Business owner who lost $10,000 in previous scam ditches Optus altogether after second attack
- Replies 12
In an age where our personal and professional lives are increasingly intertwined with digital technology, the security of our online accounts and personal information has never been more critical.
Yet, as we've seen with the distressing experience of one Townsville business owner, even the most vigilant can fall victim to sophisticated fraud attacks.
His ordeal with Optus, which resulted in a staggering loss due to fraudulent activity, is a stark reminder of the vulnerabilities within our digital ecosystems.
Andrew Ryder's nightmare began when scammers, impersonating him, contacted Optus and managed to transfer his phone number to a new SIM card.
With control over his phone number, they bypassed security measures and siphoned $10,000 from his bank account.
‘Then I get an SMS suggesting that my details in my Optus account have been altered,’ he recounted.
Despite Optus assisting him in recovering his stolen phone number after six days, the fraudsters struck again, altering his account details and leaving Mr Ryder dumbfounded at the breach of his newly updated, obscure password.
‘I obviously had changed the password,’ Mr Ryder asserted.
‘It was a completely obscure number and I have now subsequently changed it since the second breach.’
Mr Ryder stated that Optus staff informed him that fraudsters might have retained access to his account because they had his phone number when he changed his password.
An Optus spokesperson mentioned that the company advised Mr Ryder on how to protect his account, such as changing his phone number and account number, and adding him to a ‘hot list’ that would require in-person photo ID verification for any orders.
Mr Ryder was initially hesitant to change his phone number because it had long been associated with his jet ski and boat licencing business.
‘It is on signage, it is on advertising material and yes, all of that would have to get changed,’ he lamented.
However, he stated that the recent breach prompted him to change his personal number, and business number, and ultimately switch from Optus entirely.
‘I lay awake at night thinking about it,’ Mr Ryder remarked.
‘I'd had a thought that perhaps they have even redirected my mail because things had taken quite a long time to get here.’
‘My phone lost service yesterday and I immediately suspected further fraud, but it was a technical issue — but straightaway that is where my mind goes,’ he added.
The $10,000 initially withdrawn from Mr Ryder's bank account was refunded by his financial institution.
However, he mentioned that rebranding his business and implementing additional security measures would incur significant expenses.
‘I've gone and bought extra security for all of my devices, and I've had those devices professionally cleaned,’ Mr Ryder shared.
‘I've purchased a program that searches the dark web to see if more information has been released there — we're talking in the thousands of dollars.’
Optus, for its part, stated that it would continue to assist Mr Ryder and advised all customers to remain cautious regarding their personal information.
‘Regularly change passwords, [do] not re-use passwords between multiple accounts and be wary of sharing personal details and identity documents,’ a spokesperson advised.
Mr Ryder mentioned his plan to lodge a complaint with the Telecommunications Industry Ombudsman, seeking recourse for the ordeal he endured.
The recent case of fraud targeting Mr Ryder underscores the importance of vigilance in protecting personal information and accounts.
This incident sheds light on the growing risks of fraud in today's digital world, as highlighted by another Optus customer who lost $8,500 and his identity while on holiday due to a similar phone scam.
Have you had your own experiences with online security breaches? What measures have you taken to protect yourself? Share your stories and tips in the comments below.
Yet, as we've seen with the distressing experience of one Townsville business owner, even the most vigilant can fall victim to sophisticated fraud attacks.
His ordeal with Optus, which resulted in a staggering loss due to fraudulent activity, is a stark reminder of the vulnerabilities within our digital ecosystems.
Andrew Ryder's nightmare began when scammers, impersonating him, contacted Optus and managed to transfer his phone number to a new SIM card.
With control over his phone number, they bypassed security measures and siphoned $10,000 from his bank account.
‘Then I get an SMS suggesting that my details in my Optus account have been altered,’ he recounted.
Despite Optus assisting him in recovering his stolen phone number after six days, the fraudsters struck again, altering his account details and leaving Mr Ryder dumbfounded at the breach of his newly updated, obscure password.
‘I obviously had changed the password,’ Mr Ryder asserted.
‘It was a completely obscure number and I have now subsequently changed it since the second breach.’
Mr Ryder stated that Optus staff informed him that fraudsters might have retained access to his account because they had his phone number when he changed his password.
An Optus spokesperson mentioned that the company advised Mr Ryder on how to protect his account, such as changing his phone number and account number, and adding him to a ‘hot list’ that would require in-person photo ID verification for any orders.
Mr Ryder was initially hesitant to change his phone number because it had long been associated with his jet ski and boat licencing business.
‘It is on signage, it is on advertising material and yes, all of that would have to get changed,’ he lamented.
However, he stated that the recent breach prompted him to change his personal number, and business number, and ultimately switch from Optus entirely.
‘I lay awake at night thinking about it,’ Mr Ryder remarked.
‘I'd had a thought that perhaps they have even redirected my mail because things had taken quite a long time to get here.’
‘My phone lost service yesterday and I immediately suspected further fraud, but it was a technical issue — but straightaway that is where my mind goes,’ he added.
The $10,000 initially withdrawn from Mr Ryder's bank account was refunded by his financial institution.
However, he mentioned that rebranding his business and implementing additional security measures would incur significant expenses.
‘I've gone and bought extra security for all of my devices, and I've had those devices professionally cleaned,’ Mr Ryder shared.
‘I've purchased a program that searches the dark web to see if more information has been released there — we're talking in the thousands of dollars.’
Optus, for its part, stated that it would continue to assist Mr Ryder and advised all customers to remain cautious regarding their personal information.
‘Regularly change passwords, [do] not re-use passwords between multiple accounts and be wary of sharing personal details and identity documents,’ a spokesperson advised.
Mr Ryder mentioned his plan to lodge a complaint with the Telecommunications Industry Ombudsman, seeking recourse for the ordeal he endured.
The recent case of fraud targeting Mr Ryder underscores the importance of vigilance in protecting personal information and accounts.
This incident sheds light on the growing risks of fraud in today's digital world, as highlighted by another Optus customer who lost $8,500 and his identity while on holiday due to a similar phone scam.
Key Takeaways
- Townsville business owner Andrew Ryder suffered a $10,000 loss when his Optus account was hacked and his phone number was illegally moved to a new SIM card.
- Despite measures taken to secure his account after the first breach, the fraudsters managed to access his account for a second time.
- Due to ongoing security concerns, the business owner decided to change his personal and business phone numbers and leave Optus after the second breach.
- The victim incurred additional costs after enhancing security and checking for his information on the dark web, although the bank reimbursed the stolen funds.
- Mr Ryder mentioned his plan to lodge a complaint with the Telecommunications Industry Ombudsman.