<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">this trick is the mobile phone equivalent for email based <a href="http://en.wikipedia.org/wiki/Phishing">phishing </a>attacks. It did happen to me late last year. Someone smsed me a fake but realistic looking MPESA transaction, crediting my account by a mere 200sh. She then called me immediately thereafter claiming it was a wrong transaction and can I plse re-credit her account accordingly.<br><br>Since i consider myself an ethically upright citizen (by Kenyan standards ;-) i planned to MPESA her back the 200sh but got caught up with work. In the evening I got some time to do this but with time on my side, my sixth sense (courtesy of some IS audit training) told me to just check my MPESA credit. It had ofcourse not changed (credited) as alleged by my caller(scammer) and so I ignored the process of "returning" her money.<br><br>But i was
quite impressed at how, Kenyans are getting on with these tricks. I think within 3-5yrs, we shall be giving the<a href="http://en.wikipedia.org/wiki/Nigerian_scam"> Nigerians </a>a run for their money and we shall also have our own wikipedia page :-(<br><br>walu.<br><br><br><br><br>--- On <b>Tue, 3/15/11, Edith Adera <i><eadera@idrc.or.ke></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Edith Adera <eadera@idrc.or.ke><br>Subject: Re: [kictanet] problem inherent in how mobile money transactions are done<br>To: jwalu@yahoo.com<br>Cc: "KICTAnet ICT Policy Discussions" <kictanet@lists.kictanet.or.ke><br>Date: Tuesday, March 15, 2011, 6:39 PM<br><br><div id="yiv969596269">
<style><!--#yiv969596269 P {
MARGIN-TOP:0px;MARGIN-BOTTOM:0px;}
--></style>
<div dir="ltr"><font color="#000000" face="Tahoma" size="2">Francis,</font></div>
<div dir="ltr"><font face="tahoma" size="2"></font> </div>
<div dir="ltr"><font face="tahoma" size="2">This happened to me last week. Luckily I don't do money transfer so the person was unable to trick me and quickly disconnected.</font></div>
<div dir="ltr"><font face="tahoma" size="2"></font> </div>
<div dir="ltr"><font face="tahoma" size="2">Not sure what can be done to track such.</font></div>
<div dir="ltr"><font face="tahoma" size="2"></font> </div>
<div dir="ltr"><font face="tahoma" size="2">Edith</font></div>
<div>
<div><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: 'sans-serif';">
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;">
<b style=""><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';"><span style="">________________
</span></span></b><span style="color: black;">
</span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><font color="#000000"><b style=""><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';"><font color="#000000">Edith
Ofwona Adera</font> </span></b><span style="color: black;"></span></font></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';"><font color="#000000">Senior Program Specialist
</font></span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(0, 32, 96); line-height: 115%; font-family: 'sans-serif';"><font color="#000000">ICT4D Program and Climate Change & Water Program</font></span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA"><font color="#000000">International
Development Research Centre | Centre de recherches pour le développement international</font></span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(0, 32, 96); line-height: 115%; font-family: 'sans-serif';" lang="EN-CA"><font color="#000000">Regional Office for Eastern
and Southern Africa</font></span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA"><font color="#000000">Tel:
+254202713160 | Fax/Téléc: +254202711063 | Skype: edithadera</font></span></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA"><a rel="nofollow" ymailto="mailto:eadera@idrc.or.ke" target="_blank" href="/mc/compose?to=eadera@idrc.or.ke">eadera@idrc.or.ke</a>
| </span><a rel="nofollow" target="_blank" href="http://www.idrc.ca/"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA">www.idrc.ca</span></a><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA">
| </span><a rel="nofollow" target="_blank" href="http://www.crdi.ca/"><span style="font-size: 10pt; color: rgb(31, 73, 125); line-height: 115%; font-family: 'sans-serif';" lang="FR-CA">www.crdi.ca</span></a></p>
<p class="yiv969596269MsoNormal" style="margin: 0in 0in 0pt; line-height: 115%;"><span style="font-size: 10pt; font-family: 'sans-serif';" lang="FR-CA"><img alt="" hspace="0" align="baseline" border="0"></span></p></span><span style="font-size: 10pt; font-family: 'sans-serif';" lang="FR-CA"></span><p></p>
</font></div>
</div>
<div id="yiv969596269divRpF307571" style="direction: ltr;">
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>From:</b> kictanet-bounces+eadera=idrc.or.ke@lists.kictanet.or.ke [kictanet-bounces+eadera=idrc.or.ke@lists.kictanet.or.ke] On Behalf Of Francis.Hook@gmail.com [Francis.Hook@gmail.com]<br>
<b>Sent:</b> 15 March 2011 15:37<br>
<b>To:</b> Edith Adera<br>
<b>Cc:</b> KICTAnet ICT Policy Discussions<br>
<b>Subject:</b> [kictanet] problem inherent in how mobile money transactions are done<br>
</font><br>
</div>
<div></div>
<div>I have a colleague who received a rather suspect SMS that, at first glance seemed to advise of money rcvd from someone and a few minutes later someone called to say he had sent the money and error and has a crisis of sorts and would like the money sent
back. I have seen this twice. Tricksters at work.<br>
<br>
When using mobile money I have always wondered about the privacy of such transactions since one is required to sign a sheet with details of the transactions - details which are clearly visible to everyone. I note both ZAP and Mpesa have such sheets. It would
only take a keen eye to quickly pick out a number next to a high value, memorise it - under the pretext of doing a small transaction and then claim a victim within hours of the person depositing money into their account.<br>
<br>
I suppose unregistered mobile numbers must now be de-activated ASAP. <br>
<br>
Be on the look out.</div>
</div><br>-----Inline Attachment Follows-----<br><br><div class="plainMail">_______________________________________________<br>kictanet mailing list<br><a ymailto="mailto:kictanet@lists.kictanet.or.ke" href="/mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br><a href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br><br>This message was sent to: <a ymailto="mailto:jwalu@yahoo.com" href="/mc/compose?to=jwalu@yahoo.com">jwalu@yahoo.com</a><br>Unsubscribe or change your options at <a href="http://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com" target="_blank">http://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com</a><br></div></blockquote></td></tr></table><br>