An attacker can use one of the following methods to withdraw funds:
- Pay for a purchase in the store. Now quite a large number of stores can pay with a bank card without entering a password. In this case, the attacker will impersonate the owner, and it is likely that he will succeed.
- Theft of funds via SMS notifications. Fraudsters have learned to fake real messages from the bank, which allows them to carry out operations with the card without the owner’s knowledge.