, it was hard to believe that a handful of motivated and dedicated foreigners could bring this massive city and the country to a standstill – our perceived circle of safety was broken, violated with impunity and still remains that way.

Now another hit – our perceived circle of safety, our Indian citadel of IT prowess, our super Indian-brain’s ability has been again hit – this time, by just one man, who decided to “ride a tiger” and then “could’nt get off!”

This ‘great leader’ worked quietly behind the scenes for years to deliver the coup de grace in one fell swoop – how different is he from Kasab and his overseas bosses in the ISI, who staked out the city and practiced their ingress so many months before the real thing?

I recall the story of the CEO’s driver killing his boss in Noida last year – because he sacked him from his job for stealing! He and his cronies just stopped the car on the road and bludgeoned his erstwhile boss to death – on a public road, not very late in the evening.

These incidents have made us question our own personal circle of safety – does it even really exist? As the CEO of Transworld, a Pune based Technology Company, I have the advantage of using my own safety and security products – products that our multi-national customers use to protect thousands of lives on the road and highways everyday.

But will a safety device like our Mobile Eye GPS tracking system really protect us from terrorism from the likes of Kasab and Raju? Perhaps not – but I know that by using something like the Mobile Eye, I am eliminating one small uncertainty, one risk less to live with, one more chance at life without strife.

While that great permanent feature of our lives, Insecurity, will continue to live on, we can substantially reduce its effects with small and definite steps, steps that tell our loved ones, our co-workers and colleagues – we care about you.

I will always remember something that an executive from Castrol-BP, a long standing Mobile Eye customer and a pioneer in Road Safety, said “What is the value of an accident that did NOT happen?”

Mobile Tracking

2006-05-05T18:09:00Z

Welcome to our new blog site - feel free to post comments, suggestions and complaints! Mobility does make friends.