CBR draws banks to phishing

With a view to minimizing financial risks, the Central Bank of the Russian Federation draws the attention of credit institutions to the need for explanatory work among customers who are holders of payment (bank) cards about security measures when making payment transactions using cards on the Internet.

According to the Department of External and Public Relations of the Central Bank of the Russian Federation, recently there have been frequent cases of the emergence of websites offering various financial services using payment (bank) cards of international payment systems, such as VISA and MasterCard. Users are invited to fill out electronic forms and specify the details of the cards, including the pin code. However, the transfer of confidential information is carried out without the use of secure data exchange protocols. This and a number of other features that characterize the operation of such sites suggest that fraudulent activities known as “phishing” are masked by such offers, that is, “luring” users to reveal confidential information through the use of fake sites.