Are you a Victim of any Scam/Fraud?
28 days left
Hot Deal

My Experience with SBI YONO ATM Fraud: How I Recovered My Money

1382°
Deal Lieutenant
shraaj

In December of 2021, I had a shocking experience when I discovered an unread SMS on my father's phone stating that 20,000 INR had been debited from his account via cardless withdrawal from SBI YONO at 01:35 PM. Despite my father's denial of making such a transaction, we contacted SBI customer care for assistance, but they were unhelpful. We then visited the bank branch, but they instructed us to file an FIR at a police station before further proceedings. However, even after filing the FIR, another 20,000 INR was withdrawn from the same ATM, and the police were stunned to see my father's card still in his possession.

Although the General Manager of the bank suggested that the card may have been lost and the funds stolen, we were confident that the card was still in our possession, and we hadn't shared any personal information. The bank branch initially refused to check the CCTV footage of the ATM where the transaction occurred, but we persisted, and they eventually agreed to do so after some arguments. Upon discovering that SBI had received over 200,000 complaints with only a small fraction of them being accepted and compensated, I felt disheartened but remained hopeful that I would receive the 40,000 INR owed to me.

As we regularly visited the bank, the branch manager informed us that they were working on the case and mentioned insurance protection for fraud by debit card for Visa/Mastercard, which unfortunately did not apply to our situation,because the card has to be used Physically but in my case it was CardLess transaction. Despite the setback, I maintained confidence and demonstrated to the bank that no harmful external apps were installed on my phone and that Samsung KNOX Security was enabled which was Hardware Layer Security.

We also filed a complaint with various concerned authorities, including the RBI, and presented all necessary proof to support our case.

After much perseverance- 3 months, the RBI Regional Team finally confirmed via email that my account would be credited with the 40,000Rs owed to me by SBI. My family and I were overjoyed, and my father closed all his transactions, debit card, and net banking to prevent any future occurrences. However, we kept the account activity for my father's work purposes.

This incident raises several questions, such as why SBI YONO or SBI YONO Lite did not have SMS verification in 2020, and how the fraudster obtained the OTP. Regardless, the experience taught me valuable lessons, such as regularly monitoring our bank accounts and being aware of security measures to safeguard against fraudsters.

In conclusion, my story highlights the importance of staying vigilant and taking swift action if we fall victim to ATM fraud. Reporting such incidents to relevant authorities and providing them with sufficient evidence can lead to a successful outcome.
Expiring In 28 days
Disclaimer
We are not SEBI/IRDA registered. The information provided herein is for education purposes only. We will not be responsible for any of your profit/loss with this channel's suggestions. Consult your financial advisor before making any decisions.
Top Comments
Deal Lieutenant Deal Lieutenant
Link Copied

Good job.

What I would be interested in knowing is what the bank found out about how the two withdrawals happened and their conclusion.

Vanguard Vanguard
Link Copied

Same happened with my friend, 5-6 years before, we were in office and suddenly he got 6 sms of rs 10,000 withdrawal from ATM APPX 20 KM far from us, he checked whether ATM card with him, then check bank account, in between another 3 SMSs for 10,000 withdrawal, Total 90,000 was withdrawn. He complain to customer and during his talk to customer care 1 more message of 5000 debit, he blocked his card and and registered a complaint.

To our surprise whole 95000 was credited on 3rd day and customer care told us it was due to technical error at ATM

It was Axis Bank

Critic Critic
Link Copied
Expand
shraaj wrote:
TRUE!😄

But, SBI is the Largest Bank in India. If it Fails, INDIA Will fail and that is not gonna happen.

In Every Scam/Fraud SBI is there but SBI can absorb many such things and The Fact is OUT OF EVERY 3 BANKING customers 1 IS FROM SBI and that's is why it has 45Crore+ Bank A/c.
Actually it is "SBI, HDFC & ICICI are the Largest Banks in India. If they Fail, INDIA Will fail and that is not gonna happen."
65 Comments  |  
36 Dimers
  • Sort By
Deal Cadet Deal Cadet
Link Copied

Great work. 

Deal Cadet Deal Cadet
Link Copied
Where there is a will...there is a way...everything is possible if we fight for it
Deal Subedar Deal Subedar
Link Copied

Thanks for sharing 

Deal Lieutenant Deal Lieutenant
Link Copied

Good job.

What I would be interested in knowing is what the bank found out about how the two withdrawals happened and their conclusion.

Deal Cadet Deal Cadet
Link Copied

Wait I don't understand your contradicting statement: 

"SBI YONO or SBI YONO Lite did not have SMS verification in 2020, and how the fraudster obtained the OTP."

