2023-09-20 | Awas Modus

Beware of Fraud Modes Targeting OneKlik

Banking fraud schemes are growing by the day. One of the most prevalent banking scams that comes in various forms is a scam that asks its victims to activate OneKlik on BCA mobile.

OneKlik is a BCA service that allows customers to make various online transactions with just one click. Transactions using OneKlik can be done through merchant applications or websites that have collaborated with BCA.

You need to be more vigilant to avoid falling for this OneKlik breach ruse. Knowing the various modes used by scammers to break into OneKlik is the first step to protecting yourself from OneKlik fraud.

The following are the scams that scammers use to ask victims to activate OneKlik on BCA mobile.

1. Posing as buyers in online shops

The scammers posing as buyers at an online shop. They pretended to be interested in the victim’s products and invited them to communicate via the chat application.

Saying that they want to make a payment with OneKlik, the scammer asks the victim to provide their ATM card number, this data will then be used to register OneKlik in an online shop application without the victim’s knowledge.

When the scammer proceeds to the next stage of registration, a OneKlik activation notification will appear on the victim’s mobile phone. The scammer will guide the victim to activate it on the victim’s BCA mobile app. Once active, the scammer can freely make transactions on the online shop application using the victim’s OneKlik to rob the account.

2. Posing as a CSO for a well-known marketplace/telecommunication provider

The scammer poses as a customer service officer (CSO) of a well-known marketplace (Shopee, Blibli.com, Tokopedia, etc.) or a well-known telecommunications provider (Telkomsel, Indosat, etc.). Through WhatsApp, the scammers introduce themselves as CSOs and engage in conversation to gain the victim’s trust. Then the scammer lures the victim to get a Reward Point that can be cashed out.

Claiming that the disbursement can only be done through OneKlik, the scammer asks for the victim’s account number and ATM BCA card number. The scammer secretly used the data to activate OneKlik in an online shop application.

The scammer then asked the victim to click on a notification on their mobile phone and guided them to complete the OneKlik activation on the victim’s BCA mobile. Once activated, the scammer spent the victim’s money on the online shop app using the victim’s OneKlik.

3. Posing as a customer of a proxy author

The scammer poses as a customer looking for a proxy to write a thesis/final project/national exam/paper, etc. The scammer pretends to pay for this service via OneKlik BCA transfer and then sends a screenshot of a fake banking data form from OneKlik that must be filled in. They asked the victim for their mobile phone number and ATM BCA card. With this information, they activate OneKlik in an online shop application.

A notification from OneKlik will appear on the victim’s mobile phone. The victim is asked to click the notification that will direct them to the ‘OneKlik Activation’ menu on their BCA mobile, and complete the activation. After the victim unknowingly successfully activates OneKlik on an online shop app, the scammer can make transactions on the online shop application using the victim’s OneKlik, draining the victim’s account.

4. Posing as a landlord of a boarding house/futsal court 

Recently, scammers emerged as property owners (boarding houses/shops/houses) or an owner of sports fields for rent (futsal/badminton/golf), and the victim is the prospective tenant. These victims usually get the landlord’s contacts from Google (in some cases, they also actively make phone calls to prospective victims). The scammer asks the prospective tenant to deposit in advance to keep it from being booked by someone else.

Claiming that the payment had to be made through OneKlik, the scammers ask for the victim’s BCA mobile phone number and ATM BCA card number. Then, directing the victim to click on the OneKlik activation notification that appears on the victim’s mobile phone or directing the victim to open BCA mobile, select m-Admin and then select “‘Atur OneKlik’. Without realizing it, the victim was being directed to complete OneKlik activation in an online shop application. Not long after, the money in the victim’s account was drained by the scammer.

Tips to Avoid BCA OneKlik Activation Scam

It is customary to keep your data private and not give it to others. Especially if it is sensitive information, such as ATM card numbers, PINs, and OTPs to strangers.

These data can be misused by criminals to break into bank accounts and drain the money in them. Immediately ignore if someone asks for your private information for any reason.

If you suddenly get a notification to activate OneKlik, check before you click. Make sure that you are the one who registered. If you don’t think you have registered, just ignore the notification.

Immediately report to Halo BCA t 1500888 if anyone tries to request data or activate OneKlik using your account. Make sure you are also aware of other frauds by keeping yourself informed via #AwasModus.