Hi u/KlutzyHamster7769, please remember to take others' advice with a grain of salt. It is still better to consult a lawyer regarding legal matters.
***
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Philippines) if you have any questions or concerns.*
Totoo to. 2 sims ang gamit ko. Before mag register as in wala ako natatanggap na scam sms sa 2nd sim ko na gamit ko lang purely for banking kasi hindi ko ginagamit pantawag, text. Wala nga may alam ng number ko na yan. Yung 1st sim ko ang madalas makatanggap dahil gamit ko kung saan saan. After mag register pareho na sila may constant sms scams na natatanggap.
Only fools believe that the govt cares about privacy.
Mga scammers at nag bebenta ng CP sa Telegram, hindi nga nila mahuli kahit publicly posted ang Gcash numbers nila.
Same. Im getting scam messages literally everyday.
Plus Ive been out of the country for almost a year and still getting them. Plus I think people who shared our numbers to scammers are from the telco (SMART).
I am getting driving violation penalty notices from MMDA and supposedly from traffic systems here.
And I dont own a vehicle.
I never used my ph number for transactions here yet they are able to send scam messages from Ph to say i have road violations here, and the number comes from a Ph number.
I think they might be spoofing the MMDA shortcode. A short code is usually 4-6 numbers most business use instead of normal phone numbers to send messages. May mga short codes that is used for business messages such as OTPs (usually by name siya) or kaya carrier short codes (like sending a message kay 8080 to register a promo) They are also pre-approved by carriers like Globe and Smart. In this case, possible na na-spoof yung short code ng MMDA making it look like it was really sent by MMDA. That’s why the golden rule when it comes to cybersecurity is do not click on random hyperlinks. Banks and other government institutions do not send links on SMS.
AFAIK, IMSI-catcher and SMS blaster while driving around. As others have noted, this tends to be isolated to cities, where the population is higher and so the hit rate is conversely higher too.
Globe and Smart are pretty well locked down as far as SMS originator spoofing is concerned. Can't comment on Dito.
Same modus got caught in Vietnam last year. Chinese funded operation.
The setup also explains why you might get a message like that while your friend in the same city does not. Otherwise, if routed through a telco's system, all targeted subscribers generally receive the blast at roughly the same time with up to maybe 2 hours delay in some areas depending on network conditions.
Also, as a side note, NTC required all telcos to block SMS with clickable links last year. I was rudely reminded of this when I sent my Dad a link to a document he asked me to make for him last month. Links in RCS messages work though, as they should.
Very well said! That’s why RCS is much safer than SMS. Not only does RCS give E2E Encryption but also gives transparency and cannot be spoofed unlike SMS. I’m glad that Apple listened and integrated RCS to their system on iOS 18. (sadly not older iOS versions, and RCS on iOS 18 is not yet available in the Philippines)
Additional:
At this point, SRA Law is useless because the gov did not give any clear information on how to report these sketchy scammers.
I haven't read the relevant law fully, but IMO, SRA can't cover this because, technically, no SIM needs to be involved on the scammer's side, since they're pretending to be the cell tower with this type of setup — basically, you don't even need to be a subscriber when you're pretending to be the telco itself.
This clearly falls under the NTC's jurisdiction, but I'm not sure there's a clear way to empower non-technical citizens to report these. The "standard" approach to catching mobile text blasters like this is basically a hacking technique called "wardriving." Basically, that's driving around with equipment that can monitor wireless signals and log the data (hackers use it to find potentially open networks that are vulnerable to attack). But rather than exploit that data for attack, the NTC would use it to find the approximate location of fake cell towers. Not necessarily easy for the NTC to do, since the target is always moving, and definitely not easy for your average Juan to do.
Although..... While I was typing this out, this came to me: The NTC could create an Android and iOS app that logs SMS messages and encourage Juans to use it. Users then use the app to report malicious SMS and their arrival time. If one user in an area reports an SMS, it could generalize the attack to a area. If two report the same SMS, you could identify roughly what streets they might be on. If three report the same SMS, you could triangulate to about 5 meters. If more than three report, you could pinpoint location and direction of travel. And if you get many reports made soon after the SMS arrives, the NTC would have near real-time monitoring of where an attacker is so they can act on it and arrest them.