Isn't OTP a way of SMS verification?

Personally I haven't been a victim of fraud yet but some impostor did attempt to break into one of my bank accounts by impersonating official bank customer care on Twitter and trying to get me into sending an SMS from my device to authorize his device so he could transfer the balance to his account. Daily I report at least a couple of such fraud accounts now on Twitter. But I feel it's a losing battle because of how Twitter easily allows such impostors to exist.

Vanguard Vanguard
Link Copied

Same happened with my friend, 5-6 years before, we were in office and suddenly he got 6 sms of rs 10,000 withdrawal from ATM APPX 20 KM far from us, he checked whether ATM card with him, then check bank account, in between another 3 SMSs for 10,000 withdrawal, Total 90,000 was withdrawn. He complain to customer and during his talk to customer care 1 more message of 5000 debit, he blocked his card and and registered a complaint.

To our surprise whole 95000 was credited on 3rd day and customer care told us it was due to technical error at ATM

It was Axis Bank

Deal Lieutenant Deal Lieutenant
Link Copied
some1anywhere wrote:

Wait I don't understand your contradicting statement: 

"SBI YONO or SBI YONO Lite did not have SMS verification in 2020, and how the fraudster obtained the OTP."

Isn't OTP a way of SMS verification?

Personally I haven't been a victim of fraud yet but some impostor did attempt to break into one of my bank accounts by impersonating official bank customer care on Twitter and trying to get me into sending an SMS from my device to authorize his device so he could transfer the balance to his account. Daily I report at least a couple of such fraud accounts now on Twitter. But I feel it's a losing battle because of how Twitter easily allows such impostors to exist.

Nope at that Time only entering USER ID and PASSWORD was enough

SBI Yono (AKA SBI Net Banking Tech Team Later implemented SMS Verification feature later on in an update)
Deal Lieutenant Deal Lieutenant
Link Copied
1cooldesidd wrote:

Good job.

What I would be interested in knowing is what the bank found out about how the two withdrawals happened and their conclusion.

Never know that thing how did they know?

In an Initial Investigation, SBI Mumbai Cyber Division Team investigated and there was a Guy Named Akshay....he even tried to add the Beneficiary but failed because of Additional Security Layer such as Profile Password (MPIN) he didn't know.

That's why, But when RBI Intervened that matter was pretty serious and also I have attached many reports such as SBI Net Banking hasn't had enough security measures and how the people are bypassing this nobody noticed!

https://trak.in/tags/business/2021/11/13/sbi-cu...

https://www.quora.com/Recently-a-lady-lost-Rs-6...
Deal Major Deal Major
Link Copied

Good work plus1.

Didn't u get any interest on that 40k?

Or 3 months is the normal period and after that interest is applicable?

Deal Newbie Deal Newbie
Link Copied

Could you also elaborate/talk more about  why insurance protection for fraud by debit card for Visa/Mastercard was denied @shraaj

Deal Subedar Deal Subedar
Link Copied

Why to keep huge liquid cash and not make online fixed deposit for certain period of time and get renewed automatically? 

Pro Deal Legend Pro Deal Legend
Moderator
Link Copied
shashi118 wrote:

Why to keep huge liquid cash and not make online fixed deposit for certain period of time and get renewed automatically? 

the FD's ,no doubt, can easily be made online.
but they can be closed and credited back to a/c with the same ease
Deal Cadet Deal Cadet
Link Copied
Hotsoup wrote:

Same happened with my friend, 5-6 years before, we were in office and suddenly he got 6 sms of rs 10,000 withdrawal from ATM APPX 20 KM far from us, he checked whether ATM card with him, then check bank account, in between another 3 SMSs for 10,000 withdrawal, Total 90,000 was withdrawn. He complain to customer and during his talk to customer care 1 more message of 5000 debit, he blocked his card and and registered a complaint.

To our surprise whole 95000 was credited on 3rd day and customer care told us it was due to technical error at ATM

It was Axis Bank

Mistake from the bank. Usually it will take more than 10 branch visits and 20 complaints and 30 calls to bank to get back money.

Celeb Celeb
Link Copied

So many people accounts got debited by small amount like Rs 2000 etc.This was done using biometrics obtained from various platforms like Land Registration, AEPS etc......There are no strict laws in India and these type of transactions will increase drastically

Deal Newbie Deal Newbie
Link Copied

It Happened with my senior, about 5 years ago he lost 50k without sharing any details. Learning from him I kept most of my money in paper assets.He later on kept an account in SBI without any net banking, debit card or even UPI facility. That's hard for me to follow so I think paper assets like stocks and bonds are better secured than bank accounts these days.

