In line with folks conscious of the event, 1000’s of customers might have been affected. Many purchasers took to social media to report that they have been unable to entry the platform to lock their playing cards, aggravating the scenario. A number of customers mentioned they noticed unauthorised transactions denominated in US {dollars} and Brazilian actual.
The platform, which operates with Sure Financial institution as its banking associate, mentioned in a submit on microblogging website X that the matter had been escalated to the financial institution.
Individuals cited earlier mentioned Sure Financial institution would provoke chargeback proceedings on behalf of impacted customers. The financial institution didn’t reply to emails in search of remark.
BookMyForex, nevertheless, denied any breach of its methods.
“There was no information breach involving BookMyForex methods or buyer information,” an organization spokesperson mentioned in a response to ET. “YES Financial institution noticed uncommon volumes of false transaction makes an attempt on YES BANK–BookMyForex Multi-Forex Pay as you go Foreign exchange Playing cards, leading to a excessive variety of declined transactions. Upon evaluation, these transactions have been discovered to originate from a selected nation. The financial institution has blocked transactions from that nation, recognized because the supply of those makes an attempt. As a precautionary measure, playing cards concerned in these tried transactions have been additionally proactively blocked.”
The corporate added that buyer balances stay absolutely safe and that it’s working carefully with the financial institution to implement further safeguards.In a submit on X, one person wrote: “I’m seeing a number of emails of each failed and profitable transactions on my BookMyForex card. They’re emptying my funds in entrance of my eyes. I’m unable to log in to the web site or the cardboard portal.”
One other person reported: “My foreign exchange card is being utilized in Brazilian actual and a number of transactions are happening. Buyer assist is unreachable, and the app additionally seems to be dealing with points.”
Responding to mounting complaints, BookMyForex mentioned: “We perceive your concern and guarantee you that your funds are protected. The problem has been escalated to the card-issuing financial institution. As a precautionary measure, please lock your card by means of the app or the self-care card portal.”
Individuals accustomed to the matter mentioned prima facie proof steered that attackers might have gained entry to delicate card data — together with card numbers, expiry dates and CVVs — enabling them to execute worldwide on-line transactions with out bodily possession of the playing cards.
An preliminary evaluation signifies that the attackers might have extracted card particulars from a compromised database or third-party system. They allegedly performed small “take a look at” transactions to validate card credentials earlier than continuing with higher-value purchases as soon as the playing cards have been confirmed to be energetic.
A good portion of the transactions was reportedly routed in Brazilian actual, probably to take advantage of less-monitored overseas foreign money channels and transact with worldwide retailers that will have comparatively weaker KYC controls. Routing funds by means of higher-risk geographies may additionally delay detection and complicate chargeback processes.
On February 6, the Reserve Financial institution of India proposed compensating prospects as much as Rs 25,000 for losses arising from digital fraud.
Banks reported 5,092 fraud circumstances within the first half of fiscal 2026, sharply decrease than 18,386 circumstances in the identical interval a yr earlier. Nonetheless, the entire worth of frauds rose to Rs 21,515 crore from Rs 16,569 crore throughout April–September, in response to the RBI’s newest Developments and Progress of Banking in India report.
