Brief
GCC fraudsters use stolen credit cards to pay bills at steep discounts
Between Oct 2025 and Aug 2026, about 300 incidents were detected, costing victims over $2 million.
By Felo News Desk · Published
Group‑IB’s fraud‑protection team says criminals in the Gulf Cooperation Council have been using stolen credit‑card details to settle genuine government fines, utility bills and legal charges, then offering victims discounts of 50‑80 percent and collecting the reduced amount through cryptocurrency or local bank transfers.
What happened
From October 2025 to August 2026 the firm identified roughly 300 related incidents across several major GCC retail banks. In a validated sample of 80 compromised cards linked to three government institutions, confirmed losses totalled $2.01 million (about Dh7.4 million). The scheme works in three layers: fake websites mimicking official portals lure victims to hand over personal data; attackers hijack eSIM numbers to intercept one‑time passcodes and approve 3‑D Secure (3DS) prompts; finally they use the authorised transactions to pay the real bills and pocket the discounted sum.
What the reports add
Group‑IB notes that the fraudulent transactions pass valid 3DS authentication, meaning banks see no obvious red flag. The firm also says more than 400 counterfeit sites, promoted via verified Google Search ads, use ten disguise patterns to imitate government and insurance portals. Victims often approve phone prompts that authorise eSIM swaps, allowing attackers to control the victim’s phone number and banking app.
What was said
Dr Mohamed Hamad Al Kuwaiti, Head of Cybersecurity for the UAE Government, told Khaleej Times that “no single entity or government can achieve cyber security on its own,” stressing the need for coordination between public and private sectors.
How it came about
The UAE Cyber Security Council has previously warned that online fraud now exploits digital services and smart applications, making detection difficult until after the crime is committed.
Key facts
- Between Oct 2025 and Aug 2026 Group‑IB detected about 300 incidents of the scheme in the GCC. (khaleejtimes.com)
- Confirmed losses in a sample of 80 compromised cards reached $2.01 million. (khaleejtimes.com)
- Fraudsters offer victims a 50‑80 percent discount on genuine government bills. (khaleejtimes.com)
- All fraudulent transactions passed valid 3‑D Secure authentication. (khaleejtimes.com)
- More than 400 fake websites imitating government portals were used, promoted via verified Google ads. (khaleejtimes.com)
Sources
- [1] khaleejtimes.com — originally reported as “GCC scam alert: Fraudsters use stolen credit cards to pay bills at 50-80% discount”
