Thai Cyber Bank Fraud Gang Busted

In the historic City Ayutthaya 40 miles north of Bangkok, in Thailand, the police have recently just caught a gang who stole personal information of an online auto parts trader through an elaborate, Internet-enabled scam to steal close to one million baht of his money.

Early this month, Phansuthee Meeluekij, 28, an auto parts trader who operates the business online and communicates with his customers via Facebook, lodged a complaint with local police, saying a total of 986,700 baht had been stolen from his Kasikornbank account. He also complained to the Technology Crime Suppression Division and submitted evidence including an online chat history between him and the suspects and photos of suspects taken from security cameras.

Police tracked the transactions of the suspects and their mobile phone use and eventually captured six suspects including three youths aged 17. The adult suspects were identified as Ekapoj Ratanakorn, 29, of Ratchaburi; Patanarospong Kansonthi, 33, of Si Sa Ket; and Surikrai Anumas, 30, of Kanchanaburi.

The six have allegedly admitted to the crime. They said they worked as a team and contacted the victim via Facebook pretending to be potential customers. Their actual aim was to lure Mr Phansuthee into giving them his personal information such as date of birth and bank account, mobile phone and ID card numbers. They then asked the victim to sign up for a mobile banking service for use to receive money transfers from them, which the victim did.

After the victim registered for the mobile banking service, the gang used personal information they had obtained to log on to the victim's banking account and then transferred the money to several other accounts to make it difficult to trace the money later.

After that they withdrew the money and paid members of the gang their share. To start off the scam, a 17-year-old gang member contacted the victim via Facebook and pretended to be a new customer. He asked for a copy of Mr Phansuthee's ID card and his bank account, claiming he wanted to verify if the owner of the bank account and the victim really were the same person so he would not have to worry that he might be conned by the auto parts trader.

The young suspect was later paid 200,000 baht for his role in the scam.

In the next step in the scam, another gang member posed as the victim and phoned the call centre of the bank where the victim has his account to inquire about his ledger balance, also using the personal information the gang had stolen. The gang also had someone contact the victim's mobile phone carrier requesting a new SIM card to be issued for the victim's phone number. Again, the caller pretended to be the victim.

With the new SIM card, the gang was able to log in to the victim's banking account and took out his money. The victim did not realise his money had gone because his SIM card had been disabled the moment the gang had a new card issued. Mr Phansuthee no longer received short messages from the mobile banking service confirming money transfers.

Police said Mr Surikrai had opened bank accounts to receive the money transfers from the victim's account. He later withdrew the money over the bank counter. For this, the gang paid him 5,000 baht. Mr Patanarospong, who owned a pickup truck used in the scam and took Mr Surikrai to open bank accounts, was paid 199,900 baht.

Mr Ekapoj, who owned the mobile phone the 17-year-old suspect used to steal money from the victim's account and who drove Mr Patanarospong's truck to take the other gang member to get the new SIM card and withdraw the money, received his cut of 250,000 baht.

Mr Wisarut produced a doctored copy of the victims' ID card by replacing Mr Phansuthee's photo with that of Mr Sayam who then used the fraudulent copy to obtain the new SIM card. They were paid 30,000 baht each.

According to police, the gang had previously committed nine similar scams, including a fake football bookie service, and made off with more than three million baht. The gang members spent the money they stole on gambling and entertainment. They have been charged with theft and with forgery of an official document.

Head of Ayutthaya police Pol Col Surapong Thammapithak said the gang may come across as hackers when in fact they operate as scammers stealing people's identities. He cautioned people to check carefully before giving personal information over the phone to someone they have not met. The gang members can be very persuasive.

Bangkok Post

 

« Rio 2016 Olympic Games: IoT Technologies Win
Who Are We In the Cyber World? »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

LogmeOnce

LogmeOnce

LogmeOnce provides users with solution to multiple Password problems, Single Sign-On (SSO), and Identity Management.

DNV

DNV

DNV are the independent expert in assurance and risk management. We deliver world-renowned testing, certification and technical advisory services.

Digital Guardian

Digital Guardian

Digital Guardian is a next generation data protection platform designed to stop data theft.

Callsign

Callsign

Callsign’s mission is to seamlessly power the identification of every web, mobile and physical interaction.

Venrock

Venrock

Venrock helps entrepreneurs build some of the world's most disruptive, successful companies. We invest in technology: Security, Cloud Services, Big Data, Healthcare IT, AdTech.

Ribbon Communications

Ribbon Communications

Ribbon Communications delivers global communications software and network solutions to service providers, enterprises, and critical infrastructure sectors.

Agile Underwriting

Agile Underwriting

Agile, an underwriting agency, insurtech and Coverholder at Lloyd's, provides niche insurance products across Aviation, Marine & Cargo, Cyber and Financial Lines.

Dope Security

Dope Security

Dope Security is a fly-direct Secure Web Gateway that eliminates the data center stopover architecture required by legacy providers, instead performing security directly on the endpoint.

Aunalytics

Aunalytics

Aunalytics is a data platform company that delivers insights as a service to answer your most important IT and business questions.

NorthStar

NorthStar

NorthStar provide the visibility needed to track and reduce risk through risk-based vulnerability management and vulnerability exploit prediction.

Oort

Oort

Oort is an identity threat detection and response platform for enterprise security. The Oort platform is API-driven, cloud-native and agentless for rapid time to value and high scalability.

Locuz

Locuz

At Locuz, we’ve made it our mission to help businesses like yours create an actionable digital strategy.

Infisign

Infisign

Infisign addresses the challenges of traditional IAM systems and offers a comprehensive solution for modern identity management.

We Hack Purple

We Hack Purple

We Hack Purple is a Canadian company dedicated to helping anyone and everyone create secure software.

TrustMe

TrustMe

TrustMe’s integrated platform for business trust and resilience keeps organizations safe, secure, and trustworthy.

TerraZone

TerraZone

TerraZone is a global cyber security and privacy solutions provider to governments and enterprises.