New Android malware lets criminals use your bank card in real time
A new Android phone scam can let criminals steal money from a victim’s bank card in real time by tricking them into installing a harmful app and then using the phone’s tap-to-pay feature remotely. This attack can lead to cash withdrawals or card payments without the victim realizing it until money is gone.
Who is at risk
Android users who install apps from links in texts, messages, or websites, especially people who use banking apps or tap-to-pay on their phones, are most at risk.
What to watch for
Watch for unexpected messages urging you to install an app, unusual requests to change phone settings, strange pop-ups, or bank transactions and cash withdrawals you do not recognize.
What to do
Immediately review your bank activity, remove any recently installed unknown apps, turn off tap-to-pay if you do not need it, and contact your bank right away if anything looks suspicious.