Text Message Phishing Scam For Chase Bank Accounts

AdHustler

AdHustler

New member
Aug 24, 2007
4,377
44
0
There is an interesting text message phishing scam going around. Someone here just got this text:

From:818-864-3253@chase.com:
You have received a new JPMorgan Chase banking message. Call now free: 1-818-864-3253 and follow instructions.

It seemed pretty phishy (no pun intended, or was it) to begin with so we just called to mess around with the system.

It first asks you for your debit card number.
Then it asks you for you expiration date
Then it asks you for your pin number and makes you confirm it

No matter what you put in it takes it and then says congratulations your account has been activated.

I bet you tons of people are falling for this hook line and sinker.

This couldn't be any more illegal, just wanted to warn everyone.
 


I wonder if they have a nice backend that allows them to automate the withdraw process.
 
I'd be interested in knowing how they are going to avoid getting fucked over by the law since thats a US Phone Number. Can you get a Google Voice Number without giving any real personal info?
 
yea all u need for google voice is a google account. But you can very easily get a number without giving real info. Why do you think drug dealers use prepaid phones?
 
If they are pros they will be completely hidden operating from another country. Steal someones identity and register everything under their info
 
narsticle said:
There is an interesting text message phishing scam going around. Someone here just got this text:

From:818-864-3253@chase.com:
You have received a new JPMorgan Chase banking message. Call now free: 1-818-864-3253 and follow instructions.

It seemed pretty phishy (no pun intended, or was it) to begin with so we just called to mess around with the system.

It first asks you for your debit card number.
Then it asks you for you expiration date
Then it asks you for your pin number and makes you confirm it

No matter what you put in it takes it and then says congratulations your account has been activated.

I bet you tons of people are falling for this hook line and sinker.

This couldn't be any more illegal, just wanted to warn everyone.
Click to expand...


This might be legit...Chase just implemented a new feature into their online banking that asks for the same information. Or it might be a copycat phone scammer...in which case, pretty clever.
 
davidne said:
This might be legit...Chase just implemented a new feature into their online banking that asks for the same information. Or it might be a copycat phone scammer...in which case, pretty clever.
Click to expand...

Its not legit

I went through the process, put in fake info and it said "your account has been activated" - pretty sure that's a telltale sign
 
narsticle said:
Its not legit

I went through the process, put in fake info and it said "your account has been activated" - pretty sure that's a telltale sign
Click to expand...

I did the same thing on the Chase website and could still get into my account...just sayin'
 
AdHustler said:
How could you put in fake bank account numbers on the Chase website and then get into your account?
Click to expand...

Good question. It works though. Once I sign into my account, they ask me to verify my ATM card number. they ask me to put in Card #, PIN, Exp. Date, and verification code. My card number doesn't have an exp. date or verification code on it, so I just typed in random numbers and it worked. Next time I logged in it did the same thing, so instead I typed in my CC # and some random other numbers and it also worked. I'm guessing it only checks the card number for validation w/ the account.

Edit: Just tried with a made up card number and it worked too. So much for Chase fraud checking.
 
davidne said:
Good question. It works though. Once I sign into my account, they ask me to verify my ATM card number. they ask me to put in Card #, PIN, Exp. Date, and verification code. My card number doesn't have an exp. date or verification code on it, so I just typed in random numbers and it worked. Next time I logged in it did the same thing, so instead I typed in my CC # and some random other numbers and it also worked. I'm guessing it only checks the card number for validation w/ the account.

Edit: Just tried with a made up card number and it worked too. So much for Chase fraud checking.
Click to expand...


sure the url isnt chase.onlinebankinglogin.cm
 
Hi, i've been spammed by these retarded txt all month. i've gotten prolly about 15 so far and one of them being 4 in the morning n my txt alarm frigging woke me up. How do i stop this?
 
Someone just got my info and charged some shit on my card, was not from phishing but something online got my info.... no more debit cards online again.. only credit cards at least they can get $$ out your account.. I had to close the bank account and open a new one.. live an learn.
 
davidne said:
This might be legit...Chase just implemented a new feature into their online banking that asks for the same information. Or it might be a copycat phone scammer...in which case, pretty clever.
Click to expand...

When I logged into my chase and saw that shit, it freaked the hell out of me... I waited all weekend and went to the bank before i filled it in.

Chase is getting retarded...
 
Large companies are really fueling this kinda crap though. If Chase (a bank right?) really do ask this kind of crap on their secure website then no wonder fraudsters copy it.

In the UK, large companies that try and up-sell from their existing customer database have to 'confirm we are speaking to the account holder' by asking for a whole ton of private info.
The more people get used to their utility companies and financial service companies calling them and asking for private details, the worst it will get.
 
You must log in or register to reply here.
Top Bottom