Antifraud

Recently, scammers making calls from substitute numbers via cell phones and messengers have become more active in Kazakhstan. Often the avatar of attackers displays the official logo of the bank, which misleads customers.

One of the most common schemes is to intimidate the client in order to cause confusion and force him to follow the caller's instructions. Fraudsters convince the victim that their money is under threat (the account has been hacked, an unauthorized debit has been made from the account, a loan has been issued in the client's name, etc.). To increase the pressure, accomplices may join the conversation, posing as bank or law enforcement officials.

The purpose of such calls is to:

• get access to the client's mobile application;
• persuade the client to transfer money to a so-called "secure" account;
• induce the client to install remote access programs such as TeamViewer, AnyDesk, RustDesk, Hoptodesk, RudeDesktop and others.

At first glance, these Annexes seem harmless, but they provide full remote access to your device - including sensitive data and bank accounts.

Be vigilant! If you have any suspicions, contact your bank immediately through official communication channels.

In order to save the client's money, fraudsters are persuaded to install special Annexes. Usually, the victim is offered to:

• open Play Market or App Store;
• enter the word "support" in the search;
• download one of the Annexes, most often AnyDesk or RustDesk.

Installing such programs allows attackers to gain access to the entire contents of the device. The most commonly used programs by scammers are AnyDesk and RustDesk.

1. "To save money, transfer it to your current account or withdraw it from your deposit and transfer it to another account"
2. "An investigator officer of the Ministry of Internal Affairs / National Security Committee (full name) is talking to you. Do not hang up!"
3. "Don't tell anyone about this call - a secret operation is underway!"
4. "A request to change the code word has been received"
5. "I am a security officer of a cellular operator. Now you will receive a code - please give it to me!"
6. "You need to transfer deposit funds to a secure bank account."
7. "This is a national security officer. Please tell us in which banks you have accounts or loans. Therefore, you are requested to provide card or deposit information to block them immediately"

• Never give your passwords, SMS codes and account details to third parties.
• Do not trust emails, calls or messages asking for personal information or access to accounts.
• Do not click on suspicious links, especially if they do not come from official sources.
• Always call the bank back to the number listed on the official website, even if the call seems genuine.
• Remember: bank employees never ask for SMS codes, passwords, codewords and do not ask to transfer money to third-party accounts - even "reserve" or "safe" ones.

• transferring access to one's bank account, electronic wallet or internet banking system to third parties to make payments and transfers;
• acquiring and using other people's bank accounts or payment instruments to make illegal payments and transfers.
• making payments or transfers in the interests/in favor of third parties for material remuneration or other benefits.

• Violation of the above norms entails punishment from a fine to imprisonment for up to 5 years with possible confiscation of property;
• Illegally gaining access to the management of a bank account or payment instrument - 3 to 7 years of restriction or imprisonment, also with confiscation of property.

• Never give your bank accounts, logins and passwords to others;
• Do not accept offers to transfer money "for a fee";
• Be alert to any suspicious offers in messengers and social networks.

In accordance with the requirements of Rules No. 54 of the National Bank of the Republic of Kazakhstan, "Otbasу Bank" JSC monitors client operations to identify payment transactions with signs of fraud and blocks transactions of clients for whom there is confirmed information about their participation in fraudulent payment transactions.

In the event that the client's data matches the data in the Anti-Fraud Center database of the National Bank of the Republic of Kazakhstan, "Otbasу Bank" JSC provides such clients with only a limited list of banking services:

• Crediting payments received into the client’s account in the form of salary, payment for annual leave, travel expenses, other employer payments, as well as pensions, scholarships, benefits, and other social payments in accordance with the legislation of the Republic of Kazakhstan;
• Issuance of cash deposited into the client’s account in the form of payment for annual leave, salary, business travel expenses, and (or) other employer payments, provided the Bank has no information about the fraudulent nature of these deposits;
• Issuance of cash deposited into the client’s account in the form of a pension, scholarship, benefit, and (or) other social payment in accordance with the legislation of the Republic of Kazakhstan;
• Payment of mandatory payments, including taxes, utility and social payments, penalties, fines, as well as payments for loan repayment — within the limit of the amount credited to the account within the framework of the specified payments.

"Otbasу Bank" JSC acts strictly within the framework of legislation and internal procedures developed in accordance with Rules No. 54 of the National Bank of the Republic of Kazakhstan.

The client has the right to contact the Bank via the hotline number (trust phone) regarding fraud issues: +7 (727) 330-94-80, or send an inquiry to the email address [email protected] to receive clarification on their status, as well as information on the procedure for restoring full access to banking services after the check is completed.