Online scammers target desperate loan seekers using online fraud

Fraud
(Image credit: Shutterstock / Sapann Design)

Hackers are stealing money from gullible victims looking for a flash loan and moving it into China, experts have warned.

A new report from cybersecurity experts CloudSEK has suggested such activity means there is a need for greater international cooperation in order to stop this type of fraud.

As per the report, hackers (which CloudSEK believes are Chinese) have created over four dozen Android apps, impersonating popular Indian banks. These apps are hosted on different third-party app repositories and standalone websites. Then, they are “aggressively” advertised through social media. The advertisements promise quick and substantial loans, and easy repayments.

Thousands of dollars stolen

Gullible consumers who fall for the trick are then asked to share personal information, such as their name, address, phone number, and bank account information. Furthermore, they are asked to pay a processing fee, usually 5% of the loan they are applying for. When that happens, the app goes dark, the loan never makes it to the victim’s bank account, and the money is gone.

Apparently, the hackers managed to steal more than $44,000 this way. The worst part is that the money is quickly moved across the border and into China, where the lack of proper regulatory scrutiny allows the attackers to hide their tracks effectively. This is made possible with the use of various payment gateways, not just Chinese, but also Indonesian, Malaysian, South African, Mexican, Brazilian, Turkish, Vietnamese, Philippino, and Colombian. 

"A notable trend we've observed is scammers exploiting Chinese payment gateways due to their relative ease of use and limited regulatory scrutiny. These gateways offer a convenient bridge to funnel funds outside India, leveraging sophisticated techniques that blur jurisdictional lines, making it challenging to track and intercept the money trail,” said Sparsh Kulshrestha, Senior Security Analyst at CloudSEK. 

“This enables scammers to sidestep the legal and financial roadblocks, making it imperative for authorities to enhance cooperation and adopt advanced measures to counter this sophisticated threat."

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
mobile phone
Popular Android financial help app is actually dangerous malware
Someone holding a passport with two boarding passes inside it
Top digital loan firm security slip-up puts data of 36 million users at risk
Malware worm
Coordinated global mobile malware campaign targets banking apps and cryptocurrency platforms
An illustration of a hooded hacker with an obscured face holding a large fingerprint against a red background.
ID theft – what happens when someone steals your identity
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
This widely-used instant loan app leaks nearly 30 million files of user data
Someone checking their credit card details online.
Hackers use CAPTCHA scam in PDF files on Webflow CDN to get past security systems
Latest in Security
A man holds a smartphone iPhone screen showing various social media apps including YouTube, TikTok, Facebook, Threads, Instagram and X
A worrying Apple Password App vulnerability reportedly left users exposed for months
DeepSeek
Fake DeepSeek installers are infecting your device with dangerous malware
AI tools.
Not even fairy tales are safe - researchers weaponise bedtime stories to jailbreak AI chatbots and create malware
Data leak
Top California sperm bank suffers embarrassing leak
An Android phone being held in the hand
These malicious Android apps were installed over 60 million times - here's how to stay safe
ransomware avast
Billions of credentials were stolen from businesses around the world in 2024
Latest in News
Oracle
Oracle unveils multi-billion dollar investment in UK cloud and AI
Woman disgusted by her laptop
Embarrassing Windows 11 bug that deleted Copilot app is now fixed – but will anyone outside of Microsoft care?
Canon March 2025 launch teaser
Canon teases two big vlogging camera launches for next week – and one looks to be the PowerShot V1
A collage of Eve Macarro in Ballerina and John Wick in his third film
New Ballerina movie trailer suggests Keanu Reeves' John Wick will have a bigger role to play in the spin-off film than we thought
Stability AI 3D Video
Stability AI’s new virtual camera turns any image into a cool 3D video and I’m blown away by how good it is
The Google Wallet app with a mode for kids shown on-screen.
Google Wallet’s new kid-friendly payment system is a win for parents