I had a call today from a call centre, an imposter, someone claiming to be from Sunrise, claiming they wanted to port my number to their new 6G framework. My caller ID app identified them as Sunrise. The caller said I would be sent an SMS, and if I didn't give the code in the SMS to them, my number would not be ported and it would take 7 days to move it over and only Sunrise head office could fix it, not a shop. They were quite persistent. The code sent to me by Sunrise via SMS was from MySunrise, and it clearly said not to give the code to anyone, including Sunrise staff.
Interesting because this is the first time I have had a Social Engineering/confidence trick type of call in Switzerland.
When you get these calls, blow up a balloon, prick it, and then exclaim "I've been shot - get me some help... gurgle gurgle... " and then hang up and block the numebr.
To port the number to a phone under their control. Once this achieved they can receive two factor SMS to get into your mail accounts, and from their anything is possible.
exactly. with control of the phone you have access to potentially a lot more: typically all online accounts: social media, email etc. with both email and phone, you can typically then access bank accounts. if you hold crypto and keys of access to keys are on your phone/computer, then it's game over.
there was a recent case when a bank account got emptied. the bank refused to compensate as they said it was the owner's fault for giving details to the scammers.
A reminder, any number can be spoofed. If you’ve got that number in your contacts, the call will appear to be coming from your contact.
A few weeks ago I got a call from a neighbour. Except it wasn’t. They used a number 20 or so different from mine. I hung up when my ‘neighbour’ started speaking English to me about being from Microsoft.
Many people were victim of this Sunrise fraud. The scammers usually have personal details of the victim and even their Sunrise contracts. They may be Sunrise employees working as contractors in one of the many branches of the company (albania, kosovo, turkey, portilugal, morocco) that make the fraud to earn extra money. Or maybe hackers who entered the Sunrise network and stole the data. They use these data to fraud customer up to 400 CHF each. Sunrise doesn't refund, doesn't even recommend to report the criminals to the police. The criminals buy crypto currencies, so they are not traceble, but you customer can contact the company where thus money is spent (you can see on your bill) and ask for refund. Sunrise knows it, but they don't reveal to the customers.