I was approached by UPS for a small payment to be paid for customduties. I had to give my card details. And was asked to copy the apple pay verification number. After that i got a warning that my card was connected with apple pay wallet. I am not using the wallet and have no cards attached. Yet two payments were Processed of which one was to much for the card balance. What to do?
iPhone 6
UPS never does this. You’ve just been scammed. Contact the bank that issued the credit or debit card used for the payment ASAP.
Call Apple at 1-800-MY-APPLE immediately after calling your bank.
File a police report.
Sorry, but I don’t interpret it that way.
My “read”:
He simply gave away ALL of his ccard info … including the CVV … which allowed the criminals to add HIS card to THEIR wallet.
That said, I’m fuzzy as to what OP meant by, “.. apple pay verification number …” ???
Might it have been part of his Card Issuer’s ApplePay verification process ?
Other interpretations / possible sequences are welcome and solicited.
It’s a degree of not being aware of what all the numbers mean.
Fraudster entices customer with gift/prize obligation to pay a nominal fee and then divulge credit information.
Fraudster enters information from card but needs 2FA, so tells customer it’s the approval code for transaction and it’s needed. Customer gladly hands it over.
This is a VERY common scam.
Sorry you got tripped-up.
Although your card being added to a criminal’s Apple Wallet is certainly a new “twist.”
The OP gave away his 2FA code. That’s how Apple Pay was compromised. It’s human error. 😢😢
He did both. The 2FA code is what he was told the authorization code is. That’s how he was tricked and the information was added to Apple Pay. The 6 digit code was needed for Apple Pay.
Once again, the best of safeguards can be defeated once a “human” gets in-the-loop. 🤔
You are correct. When scammers obtain the 2FA, they can add a card to Apple Pay. Once they get the card on an iPhone, they can rack up the fraudulent charges.
The “social engineering” needed to extract the 2FA code from the “target” certainly requires a high level of tenacity on the part of the criminal.
Phishing for card details
