The Maldives Police Service has warned the public of an increase in scams involving stolen One-Time Passwords (OTPs), which criminals use to hijack mobile numbers through unauthorised eSIM transfers, access bank accounts and create digital wallets in victims’ names.
In a statement, police said investigations over the past month had identified fraudsters using deceptive phone calls and text messages to obtain OTPs and account verification links.
One of the common tactics involves scammers calling people and falsely claiming that their current mobile number previously belonged to them. They then ask victims to share verification codes sent to their phones, claiming they need them to recover their old accounts.
Police said another tactic involves callers claiming to have recently returned from abroad and asking for verification codes to regain access to old email or social media accounts.
However, sharing these codes can allow criminals to take control of victims’ mobile numbers and gain access to their financial and online accounts.
According to police, fraudsters use stolen OTPs to transfer victims’ mobile numbers to their own devices through eSIM registration, enabling them to intercept incoming calls and banking SMS alerts.
They can also use compromised mobile numbers and personal information to register digital wallets in victims’ names and carry out unauthorised transactions. Stolen credentials may also be used to access bank accounts and transfer funds.
Police have urged the public never to share OTPs, PINs or verification links with anyone, regardless of whether the caller claims to be a friend, a previous owner of the phone number or a representative of a bank or telecommunications company.
The police have also advised people to be alert to sudden losses of mobile network connectivity, which could indicate that their number has been transferred to an unauthorised eSIM. Anyone experiencing unexplained loss of service has been advised to contact their telecommunications provider immediately.
People who receive suspicious calls or messages, or suspect their accounts have been compromised, should report the matter to the National Emergency Centre on 911 and contact their bank to freeze affected accounts. Police have also advised victims to seek assistance from the relevant social media platforms or the Police Cyber Crime Centre.
Police figures show that approximately 1,700 scam cases involving losses of MVR 16 million have been reported this year, with more than MVR 9 million recovered.
Inspector of Police and Head of the Anti-Scam Centre Adam Naveed said in an interview to state media that the recovery rate had increased to 44 per cent, compared with 38 per cent during the same period last year. He attributed the improvement to the establishment of the dedicated centre to monitor and investigate fraudulent activities.
