[kictanet] Sim card swap: How Farah Bashir lost Sh2.6m to fraudsters in hours

[Victor Kapiyo]

The *100*100# is a recent feature for  Safaricom prepaid users introduced a
few weeks ago. Apparently, postpaid users have the feature activated by
default.

Anyone with an idea of what happens on Airtel and Telkom?

Victor

On Mon, 30 May 2022, 20:58 Bradley Kisia via KICTANet, <
kictanet at lists.kictanet.or.ke> wrote:

> I see this link doing rounds on WhatsApp.  How valid is it?
> https://techweez.com/2022/05/30/stop-sim-replacement-at-mpesa-agent/
>
> On Mon, 30 May 2022 at 13:32, Barrack Otieno via KICTANet <
> kictanet at lists.kictanet.or.ke> wrote:
>
>> You hit the nail on the head. Most good accounts have relationship
>> Managers. I doubt they would just sit there and watch a fat account being
>> decimated.
>>
>> Regards
>>
>> On Mon, 30 May 2022, 5:05 pm Alex Watila via KICTANet, <
>> kictanet at lists.kictanet.or.ke> wrote:
>>
>>> Good afternoon,
>>>
>>> The Kenya Bankers Association and the Telcos are conveniently avoiding
>>>  the evidence that most of these frauds involve insiders
>>>
>>>
>>>
>>> Without dealing with the insider threats in the banks and telcos the
>>> frauds will continue
>>>
>>>
>>>
>>> At the moment they have just identified the sim swap vulnerabilities
>>> (actually some of the international banks have made 2FA mandatory and are
>>> using Authentication apps that are not based on your sim)
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Consultant
>>>
>>> ICT4D
>>>
>>> *Quality Management Systems
>>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b> *
>>>
>>> *Information Security Management Systems
>>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b>*
>>>
>>>
>>>
>>> *From:* KICTANet <kictanet-bounces+awatila=
>>> gmail.com at lists.kictanet.or.ke> *On Behalf Of *David Indeje via KICTANet
>>> *Sent:* Monday, May 30, 2022 10:59 AM
>>> *To:* Alex Watila <awatila at gmail.com>
>>> *Cc:* David Indeje <davidindeje at gmail.com>
>>> *Subject:* Re: [kictanet] Sim card swap: How Farah Bashir lost Sh2.6m
>>> to fraudsters in hours
>>>
>>>
>>>
>>> Dear Listers,
>>>
>>>
>>>
>>> These cases are emerging at an alarming rate. Indeed, the Kenya Bankers
>>> Association says consumer education will play a central role in addressing
>>> emerging security challenges. The association cites cases of phishing
>>> emails, and malware attacks, to have scaled up in tandem with the enhanced
>>> uptake of internet and mobile transaction platforms.
>>>
>>>
>>>
>>> “A study paper on human-centered cybersecurity: Kenyan Fintech sector,”
>>> prepared by KICTANet, in collaboration with Trust4Cyber Flagship Deutsche
>>> Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH,  says emerging
>>> threats in Kenya are organized crime, exporting cybercriminals to the East
>>> African region.  https://bit.ly/3vBc5SA
>>>
>>>
>>>
>>> *Kind Regards,*
>>>
>>>
>>> *David Indeje *_____________________________________
>>>
>>> +254 (0) 711 385 945 |  +254 (0) 734 024 856
>>>
>>> <https://www.linkedin.com/in/david-indeje/>
>>> _______________________________________________
>>> KICTANet mailing list
>>> KICTANet at lists.kictanet.or.ke
>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>>> Twitter: http://twitter.com/kictanet
>>> Facebook: https://www.facebook.com/KICTANet/
>>>
>>> Unsubscribe or change your options at
>>> https://lists.kictanet.or.ke/mailman/options/kictanet/otieno.barrack%40gmail.com
>>>
>>>
>>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>>> interested and involved in ICT policy and regulation. KICTANet is a
>>> catalyst for reform in the Information and Communication Technology sector.
>>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>>> Research, and Stakeholder Engagement.
>>>
>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>>> online that you follow in real life: respect people's times and bandwidth,
>>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>>> not spam, do not market your wares or qualifications.
>>>
>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>>> engagement platform.
>>>
>> _______________________________________________
>> KICTANet mailing list
>> KICTANet at lists.kictanet.or.ke
>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>> Twitter: http://twitter.com/kictanet
>> Facebook: https://www.facebook.com/KICTANet/
>>
>> Unsubscribe or change your options at
>> https://lists.kictanet.or.ke/mailman/options/kictanet/bkisia%40gmail.com
>>
>>
>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>> interested and involved in ICT policy and regulation. KICTANet is a
>> catalyst for reform in the Information and Communication Technology sector.
>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>> Research, and Stakeholder Engagement.
>>
>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>> online that you follow in real life: respect people's times and bandwidth,
>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>> not spam, do not market your wares or qualifications.
>>
>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>> engagement platform.
>>
> _______________________________________________
> KICTANet mailing list
> KICTANet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
> Twitter: http://twitter.com/kictanet
> Facebook: https://www.facebook.com/KICTANet/
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/vkapiyo%40gmail.com
>
>
> KICTANet is a multi-stakeholder Think Tank for people and institutions
> interested and involved in ICT policy and regulation. KICTANet is a
> catalyst for reform in the Information and Communication Technology sector.
> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
> Research, and Stakeholder Engagement.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
> KICTANet - The Power of Communities, is Kenya's premier ICT policy
> engagement platform.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20220530/3cdbfa4c/attachment.htm>