- Country
- Switzerland
- What happened
- Switzerland’s Federal Office for Cyber Security described a case reported to BACS in which WhatsApp account-takeover messages led to fraudulent Twint payments. The attacker used a trusted contact’s account, asked for verification codes, then sent Twint codes that actually authorised voucher purchases. In one reported case, more than 1,800 Swiss francs was debited. After the victim stopped paying, the earlier WhatsApp code could let attackers target the victim’s contacts too.
- Pressure pattern
- Trusted-contact impersonation, small-help request, code sharing, payment-code confusion, and repeat asks.
- Pause point
- When the contact asked for an SMS or Twint code, before forwarding or entering any code.
- How Pausier may have helped
- Pausier may have helped by prompting a pause before sharing or entering codes, then encouraging a voice check with the contact and a review of the Twint confirmation.
- Source quote
- über 1800 Franken abbuchen