xxx
A National Crime Agency investigation showed that http://www.OTP.Agency (one-time passcode) was run by Callum Picari, 23, from Hornchurch, Essex; Vijayasidhurshan Vijayanathan, 21, from Aylesbury, Buckinghamshire; and Aza Siddeeque, 19, from Milton Keynes, Buckinghamshire.
Criminals were charged a monthly subscription fee for a service which allowed them to access personal bank accounts and other accounts online to commit account takeover, fraud and steal money.
A basic package costing £30 a week allowed access to the OTP.Agency spoof call bot, designed to trick victim account holders into disclosing genuine one-time passcodes for their online accounts. This enabled criminals to bypass multifactor authentication on online banking and telecoms platforms, allowing them to access accounts and complete fraudulent transactions.
An elite plan cost £380 per month, which offered both a bespoke ‘free text to speech’ service, where criminals could type any message they wanted an automated call to say, and pre-scripted calls specifically designed by Picari, Vijayasidhurshan and Siddeeque to target customers. Officers recovered scripts for use by criminals pretending to call from BT, Sky, Virgin Media, HMRC, Mastercard and Visa.
From: Trio sentenced for £380 per month crime-as-a-service operation.
xxx