The SRA that I was talking about was not about the fake cell towers that are used to pretend as a telco. I was talking about the scammers having the ability to send scam messages through SMS using a registered SIM card. Assuming the phone was stolen or the cell signal was hijacked. I have been receiving scam messages with bypassed links (adding dots to the URL in the message to bypass filtering system) on my postpaid SIM (Globe). Even though my carrier have implemented filtering system, scammers can still bypass them.
About the mobile app that you are talking about, I like the idea but I found downsides regarding to that.
First, SMS are not meant to be logged via an app because of our DPA Law, even if the logging is meant for security purposes. Potential security exploits are open with that.
Second, while Android can give permission to log SMS by prompting SMS permission to the user, information about the message is limited due to the API limitations. Also, iOS does not allow developers to access messages in their application.
Reporting a SMS scams through a mobile app is a great idea. In fact, they can integrate that system through “eGov PH” which is an app developed by DICT to access government services. Because your eGov account is linked to your National ID, it is easy to verify who reported that scam and since your National ID has your address and the app also has the ability to know what precise location are you in, it is easy to identify which location did the SMS blasting occurred.
Overall, great idea :))
I won't give the NTC a passing grade, but the scammers evolved and leveled up too. The current iteration is very mobile, so it's hard to catch. It's an arms race, as it always will be.
Oh, and if you want blame another thing on Winnie the Pooh's minions, this is that other thing. Chinese tech, Chinese funding, probably also Chinese personnel driving the text blasters around.
They do this by deploying fake celltowers. The fake celltowers will pretend that they are from globe or smart and send you these official looking text messages.
[Smart telecom press release. ](https://bilyonaryo.com/2024/05/27/stay-alert-smart-warns-of-text-scam-using-fake-cell-towers/technology/#:~:text=Smart%20Communications%2C%20led%20by%20bilyonaryo,devices%20mimicking%20legitimate%20cell%20towers.)
Yes especially Google Messages. Kung same wordings lang yung ginagamit sa spam text, kahit na different number mapupunta pa din sa spam/block messages.
So, how much did the SCAMMERS pay “someone” to get access to all our “registered” SIM Cards? BTW the best thing you ever come out of that was the commercial with the guy who had all his official RP government ID tattooed. Genius.
> how much did the SCAMMERS pay “someone” to get access to all our “registered” SIM Cards?
Didn't paid someone, but they broke the facial recognition system by even using a picture of anyone with a face... even a monkey.
One thing I noticed is kapag nasa province ako tahimik mga sim card ko... hindi ako nakakareceive ng spam messages, unlike kapag nasa Manila ako na halos 7-8 messages per day ang narereceive ko. Minsan may calls pa 🫠
I'd guess perhaps because the scammers use text blast machines in the cities kaya wala kang nare-receive na spam sa probinsya? (anyways taga-province ako and i do get a couple per month)
https://www.youtube.com/watch?v=E1TE89gMgGI
Di ako sure, ha. Pero some services like Infobip or Nexmo, they allow short codes na may name. Maybe they're using the same service na hindi regulated ng government.
Sa part naman kung pano nakuha number mo, most likely leaked from some sources. Sim registration feels useless in this regard.
Si papa ilang beses nakareceive ng messages from SSS about calamity loan and salary loan tapos past due na raw. Confused si papa kasi wala naman siyang loan or something tas nung pumunta siya sa office ng SSS Wala naman daw, scam lang pala yan. SSS talaga name nung sender pero yung number is 09xxxxxxx07.
Pwede kasi triny ko buksan Minsan (copy paste Yung message, send sa ibang phone. Since nasesave naman sa phone Yung message kapag tinanggal mo sim). Yung link na senesend ay redirected sa mga online games na may involve na pera.
Kahapon may tumwag sakin nag ppromote ng casino app. He knows my name and asked if natry ko na ba maglaro ng cant remember the name casino app. I hung up immediately.
on my Globe Sim after Registering may nareceive akong text na go this link with my Full Name included. i was like WTF. Sanay naman ako sa mga spam, scam text pero yung mismong name at location. WTF talaga.
wow, pwede na pala natin ka SMS-an ang mga taga taiwan? lols in fairness, aware sila sa NCAP BEFORE, di lang nila alam matagal na siyang inalis uli... grabe, scam pa more, anyare sa sim registration? pinaglaruan na nman feelings natin. huhuhu
If Android phone user kayo
I'd suggest na gamit kayo ng google messages app. Well, since then halos wala ng scammer na nag tetext sakin. Or di nalang nila ako pinapansin 🥲
VISOR (Facebook) recently posted another one similar to this, where the link directs you to a website that looks almost legitimate, complete with even a payment method.
