Damage of banks’ clients from fake payment systems amounted to 3.15 billion rubles over the year.

Damage to customers of Russian banks from fraudulent schemes using fake payment systems amounted to RUB 3.15bn in the second half of 2020 – first half of 2021, according to the Group-IB report. The amount of damage was calculated from the average size of a transaction multiplied by the number of detected transactions on phishing payment pages. Every day in Russia, deceived users made 11.7 thousand payments of 8.6 million rubles per day, the company estimated. It is a fraud with the imitation of payment confirmation pages 3-D Secure – this scheme is difficult to implement and difficult to detect the majority of the classical antifraud solutions, experts say. Group-IB first noticed such fraud in late 2020. A customer visits a phishing page of an online store, marketplace or online service, selects a product or service and enters his bank card details in the form of payment acceptance on the fraudulent resource. However, instead of a legitimate 3-D Secure page the fraud victim is redirected to a fake one and simultaneously the fraud server initiates a connection to a legitimate 3-D Secure server. Currently only some of the largest banks in Russia and CIS have protection against this type of fraud, says Pavel Krylov, head of Group-IB department on counteraction to online fraud. According to him, protection from such fraud is based on behavioral analysis and the ability to track each session and user behavior both on the web resource and in the mobile application in real time.