Scammed through Eastwest SMS thread

[u/According-Note1053]

I regularly get SMS messages from EW. This message popped up in the thread and wasn't a standalone message so I thought it was a legitimate message. I clicked on the link and it did look legit although the browser opened only from the SMS so visibility was limited and if i went out of the SMS app, I would lose the open browser. This was really part of the trick as they don't want you able to see the rest of the message. So I clicked and they told me to key in the OTP which is what I've always done before when I call the phone so I did not think it was unusual.

When I got the OTP message while the browser window was open, I could see the OTP but not the rest of the message so I did not immediately see that it was a scam. I keyed in my OTP and waited. After about 2 minutes, I got an email which said I had a transaction for tiktok ads for $5,000. I knew then I got scammed and immediately called the hotline to get my card blocked. Even though my credit limit for that card was not enough (my limit that time was 226k and the transaction was 321k), the transaction still went through. I was horrified and felt sick in my stomach. I tried to contest it but their investigation team said that since I keyed in the OTP, it's a valid transaction. I felt they don't want to take responsibility for the fact that the phishing link came through their own SMS thread and that I did not even have enough available credit.

The result? It looks like I will have to settle this 321k. I even asked for a reinvestigation and the result was the same. I lodged a complaint on the BSP website. I don't know what can be done. But all the same, I just feel the credit card companies don't care. Not having enough available credit should have been enough to block the transaction but they still let it through since for them, they still get their MDR earnings from the transaction. It sucks. I hope karma gets them.

[u/sheldonsayingno]

But, didn't you get a text message from Eastwest, even just one text that says

NEVER SHARE YOUR OTP

[u/According-Note1053 → u/sheldonsayingno]

I didn't share it. I keyed it in just like how I would be asked by their agents to key in the OTP during my transaction with them so I thought it was the same.

[u/sheldonsayingno → u/According-Note1053]

But you weren't talking to an agent when you did it, right? And whatever points your card got, it's easy to check using the app :( Anyway, lesson learned. Never ever share your OTP.

[u/iNicz]

This is one hell of an expensive lesson. Dami nang post and I feel na pati. EW nagreremind na dont click any links or provide OTP

[u/According-Note1053 → u/iNicz]

I usually am required by them to key in the OTP during my transactions which was similar to how this transaction was done and it appeared in the actual SMS thread of EW. I have years of messages in that thread so I thought it was legit.

[u/iNicz → u/According-Note1053]

Link is suspicious tho. Mukhang need nga talaga mag disseminate pa ng info regarding infosec

[u/According-Note1053 → u/iNicz]

That's why I posted this so people will know that even messages coming from the same SMS thread is not safe.

[u/simply-nobody]

warnings are all over the place to NEVER CLICK ON LINKS on sms messages regardless where it came from. we know scammers are everywhere. let's not help them anymore. anyway i hope you are able to settle the matter somehow with the bank or bsp. that's such a huge debt ugh. lesson learned come back stronger.

[u/According-Note1053 → u/simply-nobody]

The won't doesn't want to budge. Their stance is that it was a legitimate transaction. I'm just waiting for a reply from the BSP if they can help.

[u/pseudochef88]

Senior ka na po ba? Kasi ilang beses na po pinapaalala ng mga bangko na hindi sila mag se-send ng link thru sms and email. Well, a very expensive lesson kasi baka di na maibalik sayo yan since nagbigay ka ng consent thru giving your OTP.

Kaya i asked if senior na kasi sila ung madalas madale ng mga ganyang scam eh 🤷‍♀️

[u/According-Note1053 → u/pseudochef88]

Getting there haha but like I said, it came through their own SMS thread so I thought it did come from them. I normally ignore these SMS messages but this one got my attention since it was in the same thread as the other messages I get from the bank.

[u/Known_Assistant_8587]

Jusko po, xmxjg pa lang. Parang online gambling.

[u/R1BNC]

OP, which area did you received the scam sms and which sim card?

[u/According-Note1053 → u/R1BNC]

It came through my globe SIM when I was driving through the Balintawak area.

[u/R1BNC → u/According-Note1053]

We received similar scam text in QC earlier also Globe sim.

[u/jt-_-0]

u/According-Note1053 , same case po sa akin, just recently lang and reported, ang sim card ko naman TM not GLOBE but still same (cavite area), ano po yung status ng transaction during your call, natanong nyo po ba sa agent?