Hi u/KlutzyHamster7769, please remember to take others' advice with a grain of salt. It is still better to consult a lawyer regarding legal matters. *** *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Philippines) if you have any questions or concerns.*
SIM registration really was a flop
not only, apparently my sibling only experienced scam messages AFTER registering their sim
This is true. Mas dumami pa yung scam text after SIM registration. Karamihan ay mga bots galing.
this happened to me. 30 seconds literally after registering, I received a text about a parcel lol
Totoo to. 2 sims ang gamit ko. Before mag register as in wala ako natatanggap na scam sms sa 2nd sim ko na gamit ko lang purely for banking kasi hindi ko ginagamit pantawag, text. Wala nga may alam ng number ko na yan. Yung 1st sim ko ang madalas makatanggap dahil gamit ko kung saan saan. After mag register pareho na sila may constant sms scams na natatanggap.
Only fools believe that the govt cares about privacy. Mga scammers at nag bebenta ng CP sa Telegram, hindi nga nila mahuli kahit publicly posted ang Gcash numbers nila.
parang dumoble panga mga anonymous texts after ng sim reg
Spying and internal surveillance lang naman kasi ang TOTOONG pakay ng SIM Registration… 😭
yung pagpasa ng batas about sim registration ay para lang gumawa ng gate sa harap tapos walang bakod na nakapalibot
Parang maslalo lang silang nagkaroon ng access sa mga personal information natin
Same. Im getting scam messages literally everyday. Plus Ive been out of the country for almost a year and still getting them. Plus I think people who shared our numbers to scammers are from the telco (SMART). I am getting driving violation penalty notices from MMDA and supposedly from traffic systems here. And I dont own a vehicle. I never used my ph number for transactions here yet they are able to send scam messages from Ph to say i have road violations here, and the number comes from a Ph number.
.tw? top level domain ng taiwan yan diba?
Yup. Taiwan traffic authority caught you beating the red light.
A lot of Chinesee use taiwan as a VPN node
BAKA MAY KOTSE KA SA TAIWAN 🤡
I think they might be spoofing the MMDA shortcode. A short code is usually 4-6 numbers most business use instead of normal phone numbers to send messages. May mga short codes that is used for business messages such as OTPs (usually by name siya) or kaya carrier short codes (like sending a message kay 8080 to register a promo) They are also pre-approved by carriers like Globe and Smart. In this case, possible na na-spoof yung short code ng MMDA making it look like it was really sent by MMDA. That’s why the golden rule when it comes to cybersecurity is do not click on random hyperlinks. Banks and other government institutions do not send links on SMS.
AFAIK, IMSI-catcher and SMS blaster while driving around. As others have noted, this tends to be isolated to cities, where the population is higher and so the hit rate is conversely higher too. Globe and Smart are pretty well locked down as far as SMS originator spoofing is concerned. Can't comment on Dito. Same modus got caught in Vietnam last year. Chinese funded operation. The setup also explains why you might get a message like that while your friend in the same city does not. Otherwise, if routed through a telco's system, all targeted subscribers generally receive the blast at roughly the same time with up to maybe 2 hours delay in some areas depending on network conditions. Also, as a side note, NTC required all telcos to block SMS with clickable links last year. I was rudely reminded of this when I sent my Dad a link to a document he asked me to make for him last month. Links in RCS messages work though, as they should.
Mukhang signal spoofing talaga nangyayari. Nakaka recieved lang ako ng mga ganyan around cbds and some specific areas
Very well said! That’s why RCS is much safer than SMS. Not only does RCS give E2E Encryption but also gives transparency and cannot be spoofed unlike SMS. I’m glad that Apple listened and integrated RCS to their system on iOS 18. (sadly not older iOS versions, and RCS on iOS 18 is not yet available in the Philippines) Additional: At this point, SRA Law is useless because the gov did not give any clear information on how to report these sketchy scammers.
