"Thought It Was a Shopping Mall Payment Page"...FSS Issues Warning on Shopping Mall Card Information Phishing

Phishing Pages Disguised as Real Payment Screens
5,707 Cases of Stolen Card Information Reported

The Financial Supervisory Service recently confirmed incidents where credit card information was stolen due to phishing and hacking attacks on online shopping malls, urging consumers to exercise heightened caution.

Example of an Actual Phishing Page During Card Payment

On July 5, the Financial Supervisory Service issued a consumer alert at the "caution" level, warning that a large number of card details have been stolen during online shopping mall payment processes, significantly increasing the risk of unauthorized card transactions.

According to the Financial Supervisory Service, as of June 29, the Financial Security Institute identified 5,707 cases of stolen card information, carried out by organized groups specializing in stealing card details.

These phishing groups targeted the card payment process of certain domestic online shopping malls, creating phishing pages that closely mimic the actual payment screens through hacking and other methods. These pages were designed to deceive consumers into entering not only their card numbers but also all personal information, as if it were necessary for payment.

After stealing the card information, the phishing page would display a message such as "payment error" and then reload the legitimate payment page, prompting the consumer to re-enter their payment information. Because the payment would eventually be processed normally, consumers often did not realize they had visited a phishing page.

The Financial Supervisory Service emphasized that consumers should suspect phishing and stop entering information if they are asked to provide excessive personal data—such as their full resident registration number or the complete digits of their card PIN—during the online payment process.

It also advised that, if there is any suspicion of card information leakage or phishing after online shopping, consumers should immediately contact their card issuer to suspend card usage and request a reissue and PIN change.

Additionally, if there are concerns about further damage due to leaked information, it is recommended to report the incident promptly to the police.

Meanwhile, the Financial Security Institute promptly shared the stolen card information with each card issuer to help block fraudulent payment attempts. Card companies also provided individual notifications to affected customers and immediately implemented consumer protection measures such as card reissuance and blocking of unauthorized transactions.

This content was produced with the assistance of AI translation services.