Sunday, 17th May 2015. RCB taking on DD. Quinton de Kock and Shreyas Iyer at their best. Up came continuous beeps on my mobile. Normally, while glued to an IPL match most of us would not care to look into the mobile right away but the 4 straight beeps made me take a look. Shock it was.
Notification was about 4 transactions amounting to a total of Rs.20450/- which I had not authorized or knew nothing about. Stated "Debit Card Purchase" on E-Vector & Mobikwik. I quickly logged on to my net banking account only to find that my balance was reduced to a mere Rs.93/-.
I had to call the customer care immediately (but as you know it a a big pain waiting to get the staff on line with the long IVR process). Finally ended up speaking to one and managed to block my debit card and net banking facilities.
18th May - Lodged a formal complaint with local police and got a CSR. Community Service Register is more of an FIR but just that FIR are for Cognizable offence and CSR are for those which aren't.
19th May - Handed over a copy of CSR with another complaint to Cyber Crime Cell,
22nd May - Got a response from ICICI stating that they are having things inquired and will let me know the status soon enough.
Still to hear on the status while im writing this. I was told by the cyber cell that CArd skimming at ATM could be a possibility. So beware!!
Similar case:
http://www.thehindu.com/news/national/andhra-pradesh/infosys-salary-accounts-hacked/article7307591.ece
Precautions that's worth:
1. Do not click on URLs given by strangers online for payment
2. Avoid clicking suspect pop-ups notifying discounts of any means
3. Always make sure that the Pay Desk you use for payment is genuine (double check never hurts)
4. Do not save card details in any website for future transactions (not even for Flipkart, Bookmyshow and its likes)
5. Make sure to use your debit card at regular ATM outlets (avoid trying different ones which you have not used earlier)
6. Make sure to use your Credit card in DIP machine against a Swipe machine (chip enabled card are to be used in DIP so as to authorize transaction) but then I was not asked for PIN even in DIP machine few times. Strange!
- DC
