{"id":31790,"date":"2019-12-16T07:12:30","date_gmt":"2019-12-16T12:12:30","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=31790"},"modified":"2020-05-18T07:38:46","modified_gmt":"2020-05-18T11:38:46","slug":"prepaid-card-sextortion","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/prepaid-card-sextortion\/31790\/","title":{"rendered":"Are scammers tired of bitcoin?"},"content":{"rendered":"

Scammers pretending to have hacked and shot video<\/a> of people watching porn is not exactly news. However, from time to time the scheme gets a new twist. Last time, it was alleged CIA involvement<\/a> to heighten the threat \u2014 the supposedly watched adult video was of an illegal sort. The purpose of these tales is to panic the user so they\u2019ll send money without thinking too hard about the false claims.<\/p>\n

Most often, cybercriminals demand a ransom in cryptocurrency; such transactions are anonymous and extremely hard to trace. The wallet address for transferring the money is usually specified in the text of the e-mail. Lately, however, we\u2019ve been seeing sextortion messages with no such address. The scammers ask to be contacted in a more traditional way \u2014 by e-mail \u2014 and demand a different sort of ransom.<\/p>\n

Prepaid ransom cards<\/h2>\n

Having delivered the bad news to the victim, the scammers ask them to go to a store from a list (in this case, Walmart, Lojas Americanas, Extra, P\u00e3o de A\u00e7ucar, or Casas Bahia) and purchase some prepaid debit cards there. These cards need to be topped up to a certain amount and photographed on both sides, and the pictures sent to the specified e-mail address.<\/p>\n

\"Sextortion<\/a>

Sextortion e-mail demanding a ransom in the form of prepaid cards<\/p><\/div>\n

Generally speaking, the main difference between prepaid debit cards and the usual kind is that there is no need to go to a bank to get them \u2014 you can buy and top them up right in the store. At the same time, such cards are connected to the major global payment systems, such as Visa and Mastercard, and are accepted anywhere those systems operate.<\/p>\n

The debit cards in this particular sextortion scheme \u2014 Acesso cards \u2014 are sold in Brazil and work with the Mastercard system. One of the features of these cards is that they are usable not only in Brazil, but internationally as well. Perhaps that\u2019s the feature that the cybercriminals in question are particularly interested in. Acesso cards are sold in supermarkets and hypermarkets of the abovementioned chains for some 15 reals (a bit more than $3.50) and can be topped up with any amount of money right there and then.<\/p>\n

So, having been fed the prepaid card details (hence the requirement to photograph both sides), the scammers can immediately use it to withdraw money.<\/p>\n

Brazilian-style sextortion<\/h2>\n

A particular e-mail that caught our eye targeted users in Brazil. Brazilian extorters had previously demanded prepaid cards from victims, but only the telephone variety. In some ways the demand for prepaid debit cards could actually be described as innovative.<\/p>\n

Note that although the message text in the example is indeed in Portuguese, it\u2019s simply the output from an online translator. By all appearances, the scammers are not local. That said, they seem well-versed in the day-to-day realities of the target country. For example, they know that such cards can be bought in Brazil, and where.<\/p>\n

E-mails like this one are typically crafted using more or less the same templates, automatically translated into different languages (for the target audience), and dispatched to millions of e-mail addresses from spam databases.<\/p>\n

Goodbye to bitcoin?<\/h2>\n

It is still too early to say if prepaid debit cards will supplant bitcoin as the new ransom currency of choice, or whether such messages are the exception rather than the rule.<\/p>\n

In any event, it is worth remembering that such e-mails are not the work of genius hackers, but a social engineering shot in the dark. Such messages are not targeted; they\u2019re sent in bulk using spam databases. The scammer did not hack anyone and has no compromising information on you at all. Their only goal is to scare the victim into obeying the instructions as quickly as possible.<\/p>\n

To rest easy about such threats, use a reliable security solution<\/a>\u00a0with up-to-date databases that will block fake messages before they wind up in your mailbox.<\/p>\n\n","protected":false},"excerpt":{"rendered":"

Extorters are demanding ransom not in cryptocurrency, but in prepaid debit cards. All the same, you shouldn\u2019t pay.<\/p>\n","protected":false},"author":2495,"featured_media":31803,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,2683],"tags":[3106,80,1566,797,240,422,131],"class_list":{"0":"post-31790","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-extortion","10":"tag-fraud","11":"tag-porn","12":"tag-sextortion","13":"tag-spam","14":"tag-threats","15":"tag-tips"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/prepaid-card-sextortion\/31790\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/prepaid-card-sextortion\/18323\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/prepaid-card-sextortion\/15221\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/prepaid-card-sextortion\/20050\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/prepaid-card-sextortion\/18410\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/prepaid-card-sextortion\/16794\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/prepaid-card-sextortion\/20792\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/prepaid-card-sextortion\/19548\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/prepaid-card-sextortion\/25901\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/prepaid-card-sextortion\/7506\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/prepaid-card-sextortion\/13541\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/prepaid-card-sextortion\/13815\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/prepaid-card-sextortion\/12605\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/prepaid-card-sextortion\/21781\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/prepaid-card-sextortion\/26447\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/prepaid-card-sextortion\/24748\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/prepaid-card-sextortion\/25632\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/prepaid-card-sextortion\/25464\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/fraud\/","name":"fraud"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/31790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2495"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=31790"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/31790\/revisions"}],"predecessor-version":[{"id":35472,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/31790\/revisions\/35472"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/31803"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=31790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=31790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=31790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}