Deal Lieutenant Deal Lieutenant
Link Copied
007akshayjain73 wrote:

Could you also elaborate/talk more about  why insurance protection for fraud by debit card for Visa/Mastercard was denied @shraaj

Because it was a CardLess Transaction.

Which doesn't require a Physical Debit Card.

Deal Lieutenant Deal Lieutenant
Link Copied
kartikxxx wrote:

Good work plus1.

Didn't u get any interest on that 40k?

Or 3 months is the normal period and after that interest is applicable?

I guess so! 3 months is normal because as far as I remember I received it within 2.5 months

Deal Newbie Deal Newbie
Link Copied
Expand
shraaj wrote:
Nope at that Time only entering USER ID and PASSWORD was enough

SBI Yono (AKA SBI Net Banking Tech Team Later implemented SMS Verification feature later on in an update)

Even ICICI net banking does not have 2 factor authentication. It simply allows to enter after username and password.. That always feels me risky..

Deal Lieutenant Deal Lieutenant
Link Copied
Expand
hemant301 wrote:

Even ICICI net banking does not have 2 factor authentication. It simply allows to enter after username and password.. That always feels me risky..

Set a Complex Password

XfM5?oNs!N$iihTSc$$t$E5&F&qz94
Deal Cadet Deal Cadet
Link Copied
Expand
hemant301 wrote:

Even ICICI net banking does not have 2 factor authentication. It simply allows to enter after username and password.. That always feels me risky..

I don't agree.. it asks for password or pin with OTP 

Deal Lieutenant Deal Lieutenant
Link Copied
Expand
vibhujain wrote:

I don't agree.. it asks for password or pin with OTP 

Which ICICI account you are using🤣,for Performing Transactions Only it asks for OTP/GRID Details otherwise just to login it won't ask
Deal Cadet Deal Cadet
Link Copied

Why did fraud protection on the card did not apply to your situation?

Deal Cadet Deal Cadet
Link Copied

It sometimes feels like the banks/financial institutions want to force people to buy card protection plan, by sponsoring small time frauds to scare people. worried

Analyst Analyst
Link Copied
Expand
shraaj wrote:
Which ICICI account you are using🤣,for Performing Transactions Only it asks for OTP/GRID Details otherwise just to login it won't ask
I believe nearly all bank's netbanking asks for otp/2fa in addition to user/pass whenever it detects a new browser/app login, or in few cases even for a different geo location or ip address. Try logging in from a new browser and check.
A better way to even test hack yourself is to simply use a new browser, along a fake/mock location which is far away in a different state, and use a vpn or a new ip. This way you would know how easy/difficult would it be for a hacker to get your access, assuming your user/pass is leaked. Even go to the extent of trying forgot your user/pass and see what all is needed to reset it, in case a hacker tries this approach.
Deal Lieutenant Deal Lieutenant
Link Copied
Expand
BlueFlash wrote:
I believe nearly all bank's netbanking asks for otp/2fa in addition to user/pass whenever it detects a new browser/app login, or in few cases even for a different geo location or ip address. Try logging in from a new browser and check.
A better way to even test hack yourself is to simply use a new browser, along a fake/mock location which is far away in a different state, and use a vpn or a new ip. This way you would know how easy/difficult would it be for a hacker to get your access, assuming your user/pass is leaked. Even go to the extent of trying forgot your user/pass and see what all is needed to reset it, in case a hacker tries this approach.
Whatever you have mentioned tried everything like Changing Locations, Browsers , New IP, etc but ICICI Net Banking doesn't ask for Additional OTP While Logging in.

Other users can confirm the same!
Critic Critic
Link Copied
Expand
hemant301 wrote:

Even ICICI net banking does not have 2 factor authentication. It simply allows to enter after username and password.. That always feels me risky..

Many banks' netbanking don't have 2fa & the reason probably being that those banks then ask for other passwords/otp while doing any txn after login to internet banking(e.g. some psu banks with no 2fa for internet banking ask for profile password along with otp for doing any fund transfer/beneficiary add). I am guessing ICICI does something similar.
@vibhujain @BlueFlash @shraaj
Talk-Of-The-Town Talk-Of-The-Town
Link Copied

horrifying... scream

Helpful Helpful
Link Copied

who was your mobile operator ? was it airtel?

1. sim card cloning is when someone obtain your duplicate sim based on forge doc.

2. when using on android many apps have acess to SMS, if they also have your card detail then u r done


India is the best and greatest country in the world and its system is fully secure still such thing happen and people need to go to RBI /courts for justice

replyuser
Click here to reply
Reply