DStv scam warning
Malicious actors are posing as MultiChoice staff offering DStv Rewards to try and steal money from customers by infecting their devices with malware. One victim lost R48,000 through the scam.
Speaking to 702, consumer journalist Wendy Knowler explained how Mpumalanga resident Witness Mjoli fell victim to a scam through which the caller got him to unknowingly install malware on his smartphone.
Around September this year, Mjoli received a call from a woman claiming to be from DStv. She explained that she would help him claim his DStv Rewards.
It should be noted that DStv has an extensive rewards programme. However, subscribers can only access their rewards through the MyDStv app.
Mjoli explained that the caller kept him on the phone for around 10 minutes, during which she got him to click on an image link, read out a pin he had received, and open his selfie camera.
This was when his phone froze. Once he was able to access his device and banking app again, he noticed that R48,000 had been taken from his account, most of which was taken from credit facilities, meaning he now owed the bank money.
Fortunately, Capitec reimbursed Mjoli’s losses in full. However, it noted that the scammer didn’t directly access his banking app.
It explained that Mjoli may have unknowingly installed malware onto his device, probably posing as a DStv app promoting cheap or free viewing.
The malware likely enabled the scammer to intercept communications to Mjoli’s phone, including one-time PINs.
Capitec explained that its staff could do nothing to safeguard his funds in this situation as they cannot access or evaluate client devices for malware.
The bank said the transaction appeared legitimate as it was processed on Mjoli’s device, using his credentials and selfie verification.
Knowler noted that she had since heard of several other cases where customers were scammed by fraudsters contacting them about DStv Rewards redemption.
MultiChoice recommended several preventative measures that its customers should take:
- Only download apps from official platforms;
- Don’t share information with unknown individuals;
- Implement robust passwords and two-factor authentication; and,
- Keep your device’s security up to date.
“We’ve been made aware of a scam where fraudsters are impersonating DStv, offering fake rewards in exchange for personal details. Typically, they direct customers to fraudulent links, asking for sensitive information like banking codes,” MultiChoice told MyBroadband.
“MultiChoice will never request passwords, payment details or ask customers to click on links over the phone or via SMS.”
The pay-TV broadcaster said its customers must stop themselves before clicking on strange links, as the DStv Rewards are only accessible through the MyDStv app.
It added that it posted a warning on its social media pages and will repost it again next week to ensure its customers are aware of the scam.
Big uptick in fraudsters in the finance sector
The South African banking industry recently warned that it had observed a surge in clients being scammed out of their funds by fraudsters posing as bank officials, tax officials, or investment firms.
Fraudsters have also shifted their habits as banks work to clamp down on these types of fraud.
Standard Bank said vishing, or phishing via telephone calls, is the biggest contributor to app banking, digital banking, and card-related fraud. Mjoli also fell victim to a form of vishing attack.
“Unlike phishing scams, which deceive people into clicking on links in texts and emails, vishing calls trick people into sharing sensitive banking information or taking actions that compromise the security of their bank accounts,” said Standard Bank.
It explained that another approach used by vishing scammers attempts to create panic by claiming that the victim’s accounts are vulnerable. They then try to urge them to transfer their money to a “safekeeping” account.
Standard Bank’s head of digital and e-commerce, Belinda Rathogwa, advised that the bank will never call a customer and instruct them to transfer their money into an unknown account.
“If you are going to invest your hard-earned money, verify the details of the investment company that you are dealing with. Check that they are registered with the Financial Services Conduct Authority (FSCA),” she added.