Public Bank has issued a scam alert, advising customers to be cautious when encountering social media advertisements for mooncake sales that require payment via a third-party app.
These unknown third-party apps that are not hosted on official stores may pose a security risk, as they may contain malware that allows a scammer to gain complete control of a user’s device.
The bank warns customers via email that once the malicious app is installed, it can steal both personal and financial information from them when they make a payment at the checkout page.
With this information, fraudsters can gain access to a user’s bank account and withdraw all remaining funds.
Customers should be on the lookout for red flags, such as if the app is only available through links or APK files from sellers rather than official app stores; the permissions it requests when installed; and if their Personal Login Phrase (PLP) appears after entering their banking user ID and password.
If a user suspects they have fallen victim to a scam, they should immediately notify their bank or deactivate their card account through the appropriate online banking platform.
This follows reports of online mooncake scams in Singapore, where at least 27 victims lost approximately S$325,000 (RM1.11 million) in August alone.
Another recent case involved a woman in Selangor who paid RM440 for four boxes of mooncake but never received them.
The victim only realised she had been duped when the seller instructed her to download a third-party app and enter her personal information in order to receive a refund.
info source – The Star