2025-05-05 | Awas Modus

Beware of the New Fake BTS Scam: 3D Secure Credit Card Activation

Fake BTS scams are still common, and there are even more motives now. An explanation of what a Fake BTS scam is and the chronology of how it works can be found in the previous article.

After finding success with their previous tactic of sending short messages about “expiring points that need to be redeemed,” fraudsters are now spreading a new tactic: “activating 3D Secure credit cards.”

As usual, the short message contains urgent information, urging the victim to quickly access the provided link. In fact, this is a trap set by fraudsters to get the victim to immediately enter their personal information.

Chronology

The steps of the fake BTS scam are as follows:

  • The fraudster’s car operated as a fake BTS unit (as shown in the image above)
  • The fraudster sent a short message containing a phishing link via BCA’s official SMS number
  • The message contained information about “activating 3D secure on credit cards to protect against online fraud,” or other similarly worded messages, typically urgent and accompanied by a link.
  • Believing the message from BCA, the victim (a BCA Customer) clicked on the provided link.
  • The Customer was then prompted to enter their credit card information, such as the card number, CVV/CVC, expiration date, OTP code, and more.
  • The fraudster secretly stole the customer’s data and used it to make illegal transactions at online merchants without permission.

Security Tips

Here are 3 key security tips to help you avoid Fake BTS SMS scams:

  1. Don’t trust a message just because the sender’s number looks official, but focus on the content of the SMS. If the message asks you to activate 3D secure for your credit card or contains any urgent message with a link, it’s definitely a scam!
  2. Do not click on any links! Remember, BCA never asks customers to click on links or provide personal information.
  3. Keep your banking information confidential. Never share your card number, CVV/CVC, OTP code, or any other sensitive information with anyone.

Here are some security tips if you encounter a fake BTS SMS scam. While fraudsters will likely come up with new tactics in the future, it’s important to always follow the security tips above.

No matter the scam method, as long as you don’t click on random links or share your personal information, you can avoid falling victim to various scams.

If you receive suspicious messages, verify their authenticity through the haloBCA app, by calling 1500888, or via WhatsApp Bank BCA at 0811 1500 998.