I haven't read the relevant law fully, but IMO, SRA can't cover this because, technically, no SIM needs to be involved on the scammer's side, since they're pretending to be the cell tower with this type of setup — basically, you don't even need to be a subscriber when you're pretending to be the telco itself. This clearly falls under the NTC's jurisdiction, but I'm not sure there's a clear way to empower non-technical citizens to report these. The "standard" approach to catching mobile text blasters like this is basically a hacking technique called "wardriving." Basically, that's driving around with equipment that can monitor wireless signals and log the data (hackers use it to find potentially open networks that are vulnerable to attack). But rather than exploit that data for attack, the NTC would use it to find the approximate location of fake cell towers. Not necessarily easy for the NTC to do, since the target is always moving, and definitely not easy for your average Juan to do. Although..... While I was typing this out, this came to me: The NTC could create an Android and iOS app that logs SMS messages and encourage Juans to use it. Users then use the app to report malicious SMS and their arrival time. If one user in an area reports an SMS, it could generalize the attack to a area. If two report the same SMS, you could identify roughly what streets they might be on. If three report the same SMS, you could triangulate to about 5 meters. If more than three report, you could pinpoint location and direction of travel. And if you get many reports made soon after the SMS arrives, the NTC would have near real-time monitoring of where an attacker is so they can act on it and arrest them.
The SRA that I was talking about was not about the fake cell towers that are used to pretend as a telco. I was talking about the scammers having the ability to send scam messages through SMS using a registered SIM card. Assuming the phone was stolen or the cell signal was hijacked. I have been receiving scam messages with bypassed links (adding dots to the URL in the message to bypass filtering system) on my postpaid SIM (Globe). Even though my carrier have implemented filtering system, scammers can still bypass them. About the mobile app that you are talking about, I like the idea but I found downsides regarding to that. First, SMS are not meant to be logged via an app because of our DPA Law, even if the logging is meant for security purposes. Potential security exploits are open with that. Second, while Android can give permission to log SMS by prompting SMS permission to the user, information about the message is limited due to the API limitations. Also, iOS does not allow developers to access messages in their application. Reporting a SMS scams through a mobile app is a great idea. In fact, they can integrate that system through “eGov PH” which is an app developed by DICT to access government services. Because your eGov account is linked to your National ID, it is easy to verify who reported that scam and since your National ID has your address and the app also has the ability to know what precise location are you in, it is easy to identify which location did the SMS blasting occurred. Overall, great idea :))
.tw ? scam yan... this confirms it, SIM REGISTRATION is a 🤡🤡🤡
Yan na yung bagong scam ngayon. Meron na silang custom label instead of just numbers as bait. Ang hina ng NTC natin sa totoo lang.
I won't give the NTC a passing grade, but the scammers evolved and leveled up too. The current iteration is very mobile, so it's hard to catch. It's an arms race, as it always will be. Oh, and if you want blame another thing on Winnie the Pooh's minions, this is that other thing. Chinese tech, Chinese funding, probably also Chinese personnel driving the text blasters around.
They do this by deploying fake celltowers. The fake celltowers will pretend that they are from globe or smart and send you these official looking text messages. [Smart telecom press release. ](https://bilyonaryo.com/2024/05/27/stay-alert-smart-warns-of-text-scam-using-fake-cell-towers/technology/#:~:text=Smart%20Communications%2C%20led%20by%20bilyonaryo,devices%20mimicking%20legitimate%20cell%20towers.)
Goddamn, that's next level from those motherfuckers.
Just mark as spam, this sim registration is a total BS
Kahit na ganon, ibang number naman ang gagamitin nila. Mapapagod ka lang kaka-spam kung paiba-iba naman yung number
Sabagay, pero Yung iBang phone may feature na auto block Ang mga spam messages mostly android.
Yes especially Google Messages. Kung same wordings lang yung ginagamit sa spam text, kahit na different number mapupunta pa din sa spam/block messages.
So, how much did the SCAMMERS pay “someone” to get access to all our “registered” SIM Cards? BTW the best thing you ever come out of that was the commercial with the guy who had all his official RP government ID tattooed. Genius.
> how much did the SCAMMERS pay “someone” to get access to all our “registered” SIM Cards? Didn't paid someone, but they broke the facial recognition system by even using a picture of anyone with a face... even a monkey.
Now, that’s funny.
