A selfie is enough for criminals to open a shell account in the victim’s name, which can hold them responsible for loans and even crimes such as money laundering. This approach is a new scam, as announced in a warning by the Brazilian Federation of Banks (Febraban) on Wednesday (22/01). The elderly are one of the preferred targets, due to their lack of familiarity with technology.
This Content Is Only For Subscribers
To unlock this content, subscribe to INTERLIRA Reports.
Modus Operandi
To deceive the interlocutor, the fraudster promises benefits or gifts and asks, in exchange, for a photo to be taken. The gratification, offered in a fraudulent message or call, would be formalized with an in-person visit. One of the most commonly used tricks today is the donation of a monthly food basket, another is an extra social security benefit that, in fact, does not exist. The request for a live photo is a method of verifying identity based on facial biometrics, used in several banking system procedures, including opening accounts. In addition to verifying who the person is, the technology verifies that they are alive.
Variation of the scam
In addition to the selfie scam, Febraban also drew attention to a variation of the scheme, in which criminals offer gifts or freebies, such as flowers, cosmetics or chocolates. When delivering the “gift”, the scammers ask for a delivery fee, which must be paid by credit card. In many cases, the criminal uses a card machine with a damaged display, making it impossible for the victim to see the exact amount of the transaction. Another tactic is to divert the victim’s attention during payment so that they enter the password in the wrong field, allowing the scammer to access the information.
Targets
In addition to the elderly, criminals also target people who have already had their data leaked on the internet, since registering with a financial institution requires information such as CPF, address and telephone number. Personal data is sold in packages at addresses on the deep web. The gangs can also obtain the information using fake websites and emails, where they ask for data, under the promise of delivering benefits.
Use by Criminals
After opening an account in the victim’s name, the fraudster can apply for credit cards or loans, taking on debts in the name of the victim. Organized crime also uses shell accounts to divert amounts obtained in other frauds and overload the Pix security system. The traceability of transfers is interrupted after a certain number of transactions (this varies from bank to bank) due to computing limitations. Therefore, the victim may end up involved in criminal cases without knowing about the illegal activity in their name.
How to Avoid
To avoid falling for scams such as the selfie or delivery fee scam, it is recommended to adopt some security practices. It is important not to accept unexpected gifts or freebies, especially when you do not know who sent them, and to avoid providing personal data or filling out registrations on unknown or suspicious websites, especially those accessed through promotional links sent over the internet. It is also essential to check the card machine before making payments; if the display is damaged or prevents the amount from being displayed, the transaction should not be carried out. Furthermore, you should never take selfies or photos to receive gifts or fulfill requests from strangers, as this practice can be used maliciously to commit scams.
Analysis:
The increasing sophistication of scams, such as the “selfie scam,” demonstrates how criminals are exploiting human trust and a lack of technological literacy, particularly among vulnerable populations like the elderly, who are often less familiar with the digital landscape. These scams rely on social engineering tactics, using seemingly innocent requests for photos to exploit facial biometrics, exposing significant gaps in public awareness and institutional safeguards. The rapid evolution of such schemes underscores the need for widespread education in digital security practices.
As highlighted by Febraban, these scams exemplify the ways organized crime leverages personal data to create shell accounts used for financial fraud and criminal activities, including money laundering. The widespread availability of leaked personal information exacerbates the problem, leaving victims unaware that their data may already be compromised. With the growing frequency of data breaches and the sale of stolen information on the dark web, criminals can bypass traditional identity verification systems, emphasizing the urgent need for stronger cybersecurity measures and regulatory oversight.
From a public security perspective, the implications of these scams are far-reaching. The misuse of victims’ identities not only results in significant financial losses but can also implicate individuals in criminal investigations, damaging their reputations and causing psychological harm. This dual impact highlights the critical importance of a coordinated response, involving public education, institutional safeguards, and advancements in digital security technologies, to combat these increasingly sophisticated threats.
Sources: A Folha de SP; O Globo; CNN.