An attempt to illegally withdraw money from a bank card. What to do?

Question

Information Security

I searched for a similar question but didn't find it. Therefore I ask.

This morning I found SMS messages on my phone about attempts to withdraw money from my card (thanks to the connected mobile bank).
There were 3 attempts. All for the same amount. And at the same address (there is a shopping center at it). At 6 am. Thank God, the attempts were unsuccessful.

I contacted Sberbank, the card was blocked. Wrote an application for a new card.

I don't pay by card anywhere. I mostly withdraw through an ATM or pay through Sberbank online.

There are a few questions left:
1. Can I find out how an attempt to illegally withdraw money was carried out, so that in the future this situation would not be allowed in the future? I don't want to write statements every month.
2. Do I need to write a statement to the police about an attempted fraud? Or will the bank's security team take care of it?
3. Where to keep money? Suddenly, next time, the attackers will become smarter and will still be able to withdraw money from the card? Under the pillow is not very comfortable.

It would be logical to ask some of the questions to bank employees, but there is a problem: in the Sberbank branch itself, they send me to specialists by phone, and they are uninformative without voicing a secret word that I forgot. And I can not change it in connection with the reissue of the card.

Answer 1

I’ll contribute a couple of kopecks of knowledge as a former sys.admin of Sber.Bank 1
) I myself use different cards and, if possible, always try to get a card with a chip
. I’ll tell you about how the ATM mechanism works .
does not touch the strip,
that is, you have a screamer counting a magnetic tape! on which there is already a mark for an ATM and a terminal that are in the store that you need to use the Chip on it - that is, your card will be more difficult to fake. Information from the visa and
Briefly about the device of an ATM
2) If you are traveling abroad, the Sberbank has the opportunity to block transactions in different countries
3) Change your password on SberOnline more often
4) Know the secret word for communicating with girls from the Sberbank call center! This will immediately allow you to block or clarify any information.
! If you do not know him, you can come to the bank branch and write a statement there to change this word.
5) Do not use ATMs anywhere and see if there is a Screamer nozzle on it
6) Do not keep a lot of money on the card :) keep them separately. The card is not a passbook!
7) Read carefully the instructions for using different services, where you enter the details of the card.
8) Get different simple cards, such as Qiwi, its cost is 100 rubles. Money on which you can keep it for purchases in various incomprehensible services.
9) Mobile bank connections!!! Be sure to change the number of the mobile bank at the ATM if you changed the number or lost it immediately.
! The case of clients when a stranger replenished his balance by 6000 rubles at the expense of a person who forgot that the mobile bank was connected and this number was lost, as a result, six months later it was simply sold in an ordinary mobile phone store. The money could not be returned.
10) and please do not write a pincode on your card. :)
11 ) Types of ATM fraud
12) You are responsible for your own money, remember this.

Answer 2

Last week they blocked my card, they said that it was compromised in “one of the ATMs”. In which they didn’t say exactly, they said they just compromised in September (!). The subsequent ensuing questions did not answer anything sensible. Here.
You just have to be more careful is all. And it’s not worth writing statements to the police, it seems to me that the bank should decide.

Answer 3

3. Where to keep money? Suddenly, next time, the attackers will become smarter and will still be able to withdraw money from the card? Under the pillow is not very comfortable.
Savings account "My safe" ?

Answer 4

If you are very anxious, you can try using banks that issue cards with chips.

Answer 5

By the way, at the same time I would like to ask a question, are there banks in nature that issue cards without a magnetic strip at all? As I understand it, any student can count and copy this strip these days, using video tutorials from YouTube, why hasn't it been canceled yet?

Answer 6

By the way, some online stores, when buying via the Internet, write off money without confirmation by SMS. I paid for one of the hotels on booking.com. Mobile banking has already been connected. Other hotels when paying through booking.com required confirmation by SMS

Answer 7

Any of these:
1. Chip cards.
2. Not a savings bank (a mess, as you know, is poorly compatible with security)
3. Electron class cards that cannot be paid on the Internet
4. See what types of accounts the bank has, look for those that cannot be accessed through an ATM
5. Internet banking only with a separate computer, well protected and not used for anything other than banking
6. Accounts in different banks
7. Application to the bank with setting limits on the card
8. Bank account to which no cards have been issued.

Answer 8

In principle, I know what the readers of Sberbank ATMs look like. But here, for example, Privat Bank is not. I had to use it due to extreme necessity at night on the other side of the city and the inability to get to the Sberbank ATM
. What if I withdraw money in another country where the Sberbank ATM is not so easy to find?

Answer 9

Problems with reading the magnetic strip - are solved by chip cards either without a strip at all, or with a ban on operations on the strip (only on the chip).
Problems with Internet payments are solved by unlocking the card for Internet payments through the CC before the payment and blocking it back immediately after.

Answer 10

perhaps I will repeat myself, but: order two cards at the bank for one account - one with a chip and limiting payments via the Internet, the second - in pair with it with limiting withdrawals at an ATM / retail network (you can without a chip).
This option will greatly increase the security of calculations. The presence of a chip in the card leaves only one option for attackers: to pay on the Internet. If you follow my advice, then this will not happen either :)