The Transaction Authorization Code (TAC) is a unique 6-digit code that serves as an additional layer of identity verification when conducting financial transactions. Scammers might reach out through email, social media, phone or text, aiming to deceive you into sharing your TAC code, allowing them to carry out unauthorized online financial transactions.
Tactics Used by Scammers
1. Impersonating as customer service/sales representative of CelcomDigi
Scammers offering victims with offers that seem too good to be real such as loyalty program for bill waiver, rebate, free devices, etc.
The syndicate often use forged ‘employee ID’ that claim to be salesperson or using a photograph of CelcomDigi staff present in the retail store as the profile photo in the messaging app to convince the victim believe they're real.
Scammers requested the victim to share the TAC in order to participate in the program or to be entitle for the rebate or bill waiver.
By sharing the OTP, scammers will be able to perform some online transactions such as content purchase with the amount charged to victim’s postpaid bill.
2. Claimed mistaken registered victim's mobile number
Scammers contact victims, claiming they've mistakenly registered the victim's mobile number for an online bank account.
Scammers then inform that the TAC has been sent to the victim accidentally.
At this point, scammers may have already gained unauthorized access to the victim's internet banking.
Scammers request victim to forward the TAC to them with various reasons, such as needing it for an urgent hospital payment.
Once the scammers have obtained the TAC, they would use it to start transferring money from victim’s account.
3. Impersonating as a friend (family member/old acquaintance) of victim:
Scammers pretend to be a family member or friend on messaging apps, tricking people into sharing personal info like the TAC code.
Things to keep in mind:
DO NOT answer calls or reply to unknown numbers, block them.
DO NOT share your TAC number with anyone, keep these codes confidential.
Ignore TAC/OTP received that was not requested by you.
If you have accidentally shared the Celcom Life or MyDigi app OTP with a third party and your CLA has been logged in by a scammer, please log out from your current active session and it will automatically log out all other active sessions.
DO NOT trust deals that seem too good to be true. Ignore all persuasive attempts, even if they threaten you or appeal to your sympathies.
DO NOT rush into decisions, and do not let anyone pressure you into acting quickly.
Call your service providers, banks, etc. to further verify information given.
Stay updated on the latest scams and exercise caution when receiving unexpected calls or messages.
Inform your partner, friends, or family members about the potential scam calls you receive.
Rest assured that CelcomDigi is actively taking measures to ensure our customers do not fall prey to such scams.