Protect Your Card from UAE Scammers

Card Data at Risk in UAE: Protect Yourself from Scammers

The proliferation of digital payments in recent years has significantly eased daily life in the UAE—be it for food delivery, transportation, or entertainment. However, along with these conveniences, there has been an increase in reports of abuses aimed at obtaining people's bank account and card information. Notably, card data skimming, which employs increasingly sophisticated tactics, is victimizing more individuals.

What is card skimming, and why is it dangerous?

Originally, card skimming involved using physical devices: scammers would attach extra components (such as fake card readers or tiny cameras) to ATMs or POS terminals to capture victims' card details and PIN codes. The harvested data would then be used to create fake cards and withdraw money.

Nowadays, online—or digital—card cloning, which doesn't require physical presence, is on the rise. A victim merely needs to enter their OTP code on a fraudulent website or authorize a transaction through a misleading app. Scammers can then gain almost immediate access to bank accounts, often without users even being aware of what has occurred.

How do digital scams happen?

In the UAE, scammers often target victims through social media advertisements. Frequently, they impersonate well-known brands to promote fake discounts or sweepstakes, redirecting unsuspecting users to a seemingly legitimate website.

Common elements of the attack:

Fake ads: enticing offers appearing on social media (e.g., 70% discount on well-known restaurant chains).

Phishing site: the ad leads to a misleading website that closely resembles the original.

OTP request: users are prompted to enter their one-time code, which instantly activates the transaction.

Remote purchase: the deducted amount appears as a foreign online purchase rather than the expected service.

This method of deception is becoming more sophisticated, and since many users are accustomed to using OTPs, they may overlook suspicious signs.

Physical skimming: still a relevant danger

Although digital crime is undoubtedly on the rise, classical skimming methods haven't disappeared. Instances have occurred in the UAE where fake elements were installed on terminals in cafes, gas stations, or small shops by fraudsters.

Ways to detect physical skimming:

Check if the terminal casing is loose or dangling.

Observe if the keypad or card reader appears unusual (e.g., too thick, different color).

Avoid ATMs located in poorly lit or secluded areas.

Digital warning signs to watch for

In the online world, it's common for scammers to contact victims via SMS or email, citing services that require updating payment information.

Warning signs:

Payment requests from unknown numbers or emails.

A service that has never previously requested data updates.

Grammatical errors, awkward phrasing.

Suspicious links not pointing to the official domain of the provider.

What to do if a suspicious transaction occurs?

If you suspect unauthorized access to your bank card, immediately take these steps:

1. Freeze the card through your bank's mobile app or internet banking.

2. Call the bank's customer service and report the suspicious transaction.

3. Request a new card if the original data is likely compromised.

4. Check previous transactions to see if any small charges were made earlier.

5. File a police report if fraud is confirmed.

Mobile payment: a safer alternative?

Experts suggest that digital wallets (such as Apple Pay, Google Pay) are safer than traditional card payments. They employ technologies like:

Multi-Factor Authentication (MFA).

Tokenization—replacing card data with a unique, single-use code.

Facial recognition or fingerprint identification.

However, it's important to note: no technology is perfect. If a user is careless and authorizes the transaction, even the most advanced protection won't help.

The key to protection: awareness

The number one tool for defense is user awareness. The following practices can help:

Never provide your OTP code on unknown or suspicious websites.

Use reliable antivirus software that alerts you to phishing attempts.

Don't save your card information in untrusted apps or browsers.

Regularly check your bank account and set up notifications for every transaction.

Summary

Card skimming—whether physical or digital—continues to pose a serious threat to UAE residents today. As scammers employ increasingly sophisticated methods, effective defense can only be achieved if users are aware of the risks and don't allow themselves to be deceived. Technological solutions can be of considerable help, but the most important line of defense remains: do not click blindly on every link, and don't provide your data without careful consideration.

(Source: Based on statements by data security experts.)