Victims say the beneficiary of the illegal transactions was the UnionBank account of a certain “Mark Nagoyo”
BDO Unibank account holders reportedly lost thousands of pesos in deposits due to an online banking scam where unauthorized transfers were made to a Union Bank of the Philippines account with a false name.
BDO users took to social media from Saturday December 11 to complain that illegal transactions had been made using their accounts to transfer money to the UnionBank account of a certain “Mark Nagoyo”.
In Filipino, the word “nagoyo” means to make a fool out of someone.
The fraud was massive enough that a public Facebook group called “Mark Nagoyo BDO Hacked” has since been created, with several users reporting similar instances of hacking.
A common pattern has so far emerged among the victims of the hacking scandal: the alleged cybercriminals were somehow able to gain access to the victims’ BDO accounts even though they were careful not to click on any suspicious phishing links and that they did not reveal any of their bank details. in public.
BDO clients were surprised to receive email and SMS notifications from BDO informing them that the wire transfer – usually involving thousands of pesos – had been successfully processed. In some cases, hackers were able to bypass BDO’s One-Time PIN (OTP) security feature to sneak illegal transactions through.
Facebook user Mela Abesamis said she lost 50,025 pesos due to the hacking scheme. Abesamis said she first received a text message from BDO at 1.11am on Saturday saying there was a supposed transfer of P50,025 from her account, but it did not go through.
Seconds later, she received another text message from BDO and the amount has already been withdrawn from her bank account.
Like the other cases reported on social media, the alleged beneficiary of the illegal transaction was Nagoyo’s account.
“Sobrang maingat ako sa phishing scams. Wala akong pinipindot na khit anong unusual links, and bihira ko gamitin ang BDO debit / ko account. Naka-enable ang OTP ko, pero this time wala akong natanggap na OTP…. There is no response to an email saying I sent money to another bank, which is UnionBank,” Abesamis said on Facebook.
(I’m very careful of phishing scams. I don’t click on unusual links and barely use my BDO debit/account. My OTP is activated, but this time I didn’t receive any OTP. I was surprised when I suddenly received an email saying that I had sent money to another bank, which is UnionBank.)
Facebook user Charisse Matanguihan, who works for a government bank, also fell victim to the scheme on Thursday, December 9. In Matanguihan’s case, it appears the suspects embezzled money from other people’s accounts by impersonating her.
She said she woke up on Friday morning December 10 to missed calls and text messages from several people accusing her of taking their money. After checking her bank accounts, Matanguihan realized that she had lost a large portion of her deposits at BDO and four unauthorized funds transfer confirmations were made through her account.
“I work for a government bank, so I have to respect my integrity. I’m afraid that my reputation will be ruined although I too am a victim. Thus, I desperately need your help to investigate and press charges against whoever is behind this,” Matanguihan said.
BDO said in a statement on Sunday, December 12 that it was already investigating the alleged hack.
“BDO Unibank has been informed of [OTP]- related concerns. The bank would like to assure its customers that it is looking into each of the cases and will get back to those who have been affected,” he said.
BDO then reminded customers never to share their login and OTP information, and to change their online banking account passwords regularly.
The Bangko Sentral ng Pilipinas (BSP) also said it was in “close coordination” with BDO and UnionBank, assuring the public it would take “corrective action”, including refunding affected consumers.
“Rest assured that we continue to collaborate and engage stakeholders to ensure the security and integrity of the financial system as well as the protection of financial consumers,” the BSP said in a statement. – Rappler.com