Last weekend, influencer Nasdas hosted a live stream on Twitch. Live, he pledged to give 10,000 euros to his subscribers in the form of donations or gifts.
To enter the draw, all you had to do was share your RIB (Bank Identity Statement) or a PayPal ID in the video comments. Nasdas asked participants to justify why they absolutely needed the money.
The risks of data sharing
Unsurprisingly, the comments quickly became saturated with bank details, including the IBAN number (International Bank Account Number). This bank number is essential to make a transfer. At the influencer's request, Internet users quickly added their first and last names in the hope of receiving a little money.
Obviously, it is a very bad idea to share personal data, and especially banking data, live on Twitch. As expert Clément Domingo reminds us on his X account, this sharing of information poses serious threats to the individuals concerned:
In addition to the cyberattack against Free, 01Net was able to prove that it was possible to make fraudulent withdrawals from your account using the IBAN. To orchestrate thefts, all you have to do is combine the IBAN with other personal data, such as those included in the RIB. A cybercriminal can indeed launch a fraudulent direct debit authorization.
With all the information circulating on the Nasdas live, a hacker can easily achieve his ends and make you pay for his online purchases. A hacker can also subscribe to a telephone plan, which will be paid by IBAN. Hoping to earn a little money, Nasdas subscribers could find themselves completely stripped of their savings.
In addition, the information shared on Twitch could serve as a starting point for various scams, such as phishing attacks. In this scenario, a hacker could pretend to be a trusted person, such as a bank advisor, and highlight the data in his possession to lull his target's vigilance.
Monitor your bank account
If you have made the mistake of sharing your banking information on Twitch, keep an eye on your transactions. If you have any doubts, contact your bank to dispute the payments. If you act quickly, you should be able to get a refund.
French law requires the bank to reimburse you in the event of fraudulent withdrawals. This reimbursement must be made within 24 hours, without waiting for the results of an investigation, which will be conducted later. To benefit from this, you must report the fraud within thirteen months of the facts.
0 Comments