διαβάστε το λινκ πιο πάνω
Εγώ το διάβασα, μάλιστα νομίζω ότι δεν είναι η πρώτη φορά που το αναφέρεις.
Ο φίλος σου, προφανώς αποκάλυψε και άλλα στοιχεία εκτός από το IBAN του, και επειδή η φύση τέτοιων απροσεξιών είναι να είναι... απρόσεκτες, προφανώς δεν έχει επίγνωση του γεγονότος. Τώρα, μπορεί να πει κάποιος "καλύτερα να μην δίνουμε κανένα στοιχείο, σε κανέναν, ποτέ" το οποίο ακούγεται λογικοφανές αλλά δεν είναι, διότι αργότερα ή νωρίτερα κάποιος, κάπου, κάποτε θα χρειαστεί να μας δώσει χρήματα.
Ακολουθεί και μία υπερ-πλήρης απάντηση από το Gemini, επί του θέματος... όποιος τα ξέρει όλα αυτά, μπορεί να πάει κατ' ευθείαν στην τελευταία παράγραφο. (όλα τα bold, από το ίδιο το Gemini).
In Greece, as in other SEPA (Single Euro Payments Area) countries, simply having someone's IBAN (International Bank Account Number) is generally
not enough for someone to directly steal money from your account.1
Here's why and what the real risks are:
Why IBAN alone is generally safe for incoming payments:
- Purpose of IBAN: An IBAN is designed to facilitate payments into an account.2 It uniquely identifies a specific bank account to ensure that money sent to it reaches the correct recipient.3
- Authentication for Outgoing Payments: To initiate an outgoing payment (transfer money fromyour account), you typically need much more than just the IBAN. This usually includes:
- Your online banking username and password.
- A second factor of authentication, such as a One-Time Password (OTP) received via SMS, a push notification on a banking app, or a hardware token.
- Your debit/credit card details (card number, expiry date, CVV/CVC) and often a PIN for ATM withdrawals or POS transactions.
- Direct Debits (SEPA Direct Debits): While theoretically, someone could set up a direct debit using your IBAN, this process usually requires a mandate (an authorization document) signed by you. Even if an unauthorized direct debit is initiated, you generally have a strong right to reimburse it through your bank within 8 weeks, and in some cases, up to 13 months, if it was indeed unauthorized.4 Banks do not typically check every mandate at the point of processing, but they will investigate if you report it as fraudulent.
The real risks and how money can be stolen (not just with an IBAN):
The actual threats usually involve
social engineering and tricking you into providing more sensitive information or taking action yourself.5
- Phishing/Smishing/Vishing:
- Phishing (email):Scammers send fake emails pretending to be your bank, a government agency, or a reputable company.6 These emails often contain malicious links that lead to fake websites designed to steal your online banking credentials (username, password), card details, or other personal information.
- Smishing (SMS):Similar to phishing, but via text messages.7
- Vishing (voice/phone calls):Scammers call you, pretending to be from your bank's fraud department, tech support, or other trusted entities.8 They try to convince you to reveal sensitive information or to install remote access software on your computer, allowing them to take control and initiate fraudulent transactions.
- The IBAN might be used in these scams to make the communication seem more legitimate (e.g., "We need to verify your IBAN for a refund"), but it's not the IBAN itself that enables the theft, rather the subsequent disclosure of your login details or OTPs.
- Money Muling Scams:
- You are asked to receive money into your account (for which they need your IBAN) and then transfer it to a third party, often keeping a percentage for yourself. This involves you, unknowingly, participating in money laundering. Your IBAN is used to send you illicit funds, not to steal from you directly, but you become a participant in a crime.
- Identity Theft for Account Opening:
- If a scammer obtains your IBAN along with other personal identifying information (like your full name, address, date of birth, and especially a copy of your ID card), they could potentially use this information to open new accounts in your name or to gain access to existing services, which could then lead to financial fraud.9 This is a more complex form of identity theft.
- "Fake Payment" Scams (when you are selling something):
- If you're selling an item, a scammer might "overpay" you and then ask you to refund the difference to another account. The initial payment might be fake or reversed later, leaving you out of pocket. For this, they only need your IBAN to send money to you, but the scam relies on your subsequent action.
What to do to stay safe in Greece:
- Never disclose your online banking passwords, PINs, or One-Time Passwords (OTPs) to anyone, for any reason. Your bank will never ask for these via phone, email, or SMS.
- Be suspicious of unexpected calls, emails, or SMS messages, especially those asking for personal or financial details.
- Always type your bank's official website address directly into your browser. Do not click on links in suspicious emails or texts.
- Regularly check your bank statements for any unauthorized transactions.
- If you suspect fraud or unauthorized activity, contact your bank immediately.In Greece, major banks like Eurobank, Alpha Bank, Piraeus Bank, and National Bank of Greece have dedicated security centers and emergency phone numbers.10 You should also report it to the police.
- Keep your devices secure:Use strong, unique passwords, enable two-factor authentication where available, keep your operating system and apps updated, and use reputable antivirus software.11
In summary, while your IBAN is not a secret and is necessary for others to send you money, it is
not sufficient on its own for someone to directly withdraw funds from your account in Greece. The danger lies in social engineering tactics that aim to trick you into revealing the additional, truly sensitive information required for transactions.
