Cyber security

This type of fraud occurs through phone calls where customers of banks or financial institutions receive calls that seem to originate from their bank. The caller ID displays the bank’s phone number, but the call is actually from malicious third parties. These fraudsters exploit technological tools (without breaching the bank’s systems) to impersonate bank representatives, attempting to steal sensitive banking information such as usernames, passwords, card numbers, PINs, or OTPs to access victims' accounts.

Often, to appear more convincing, the fraudsters make a second call immediately after a failed attempt to deceive. In this call, they claim to be calling from the bank to protect the customer from the previous fraud attempt.

Protection tips:

• Be cautious with sensitive data
  Never disclose sensitive banking information (such as usernames, passwords, PINs, card numbers, OTPs, etc.) even if the call appears to come from your bank.
  
• Genuine communication from the bank
  Remember that the bank will never ask for such information, even during transaction confirmations.
  
• Immediate call termination
  If you feel that someone is trying to deceive you, end the call and contact the bank yourself through the official customer service number.
  
• Do not follow instructions to enter codes
  Do not enter codes that are suggested to you during phone calls.
  
• Verify OTP messages
  Read the entire messages sent by the bank via SMS OTP or Viber OTP carefully instead of quickly entering the one-time code.
  

Points to watch out for:

• Time pressure
  If the caller does not give you time to think, ask for information or contact your bank.
  
• Requests for sensitive data
  They ask for PINs, e-banking login credentials (username & password), or card details.
  
• Fake SMS messages
  You receive SMS from the bank, and the caller claims that the code is required to cancel the fraudulent transaction. In reality, no one-time code is needed for the bank to cancel any fraudulent transaction against you.
  
• Money transfers
  They ask you to transfer money to a "safe" account or perform a "test" or "dummy" transaction.
  
• ATM withdrawal
  They guide you to withdraw or transfer money via ATM.
  
• Card or PIN collection
  They inform you that you are a fraud victim and will send a courier to your home to collect your card and PIN or money that they convinced you to withdraw from an ATM to protect it.
  
• Mobile device deactivation
  They ask for information about your mobile device or urge you to turn it off.

These are scams related to "voice phishing" (known as Vishing or the phishing of personal information through phone communication) and are designed to deceive us into disclosing personal information.

The most common forms of customer approaches are as follows:

• Phone call from a technician claiming to fix/upgrade the PC and its software. The fraudster methodically pressures the customer to grant remote access to their PC, and may also download a program to solve the "supposed problem" before gaining full access to the customer’s personal data.
  
• Goods purchasing and selling. The fraudster calls customers under the pretense of being interested in purchasing an item listed on a corresponding platform/site for selling goods. The fraudster methodically and insistently asks for the customer's e-banking credentials under the pretext of immediately transferring the money for the purchase of the item.
  
• Seasonal scams. The fraudsters, using various allowances or payments expected by customers as an excuse, call and present themselves as, for example, accountants, employees of electricity companies, tax officials, health workers, people interested in booking accommodations, truck owners for fuel transport, etc. In this case, too, the fraudsters methodically and insistently try to extract customers' e-banking credentials to conduct fraudulent transactions.
  
• Investment scams. The fraudsters attract customers by promising extremely high returns in a short period, assuring them that their investments will be safe and profitable. By enticing their "victims" to initially invest a small amount, they continuously pressure customers to invest more money so that the "investment" yields more profit. Often, they install a remote access program on the "victim's" PC, gaining full access to both their portfolio and their bank accounts.
  
• Loan scams. The fraudsters approach their "victims" under the pretext of disbursing loans with unrealistically favorable terms, e.g., from foreign banks with zero interest rates, etc., and ask them to pay a "small" amount to cover loan expenses so that the loan can be disbursed.
  
• E-mail from CEO or invoice payment. The fraudsters, knowing which company employee has access to corporate payments, notify them with an urgent e-mail as supposed CEOs in order to make a corporate payment immediately. Additionally, a company may receive an e-mail/phone call from a "partner" to change the bank account to which payments were normally made, so that future payments are credited to the fraudster.

Phishing is the malicious attempt by would-be fraudsters to steal personal information, such as web banking passwords, credit/debit card numbers or PINs, passport numbers, ID card numbers, tax numbers, etc.

Ways to approach a potential "victim"

• Phishing E-mail
  These are fraudulent e-mails sent to random accounts of unsuspecting recipients, either by enticing them or trying to convince them that it is necessary, asking them to click on a link within the e-mail. This link leads to websites created by fraudsters, which mimic the legitimate websites of banks. Their goal is to deceive users into entering their personal information, which the fraudsters will then use to access the electronic banking environment and act as genuine customers.
  
• Phishing sms (Smishing)
  These are fraudulent SMS messages that, through a link they contain, ask customers to log in to Piraeus e-banking by selecting this link. They try to lure the customer into clicking the link using language such as, call a number to cancel/verify a transaction, unlock/activate your account, update your information by clicking here, etc. If customers select the malicious link, they will be directed to an environment similar to that of the bank and will be asked to enter their e-banking credentials and then the one-time codes they receive.
  

CAUTION!
If you enter your details as mentioned above, the fraudsters will immediately gain access to the Piraeus e-banking service and will be able to manage your money.

These are protection tips against dangerous purchases on websites that persuade consumers to accept charges without receiving the purchased item. The consumer must be cautious as the transaction cannot be disputed.
  
Regarding the merchant we are dealing with:

• Use reliable platforms and secure websites: 
  Shop only on trusted platforms and websites with a security certificate. Ensure the website uses HTTPS before entering any personal information.
  
• Be wary of "too good" offers: 
  Prefer reputable e-shops and avoid unknown websites offering excessive discounts.
  
• Check the seller's reviews and ratings: 
  Read reviews and ratings from other customers to assess the seller's reliability. Be cautious with sellers who have many negative reviews or no reviews at all.
  
• Check the return and refund policies: 
  Be informed about the retailer's return and refund policies before making a purchase.
  
  

Regarding our personal banking security:

• Be careful with your personal information: 
  Provide only the necessary information during the payment process.
  
• Use strong & unique passwords: 
  Create strong passwords for your online accounts and avoid using the same password on multiple websites.
  
• Be cautious with emails and links: 
  Be wary of emails or messages asking for personal information or directing you to suspicious websites. Do not share personal data, such as passwords, security codes, or biometric data via email or messages.
  
• Avoid public and unsecured networks: 
  Do not make purchases or log into accounts containing sensitive data via public Wi-Fi networks. Prefer using a private network (VPN).
  
• Stay informed about online scams: 
  Stay updated on online scams and ways to avoid them. Knowledge is a powerful tool for fraud prevention.