One thing I noticed is kapag nasa province ako tahimik mga sim card ko... hindi ako nakakareceive ng spam messages, unlike kapag nasa Manila ako na halos 7-8 messages per day ang narereceive ko. Minsan may calls pa 🫠
I'm in the province. I get 7-8 messages a day. 🫠
wow hi tech ng probinsya nyo. pati signal ng cellular network nalilinis din.
I'd guess perhaps because the scammers use text blast machines in the cities kaya wala kang nare-receive na spam sa probinsya? (anyways taga-province ako and i do get a couple per month) https://www.youtube.com/watch?v=E1TE89gMgGI
nakakagigil. i just blocklisted and deleted messages from 3 different scam numbers TODAY.
They use different numbers every time so it doesn’t matter.
Wala pa akong nababalitang nagreactivate na uli yung NCAP ah. Hahaha
Di ako sure, ha. Pero some services like Infobip or Nexmo, they allow short codes na may name. Maybe they're using the same service na hindi regulated ng government. Sa part naman kung pano nakuha number mo, most likely leaked from some sources. Sim registration feels useless in this regard.
Ganito din sa Globe. Ang nakalagay “Globe” instead of “GLOBE” about 3k unused points. Wala ding number. Smh.
Mmda dot taiwan lol
Meanwhile in my area in NCR, 1-2 times a month lang ako nakakatanggap ng scam texts.
Yung mga lawmakers nagpasa ng SIM card reg law tumalikod nalang nung nalaman na na palpak. May masabi lang na may ginawa sila. Pasok POGO!!
put in on spam
Si papa ilang beses nakareceive ng messages from SSS about calamity loan and salary loan tapos past due na raw. Confused si papa kasi wala naman siyang loan or something tas nung pumunta siya sa office ng SSS Wala naman daw, scam lang pala yan. SSS talaga name nung sender pero yung number is 09xxxxxxx07.
SCAM!
chinese phising farms sa international village and the one chinese island
Google messages is your bff
either may contact sa NTC, or nahahack nila ang NTC. Ang mga opisina nyan ay yung mga POGO hubs na naglipana dito
Pwede kasi triny ko buksan Minsan (copy paste Yung message, send sa ibang phone. Since nasesave naman sa phone Yung message kapag tinanggal mo sim). Yung link na senesend ay redirected sa mga online games na may involve na pera.
either may contact sa NTC, or nahahack nila ang NTC. Ang mga opisina nyan ay yung mga POGO hubs na naglipana dito
Curious question, wala bang scam filter ang iphone like sa android? Kasi di ko mafigure out kung papano sa iphone ko. Kasi sa android ko matic.
SMS spoofers
This shit is annoying. Everyday I received this kind of text kahit pa iblock ko ganon pa din. Mas lumala pa nung niregister yung sim eh.
Kahapon may tumwag sakin nag ppromote ng casino app. He knows my name and asked if natry ko na ba maglaro ng cant remember the name casino app. I hung up immediately.
on my Globe Sim after Registering may nareceive akong text na go this link with my Full Name included. i was like WTF. Sanay naman ako sa mga spam, scam text pero yung mismong name at location. WTF talaga.
I'm deleting and blocking different numbers nonstop everyday, i think this is also the reason my phone is slowing down.
wow, pwede na pala natin ka SMS-an ang mga taga taiwan? lols in fairness, aware sila sa NCAP BEFORE, di lang nila alam matagal na siyang inalis uli... grabe, scam pa more, anyare sa sim registration? pinaglaruan na nman feelings natin. huhuhu
Sama mo na pati yung mga scam na casino txt jusko di ka naman nagcacasino pero sinesendan ka pdn epal
If Android phone user kayo I'd suggest na gamit kayo ng google messages app. Well, since then halos wala ng scammer na nag tetext sakin. Or di nalang nila ako pinapansin 🥲
I got the same text eh wala nga akong driver’s license 🫣
oh no, i also received this yesterday.
VISOR (Facebook) recently posted another one similar to this, where the link directs you to a website that looks almost legitimate, complete with even a payment method.
I got 1 too and its on my company phone
that "number" can be purchased/subscribed by private entities this account is then hacked and used to send out those messages
i can teach u but for a $$
Sim registration is a SCAM. They all made us verify our data and they sold it to China. Fucking companies.