Experts named psychological techniques and rules to protect against financial attacks

Experts spoke about the methods of fraudsters' pressure and ways to protect savings from theft. All the details are in the Izvestia article.

Data acquisition methods

The main goal of criminals is to obtain information to confirm the transfer or access online banking. Information security expert "Kontur.Aegis and Staffcop Daniil Borislavsky noted that fraudsters most often try to find out one-time codes from SMS, card details, CVV codes, logins and passwords. They are also interested in codes for restoring access to accounts on Public Services and messengers.

Attackers actively use social engineering techniques to convince victims of the existence of "secure" or "backup" accounts. In fact, there are no such accounts, and after the transfer, the funds are transferred under the control of criminals. Neither representatives of banks nor law enforcement officers ever require to perform such operations.

Careful, not repaid: Russians are being massively persuaded to bankruptcy

Unscrupulous consultants are involved in every second such case.

Psychological tricks

Scammers act on innate psychological mechanisms, using fear to disable critical thinking. Neuropsychologist Maria Todorova explained that creating an artificial time deficit and appealing to authority block the work of the prefrontal cortex, which is responsible for analyzing the situation.

An additional technique is to load the working memory: the victim is asked to simultaneously listen, call codes and perform actions in the application. In a state of acute stress, attention narrows, and a person focuses only on the threat of losing savings, forgetting about predicting the consequences of their actions.

They gave a reason: mass phone calls were legally allowed in Russia

Experts believe that the new measure may provoke a wave of activity from intruders.

Signs of a dangerous call

According to Daniil Borislavsky, the main sign of fraud is an attempt to create a sense of urgency. A real bank employee will not require confirmation codes, PIN codes, installation of remote access programs, or loan processing. If in doubt, you should immediately stop talking and call the bank back yourself using the official number.

If the data has already been reported, you should block the accounts through the bank as soon as possible and restore access to the compromised services. The expert recommends using preventive protection measures.