Phishing

Phishing relies on deception rather than breaking systems. Variants include:

• Email phishing: messages with links to fake login pages.
• Smishing: SMS messages claiming a prize, a blocked account or a pending delivery.
• Vishing: phone calls from people pretending to be bank staff, wallet support or officials, asking for the OTP 'to verify' or 'to reverse a transaction'.
• Spear phishing: targeted messages to specific people, such as company finance staff, often leading to fraudulent fund transfers.
• Fake social media pages and apps imitating banks and wallets.

Warning signs include urgency, threats of account closure, offers that are too good to be true, misspelled website addresses and requests for OTPs or PINs.

Banks counter phishing with customer awareness campaigns, two-factor authentication, transaction alerts, monitoring of suspicious domains and quick blocking of compromised accounts. NRB requires BFIs and PSPs to maintain cyber security controls and educate customers. The basic rule for customers: a bank or wallet will never ask for a PIN, password or OTP.

फिसिङ प्रणाली तोडेर होइन, छलेर गरिन्छ। प्रकार:

• इमेल फिसिङ: नक्कली लगइन पेजको लिङ्क।
• स्मिसिङ: पुरस्कार, खाता बन्द वा पार्सलको नाममा SMS।
• भिसिङ: बैंक कर्मचारी वा वालेट सपोर्ट बनेर फोन गरी OTP माग्ने।
• स्पियर फिसिङ: कम्पनीका वित्त कर्मचारी जस्ता विशेष व्यक्तिलाई लक्षित।
• नक्कली सामाजिक सञ्जाल पेज र एप।

चेतावनी सङ्केत: हतार, धम्की, अविश्वसनीय प्रस्ताव, गलत हिज्जेको वेबसाइट र OTP/PIN माग। बैंकहरूले सचेतना, दुई-तहको प्रमाणीकरण, कारोबार सूचना र तत्काल खाता रोक्का गरी फिसिङ रोक्छन्। मूल नियम: बैंक वा वालेटले कहिल्यै PIN, पासवर्ड वा OTP माग्दैन।