How Cyber-criminal stole money from PhonePe Wallet app

Last updated on July 26th, 2020 at 03:32 pm

Mr. Dhillon received a phone call, the phone number was not saved in his contact number so the Truecaller app showed the name, Kishore Khanna.

Incidentally the name Kishore Khanna was also name of Boss of Mr Dhillon so he thought that his Boss is calling him. He received the phone call and said hello and was talking in very formal way.

Fraudster

The caller, who actually was cyber-criminal, told Mr. Dhillon “ I have to receive Rs 25000 from my relative urgently and he wants to pay it through PhonePe wallet app and I don’t use it but I know you are using it so can I tell my relative to transfer the amount in your PhonePe wallet? I will collect the money from you tomorrow in the office.

Mr Dhillon can’t refuse to the caller pretending him as his Boss. He agreed. Still the caller kept him on the call and now he told him “ Ok, Mr Dhillon, thank you, my relative is on other call, he is sending the money to your PhonePe Wallet, you will receive few messages, please tell”.

Mr. Dhilling, while holding the phone call, told the messages received on his phone number and the caller again thanked him and disconnected the call.

After a few hours, Mr. Dhillon received a few messages from his Bank account and found that Rs 1.85 lakh has been debited from his account. Now he realized the fraud.

Actually, cyber-criminal has already collected preliminary information about Mr Dhillon and name of his Boss Mr Khanna so cyber-criminal saved his number in Truecaller app as Mr Khanna and made phone call to Mr Dhillon.

While keeping busy in conversation, the cyber-criminal copied the PhonePe Wallet account of Mr. Dhillon and activated it by codes received on the phone of Mr. Dhillon.

This way, Mr Dhillon lost his money to the cyber-criminal

You may listen conversation of cyber-criminal and victim below.

Live recording of Victim

PhonePe clearly alerts its users that they must not share confidential details like card number, expiry date, PIN, OTP, etc. with anyone. They also alert that you do not have to ‘Pay’ or enter your UPI pin to receive money on PhonePe.

Leave a Reply