In spite of the huge technology advances, Fraud keeps happening by making people gullible or provide incentives to make more money quickly. As i keep mentioning that only a few out of Trillions in the stock market make returns commensurate with their effort or a fairly large return. But these returns come from losers generally, unless the company has done really well.
One example of making people gullible is for, say, 50 people are targeted by X. 25 he tells a share Y to be bought because it will go UP and 25 he tells share Y to be sold because it will go DOWN. Depending on which 25 is correct, he splits the 25 into 12 and 13. He tells a Share Y to be bought because it will go UP and 13 he tells will go DOWN. Depending on which way stock has gone he splits the next, say 12 into 6 and 6. By now the guy who was in 25 (go UP) is sure the guy is on to something. next time he is in the 12 UP, he is more convinced. Now the 3rd time (out of 6) the guy who is giving tip is more convincing that he is for real prediction and the gullible person sends him money to double or triple it. Off goes the money.
Another Fraud example is Cashier is only supposed to collect money and not invoice. To manage with lower staff, Cashier was given the responsibility of making the invoice and for adjustments. (internal control of segragting cash collection and invoice) Cashier took money from the customer and stamped received on the Proforma invoice and gave it to customer, for say 105 KD. Then after customer left he pocketed 5 KD and made the invoice to 100 KD and customer paid 100 KD. Accounts side no dues as 100 KD invoice matched to 100 KD payment. He was doing it for 10-20 invoices in a day pocketing 100KD/day. Being smart, he targeted it on some days only and not all to avoid suspicion. He was caught one day when the customer had an issue and came with proforma invoice. On checking while proforma showed 105 KD the actual invoice in system was 100 KD. IT checked all his transactions, and it was found over a 2 year period he has taken out 10000 KD in all. Thus if management had heard internal control to keep invoicing and payment separate this could not have happened. Cashier had invoicing adjustment to round of currency to the nearest 0 or 5 at the end.
OTP sharing or Phone sharing is a definite NO NO. Software security works on 3 principles
a) Something you have (your phone, laptop, physical key)
b) Something you know ( Password, PIN, Security Questions)
c) Something you acquire or Are (OTP, face recognition, thumb impression ).
The fraudster has already access to a) & b) through net or when you lose your phone. Thus, when you share an OTP the banks have to pay and you do not have a recourse to recover it from banks.
Always, though tedious, use MFA (multi factor authorization). This uses b) c) and a google/MS or any authenticator. Its a two step process. You put your password or pin in say a laptop and it sends out a code to your mobile or email ID. Thus it double checks before allowing access or transaction. How long before the fraudster locate a loophole on this is to be seen.
Giving your phone- gives the fraudster a chance to change the message forwarding to his phone and thus any OTP goes to his phone. Thus if someone in Emergency asks for phone, dial the number and put it on speaker to see if it is genuine. Do not hand over the phone as experts can within seconds do the message forwarding procedures.
Digital Arrest- Nobody can digitally arrest you by saying you cannot call somebody etc.
Link click - Never click on an unknown link which attacks your vulnerability - eg someone is in hospital and unknown person says I will send you a link of a Dr to treat quickly etc, or someone has a huge loan to pay and unknown person says I will pay loan for you and you can pay me later. What these links contain is called an APK file that is a malware and sits on your phone or laptop (when you click) and sends out all your information (ID, pwd, keystrokes, links, contacts etc). Easy to defraud you later.
Reconfirm- With people sharing photos, videos, audios on public places, like WA, Insta, FB, Tiktok etc, AI can use to physically be you to talk to your loved ones. Ex. Your wife receives a phone call from an AI generated picture of you saying you met with an accident or serious issue and need INR 1,00,000 to be sent immediately to a link or number. You send and 5 mins later your husband walks in not aware of anything like this. In Such cases, when you receive a call, dont panic. get the details (extend call to get details- normally they cut it), and cut the call and call from your phone or another to the husband to check if it is genuine or fraud.
Always note that if the fraudster comes to know that you are delaying, you are not panicking, you may be aware of technology etc. they cancel and go for next easy victim.