Security Measures for Using Payment Cards and Online Services

Recently, fraudulent groups have become significantly more active in Kazakhstan, targeting payment cardholders. The most common fraud scenario involves the illegal collection of personal data, card details, codes, and passwords over the phone, as fraudsters impersonate bank employees to obtain information for conducting online account transactions.

To prevent and mitigate fraud cases, JSC Nurbank strongly recommends adhering to the following security measures:

1. Do not disclose your SMS code (password) to anyone, including individuals pretending to be bank employees.
2. Do not register someone else's mobile phone number as a trusted number (including through an ATM).
3. Do not disclose your payment card details: number, expiry date, and CVV/CVC (3-digit code on the back of the card). Do not post your card details online or send them through messengers.
4. If you receive a suspicious call (even from numbers similar to the bank's contact center numbers), end the conversation immediately and report it to the phone number listed on the back of the bank's payment card.

If you share card details and SMS codes with a third party, funds may be stolen.

Most Common Fraud Schemes Used by Criminals:

1. “Fake Bank Employee”:

 

The potential victim receives a call (from a number similar to the bank's call center number), with the fraudster posing as a call center or bank security employee, claiming an unauthorized transaction on the payment card. To cancel the transaction, the fraudster asks for the card details (number, expiry date, CVV/CVC code, and SMS codes). A real bank employee never requests this data (they only need the full name, date of birth, and password phrase specified in the account agreement).

A similar scheme is used in social networks (e.g., VK, Facebook), where banks have official pages. Fraudsters impersonate bank employees and, during interactions with potential victims, ask for card details.

2. Property Sale Announcement Scam(apartments, cars, etc.):

 

A fraudster calls in response to a property sale announcement (for an apartment, car, furniture, clothing, etc.), stating willingness to make a prepayment into the seller’s card and asks for the card details (number, expiry date, CVV/CVC code), and SMS codes received on the seller’s phone.

 

3. Participation in Surveys for Rewards

Fraudsters create bank-like pages on social networks with offers to complete surveys for rewards. The victim is required to follow a fake link, answer questions, and make a “confirmation payment” from their card to supposedly receive the reward (cash prize). By entering card details, victims send money to the fraudsters’ card or electronic wallet without receiving anything in return.

4. Fake Broker

Currently, there are many online offers promising significant earnings from Forex trading or binary options. Many of these websites do not actually provide brokerage services.

The potential victim registers on a fraudulent “broker” website, creates a personal account, and provides contact information. A fraudster then contacts them, convincing them to deposit funds into their account to start trading. Once the client transfers money, the fraudsters withdraw it into their accounts.

Stay vigilant!