{"id":216043,"date":"2026-01-04T08:09:07","date_gmt":"2026-01-04T08:09:07","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/216043\/"},"modified":"2026-01-04T08:09:07","modified_gmt":"2026-01-04T08:09:07","slug":"digital-wallet-fraud-how-your-bank-card-can-be-stolen-without-it-leaving-your-wallet-banks-and-building-societies","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/216043\/","title":{"rendered":"Digital wallet fraud: how your bank card can be stolen without it leaving your wallet | Banks and building societies"},"content":{"rendered":"

You get a call from your bank and the informed voice asks to you to confirm the personal details they have on file, which you do. You are then asked whether you bought something at an electrical retailer recently for \u00a3120 and spent \u00a3235 in Birmingham, but neither transaction rings true.<\/p>\n

The caller tells you they have blocked the payments but they must now secure your account, and say they will send you a notification to approve, or a code to pass on to them. You feel under pressure to protect your money, so you do what is asked.<\/p>\n

Unfortunately, the person at the other end of the phone is not your bank but a criminal, and they have added your payment card to a digital wallet on one of their many smartphones. At some stage, your account will be emptied by purchases of expensive phones or designer clothes, which will then be sold on.<\/p>\n

Banks have seen an increase in the number of attempts to exploit victims using the elaborate digital wallet fraud<\/a> and have introduced new security measures to counter the threat.<\/p>\n

Danai Antoniou, the chief scientist at Gradient Labs, a financial services AI company, says the approach from criminals can appear harmless as the victim is not being asked to move money.<\/p>\n

\u201cThis is why most people don\u2019t question it. If the notification says \u2018never share this with anyone\u2019 (or similar), they will pre-emptively mention it to the customer that this is a routine comment that comes with every notification \u2013 which is true, customers do become immune to warnings if they get warnings frequently,\u201d she says.<\/p>\n

\u201cVictims often describe feeling panicked and pressured during the call, being told their account is under attack, or that their money is at risk. In that heightened emotional state, approving a notification feels like the responsible thing to do. The victim believes they\u2019re protecting their account, when, in reality, they\u2019re handing over the keys.\u201d<\/p>\n

Santander says that digital wallet fraud was the second biggest reason for card scam losses last year, while HSBC has reported an increase over the past 18 months.<\/p>\n

UK Finance, the banking trade body, says that the number of attempts has surged, in part because security systems have prevented criminals being successful, forcing them to make more attacks.<\/p>\n

What the scam looks like<\/p>\n

The fraud can start with phishing where the victim provides personal and bank details after a text message that promises, for example, a winter fuel allowance payment, or an offer for cheap products on social media.<\/p>\n

After a few weeks, enough time for the victim to forget about supplying details, the fraudster will contact them, claiming to be from their bank. They will know which bank because of the details already supplied by the victim.<\/p>\n

They may ask the victim to confirm the address, or postcode, they have on file, in order to portray legitimacy. The criminal will then ask about some transactions, all fabricated, and when the victim says they don\u2019t recognise them, the criminal will claim they have been stopped, and more measures must be taken to secure the account. They will say that a notification is on the way, and the victim should approve it to secure the account.<\/p>\n

The scammers use text messages to secure victims\u2019 personal and bank details. Photograph: DCPhoto\/Alamy<\/p>\n

\u201cThe notification the customer receives is entirely legitimate, as it\u2019s the genuine notification your bank sends when a new Apple Pay or Google<\/a> Pay card is being added to a device, or the bank may send you a code via text, or in the app. They have just added your card into their Apple Pay or Google Pay and you are now receiving a text, or a notification, to approve it,\u201d Antoniou says.<\/p>\n

From there, the criminals can act quickly and empty the account of the victim. \u201cThey drain accounts at high-value merchants, such as tech stores and fashion retailers. The appeal is simple: electronics and designer goods can be quickly resold on the secondary market with minimal loss of profit during the money-laundering process,\u201d she adds.<\/p>\n

What to do<\/p>\n

Banks don\u2019t need your help to protect your account: they have systems in place to freeze and block accounts if needed. \u201cNever trust anyone who calls you from your bank unless you arranged that phone call in advance. If somebody calls, tell them you will call the bank back yourself,\u201d Antoniou says. And don\u2019t use a number they give you: search on the web for the bank\u2019s phone number, or use the one on the back of your physical debit or credit card.<\/p>\n

Nationwide warns people to be aware of what any one-time passcodes they receive are being used for.<\/p>\n

HSBC says it has put in new security measures to counter the threat of wallet fraud and more would be coming this year. \u201cWe are regularly reminding customers not to give out their details, such as one-time passcodes, and to treat them as carefully as you would your pin,\u201d it adds.<\/p>\n

UK Finance says: \u201cSet up bank alerts in your app, and check your transactions regularly so you know about any suspicious transactions as soon as possible.<\/p>\n

\u201cIf you think you\u2019ve fallen for a scam it\u2019s important to contact your bank immediately and report it to Report Fraud.\u201d<\/p>\n

Apple says it is not responsible for approving a card for inclusion in the wallet, but that it gives banks information that they can use to combat fraud.<\/p>\n

Google did not respond to a request for comment.<\/p>\n","protected":false},"excerpt":{"rendered":"You get a call from your bank and the informed voice asks to you to confirm the personal…\n","protected":false},"author":2,"featured_media":216044,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[342,111,139,69,145],"class_list":{"0":"post-216043","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-mobile","8":"tag-mobile","9":"tag-new-zealand","10":"tag-newzealand","11":"tag-nz","12":"tag-technology"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/216043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=216043"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/216043\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/216044"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=216043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=216043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=216043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}