PayPay Fraud Surges 22-Fold in Three Months: New Scams Involving Games and Cards

Photo: ITmedia
Quick answer
Japan has seen a 22.4-fold increase in fraud involving the PayPay brand over three months. Cybercriminals are deploying new tactics, posing as gaming and collectible services to deceive users.
Japanese company Tobila Systems, which provides solutions for phishing and fraud protection, released its May report, documenting a sharp rise in cybercrimes linked to the PayPay service. Over the past three months, fraud cases impersonating this payment system surged 22.4 times, indicating a large-scale campaign by cybercriminals.
Experts note that fraudsters are actively adapting to new conditions, leveraging popular platforms for quick transfers. Recently, criminals have increasingly disguised themselves as gaming and collectible services, offering victims lucrative deals or participation in giveaways. This allows them to more effectively deceive users and withdraw funds.
The report also highlights a shift in fraudster tactics: while they previously impersonated banks or government institutions, they now exploit trust in popular payment and gaming services. This requires users to exercise heightened vigilance when receiving messages about transfers or purchases.
Tobila Systems specialists recommend that companies and users strengthen cybersecurity measures, including training employees and clients to recognize fraudulent schemes. Particular attention should be paid to verifying message senders and avoiding suspicious links.
Common questions
- What new fraud schemes have emerged in Japan?
- Fraudsters are impersonating gaming and collectible services, using popular payment platforms like PayPay to quickly deceive users and siphon funds.
- Why do fraudsters target PayPay for their attacks?
- PayPay is one of Japan’s largest mobile payment services, making it an attractive target for cybercriminals. Its speed and widespread use facilitate easier deception of users.
- How can users protect themselves from payment service fraud?
- Users should verify message senders, avoid clicking suspicious links, and enable two-factor authentication. Reporting suspicious activities to the service’s support team is also crucial.
Dzen feed: /feed/dzen.xml · RSS: /feed.xml