Change your habit of answering with a ‘yes’
In general, when we receive a phone call, we usually answer with a ‘yes’ automatically. However, the Bank of Spain warns us that this habit can be dangerous and invites us to change it.
The ‘yes’ scam
Cybercriminals have developed a variant of the phone scam known as ‘yes’ fraud. They take advantage of the fact that many people answer with a simple ‘yes’ to record their voice and get affirmative answers to other questions.
These recordings are subsequently used for fraudulent purposes, such as impersonating the interlocutor in illegal activities.
Techniques used by cybercriminals
The Bank of Spain reminds us of some of the most frequent techniques used by cybercriminals in this type of scam. One of them is the impersonation of banks or companies to obtain affirmative answers to questions such as ‘Have you authorized a transaction?’ or ‘Do you agree to receive updates from our services?’
Once the victim answers with a ‘yes’, the criminal has achieved his goal. In some cases, the call is automated and warns that a premium service or subscription has been purchased, then hangs up. When the victim calls to cancel this service, they are asked for sensitive data such as ID, account number or address, which are used for fraudulent purposes.
Tips to prevent scams
To avoid falling for this type of scam, the Bank of Spain gives us some practical advice:
Be wary of suspicious calls
If you get a call that looks suspicious, be suspicious and hang up. Instead of answering with a ‘yes’, you can greet with a ‘hello’ or ‘good morning’.
Check your accounts regularly
It is advisable to check your bank accounts and other services frequently for unusual or unauthorized movements.
Do not share personal or bank details over the phone
You should never give out personal or bank details over the phone, especially if the call seems suspicious.
Check for suspicious phone numbers
If you have doubts about the legitimacy of a call, you can search the phone number on the Internet to see if it has been reported as spam or fraud.