SBU exposed criminals who hacked accounts through Diya

Security Service of Ukraine (SBU) and the Prosecutor General's Office exposed an organized criminal group that specialized in unauthorized access to the bank accounts of Ukrainians.

The essence of the fraudulent scheme

The group used personal data of online banking users, including:

• Financial mobile phone numbers.
• Passwords.
• Authorization codes.

Thus, fraudsters unauthorizedly entered the mobile applications of Ukrainian banks and logged in to “Diya” through the BankID authorization system.

Cooperation and precautions

The SBU handed over suspicions to members of the criminal group. About this said The press service of the Ministry of Digital Affairs, which regularly cooperates with the Security Service of Ukraine and the cyber police to identify fraudulent schemes and track new attack methods.

Thus, in order to protect against such fraudulent actions, the Ministry of Digital Affairs, together with the Ukrainian Bureau of Credit Histories (UBKI), launched a push notification service about checking credit history in 2022.

At the same time, the user instantly learns if a bank or financial institution is checking his data, which allows him to react in time and stop fraudsters.

During the service's operation, Ukrainians received over 75,9 million notifications, which helped protect them from financial fraud.