Thread by @mmnjug

On Wednesday, January 26, I received at least three requests on my SIM line, in which some fraudsters somewhere were attempting to register new SIM cards using my national ID number. - @StandardKenya

The first SMS that I received from Safaricom service line 707 was delivered at 12:07pm. It read: “Dear customer, a new number 797XXXX08 is about to be registered under your ID number. Please reply with Yes to continue or NO to cancel the registration.” - @StandardKenya

I quickly pressed: “NO” and, immediately the service line sent back a receipt message, saying: “Dear customer, the new line registration request received under your ID has been cancelled. Thank you.” - @StandardKenya

The fraudsters, a few minutes apart, tried two other new registrations using my ID number. One of the numbers, Safaricom said, was 799XXXX24, while the other was 794XXXX20. - @StandardKenya

In the two subsequent registration attempts, I rejected the requests, as I did with the first. All that happened in a span of five minutes, or so. After the third unsuccessful attempt, the fraudsters gave up. - @StandardKenya

That five-minute incident left me wondering “who could be having my ID card out there?”

I lost my ID card sometime back, and replaced it promptly. But, it’s clear that someone has my ID details, and he or she is most likely out to commit a criminal activity using it, based on the botched SIM registration attempts that he or she made on Wednesday. - @StandardKenya

My reflexes drove me to Google, where I searched the @SafaricomPLC service line 707: what is it, and what happens if someone doesn’t respond promptly to the SIM registration commands?

.@SafaricomPLC introduced the 707 feature in May 2020 that alerts you when someone tries to register a new SIM card with your ID number.

ICYMI: Introducing New Subscriber Registration Consent bit.ly/3L2SikD by @SafaricomPLC

In case it's not you, you will reply with “NO”, and the registration will be stopped. The issue is then escalated to the @SafaricomPLC Risk Assessment team that will follow up, and eventually block the line used for this fraudulent activity. The registration of a SIM won't happen

“If the customer chooses not to respond with either of the options given, the registration will not be completed,” @SafaricomPLC says on its website.

#JichanueAndTakeControl

Both @SafaricomPLC and @AIRTEL_KE have a USSD code (*106#) that allows you to check whether there are other SIM lines registered in your name.

#StaySafeAndSecure

Sim-swap is the other phone-related fraud that has gained impetus of late. It happens when someone convinces your mobile operator to switch your phone number over to a SIM card that a criminal possesses.

Hannington Oduor, a security system analyst at @KenyaPower, disclosed to @StandardKenya the tricks used by fraudsters to successfully conduct SIM swaps.

SIM-swap basically is a form of identity theft. In other circles, it’s called impersonation. - Oduor

The fraudster would call you, and play mind games on you. For instance, after you’ve received the call, he or she will refer to you by your full name, saying they’re calling you from your network service provider - Oduor

They’ll thereafter read out your full ID number, and go ahead to ask you to confirm if the digits are correct. They do this to win your confidence. That’s what they want at Stage One, before continuing with the fraud. - Oduor

Stage Two of their deceit, is issuing out instructions. They’d be calm and patient, and you wouldn’t know that the commands that they’re making lead to them either getting more information about your mobile money, or allows them to activate the SIM-swap prompts - Oduor

Most victims that I have interacted with said they remember being asked to dial USSD code 33*0000*, while others were told to dial #253257# or ##72786#. These codes basically send a command that you’ve lost your SIM card, and are, therefore, initiating a swap process. - Oduor

Once you initiate the swap process, the network on your gadget disappears.

While offline, and maybe attempting to visit your network provider’s shop, the fraudster, armed with your details, would have already called your service provider, claiming that he or she has lost his SIM, and wants to renew it.

He or she will, thereafter, provide your details to the mobile service agent, who, unbeknown to him or her – or out of naivety – will help in activating the line.

The fraudsters, thereafter, access your mobile money, mobile banking, credit facilities, among others, to wipe out funds from the accounts - Oduor.

How you’ll know criminals are trying to register new SIM card with your ID and what to do to stop the fraud. bit.ly/3GaIktD by @StandardKenya

#StaySafeAndSecure
#JichanueAndTakeControl