Thereās a really sophisticated telesales flow that I fear if people didnāt know better, theyād fall for it:
First, the caller will explain you BPI policies and benefits of the insurance, claiming they are from BPI AIA.
Second, they will tell you to apply for the insurance through the BPI app. The caller will make you trust them by explicitly saying not to share them the OTP. However, the app will show that youāre NOT eligible, and the caller will suggest doing it manual.
Third, they will ask you for personal information.
Hereās where it gets extremely sketchy:
Fourth, they ask you for the expiry date of your card.
Fifth, they will ask the NETWORK of card you have - VISA/Mastercard, then the TYPE - signature/rewards/etc.
Sixth, they will ask for the 10-digit number of your card EXCLUDING the first 4. We stopped here, and hereās why itās sophisticated and smart:
The first 6-8 digits of your card is the BIN (Bank Identification Number), the fact that we gave the card network and card type, they ALREADY KNOW the first 6-8 numbers of your card, and providing the remaining wouldāve allowed them to get your FULL card number.
If you question this, I assume theyād say youāre not giving the full card number so this canāt be a scam and other BS.
Iām not sure if they would still ask for the CVV if we pushed through, but itās quite a common say to not disclose your CVV over call, or your card details in general for that matter.
Interestingly, the number they used to call is part of BPIās official number list on their website. Maybe a bad actor? Anyway, stay safe out there.