Digi Under Fire: SIM Swapping Scam Exposes Customer Data – Are You at Risk?

A massive security breach at digi

Romanian telecom giant, Digi, is facing a severe crisis after numerous reports of SIM swapping fraud surfaced. Hackers are exploiting vulnerabilities within Digi's systems to illegally duplicate customer SIM cards, gaining access to sensitive personal data. While initial cases were reported in 2021, the problem has resurfaced, causing widespread panic and raising serious questions about Digi's security protocols. This isn't just a Digi problem; it highlights a growing threat across Spain.

What is carding and why should you be worried?

The tactic used in these attacks is known as carding, a rapidly escalating form of fraud. Criminals can clone a SIM card within minutes, impersonating the legitimate owner to access stored data. This includes contact lists, bank details, and more, enabling them to make unauthorized purchases or commit identity theft. The ease with which this fraud can be executed is deeply concerning for Digi users and the wider public.

The rising threat of online fraud in spain

As e-commerce booms in Spain, so too do the opportunities for cybercriminals. Digi warns that scammers are creating incredibly convincing fake websites mimicking banks, online stores, and even government agencies like the DGT. Users, often unknowingly, share their banking information – including card numbers, expiry dates, CVV codes, and full names – directly into the hands of these criminals. Be extra cautious when shopping online!

Beyond phishing: physical skimming and small purchases

The threat extends beyond online deception. Digi highlights the danger of physical skimming, where criminals attach devices (skimmers) to ATMs and point-of-sale terminals to steal card data. Moreover, cybercriminals often initiate small purchases – typically under €80 or €90 – to avoid triggering immediate fraud alerts. They also abuse stolen data to subscribe to streaming services and other digital content.

Digi's response: tips to protect yourself

Digi is scrambling to bolster its security and has released a list of recommendations for customers. Key safeguards include:

• Only share information on websites displaying a padlock icon and using HTTPS.
• Avoid clicking suspicious links or downloading unknown attachments received via email, SMS, or WhatsApp.
• Enable bank transaction alerts on your mobile device for real-time monitoring.
• Regularly review your account statements for unauthorized activity.
• Never save your card details online.

Strong passwords, updates, and vpns: your best defense

Digi reinforces standard security practices: use strong passwords, keep your devices and apps updated, install reliable antivirus software, and avoid using public Wi-Fi networks. These steps, while seemingly basic, remain crucial in the fight against cybercrime. Protecting your personal information is everyone's responsibility in the new digital landscape. Consider using Surfshark, a VPN service, to add another layer of security!