May 19, 2020 – dtac is warning its customers against an increasing number of phishing scams. In some instances, scammers falsely claim that they are  dtac employees through Facebook Messenger, asking to help customers for a balance check or providing special offers., The scammers will ask for the customer’s phone number and purchase content (such as in-game items) billed to that number. The content provider then sends a One-Time-Password (OTP), usually a four-digit number, by SMS to the victim. The scammers then ask the victims to share the OTP as part of the false dtac service. With the OTP, purchase of the items is confirmed and billed to the victim’s phone number but the scammer keeps the purchased items. Victims may not notice until they receive their phone bill.

The full process is as follows:

• The scammers create a fake account claiming to be a dtac employee, copying dtac logos and artwork from various online sources.
• The scammers reach out through Facebook Messenger in order to offer very attractive special deals.
• The scammers ask for the customer’s phone number.
• The scammer buys online content (such as in-game items) online and bills them to the victim’s phone number.
• Once the application is complete a four-digit OTP will be generated and sent to the victim’s phone.
• The scammers ask the victim for the OTP, confirming to the content provider that the items can be billed to the victim’s phone number.
• The scammers then shut down their fake Facebook account and open a new one.

dtac employees will never ask for an OTP sent to a customer’s device. To avoid such scams, customers are encouraged to use dtac’s channels, of which Call Center 1678, Facebook dtac and Twitter @dtac.

As per standard practices, customers who fall victim to scammers are responsible for the expenses incurred. dtac therefore encourages all dtac customers and phone users to stay vigilant against online scams, which have increased since the COVID-19 outbreak across all platforms, including banking and mobile operators.