Uber drivers scam by asking for security code – 07/14/2023 – Market

Uber drivers have been using an app feature to scam passengers. This is the “security code scam”.

It works like this: before arriving at the boarding point, scammers use the app’s chat to ask the user for the race’s security code. If the passenger provides the number, drivers can trigger long trips for high prices.

The U-Code, known as a security or verification code, is one of Uber’s tools to make trips safer. The tool can be activated by the user in the application settings. When activated, every time the passenger requests a ride, the four-digit code will appear on the screen, which must be provided to the driver for the trip to start. The idea is that the code is a means of verification for both the passenger and the driver that they are on the right trip.

A Sheet, Uber confirmed that there are cases of fraud involving the security code. In a statement, he said that “it is committed to updating and strengthening its internal processes to protect the platform and its users”.

The company stated that it has a tool called U-Código, “which consists of a four-digit password, created by the app for each trip and which must be verbally provided by the user to the driver when entering the vehicle, so that he can then start the trip. trip”.

“We reinforce in communications that, for the verification code to fulfill its role, it is important that the person does not share the four digits with the driver before he arrives at the boarding point. That is, the code must not be shared through the chat or by phone under no circumstances, only in person, at the moment when there is a meeting with the driver”, he said in a note.

In the last month, users reported on social networks having gone through the scam or escaped from it. The situations vary, but the dynamic is the same: before arriving at the place where the passengers are, drivers ask for the security code.

One of the people injured is event coordinator Fernanda Gasparino, 30. In an interview with Sheet, she stated that on June 18, she was driving home from work at 11:30 pm. She lives close to where she works, in Santana, in the north of São Paulo. After asking for the race for Uber, she claims that the coup happened.

“As soon as the driver accepted [a corrida], sent a message in chat asking for the code. I didn’t know how it worked and passed. The app became unstable, the race started without me and redirected to other places. The notification came that the trip had ended, with a charge of R$ 50”, he said.

The race should have been short and between two points in the Santana neighborhood. She was redirected to a street in Arujá (a city in the metropolitan region of SP, 40 km from where she was), in a race that lasted three minutes. Using Google Maps, the report calculated that it takes 40 minutes, on average, to go from the Santana neighborhood to Arujá.

“In the afternoon of the next day, without having a response from Uber, I decided to post on social networks, because I saw that other people had posted and were answered.”

The company responded to the post on social networks, requested confirmation of personal data and refunded the amount. The victim did not file a police report.

Drivers’ justifications for asking for the security code vary, according to Gasparino. “In my case, the driver said she ‘didn’t know the region and wanted access to the route’. I’ve seen reports from victims about the scammer claiming that the app wasn’t working”, he said.

Gasparino said that he had not activated the security code functionality, and that he tested some races after suffering the blow. In them, the code did not appear. In response to the user’s report, Uber stated that “it was not possible to verify the reported case, as the information necessary for verification was not provided to the company”.

Uber sent out an email to its entire customer base last Tuesday (11). In it, he explained how the U-Code works and asked the user not to provide the number before boarding the vehicle.

Sought after, the Public Security Secretariat of São Paulo (SSP-SP) said that it does not have data on this type of coup and that it can respond only to formalized cases. The agency urged the victims to file a police report so that the facts could be investigated.

What to do if you fall for the Uber security code scam

Lucas Marcon, a lawyer for the Telecommunications and Digital Rights program at Idec (Brazilian Institute of Consumer Protection), advises users to take a print (capture of the cell phone screen), if the driver asks for the code before arriving at the boarding location.

“The user must cancel the race, contact the company informing what happened and demanding that a cancellation fee is not charged”, said the specialist.

“If the consumer has suffered a blow like this or had any undue charges, it is important that they know that the company can be held responsible, since it was through its application and service that the damage to the consumer occurred. The company must take all measures necessary for this type of fraud not to occur”, he said.

“At first, the suggestion is to get in touch with the company and ask for a refund. This contact can be made through the company’s SAC or through the consumer.gov.br website of the National Consumer Secretariat (Senacon). Another way is trigger your state’s Procon.”

To report the driver, Idec recommends that the consumer has proof that the driver asked for the code before arriving at the boarding point. That way, you can open a police report for attempted fraud.

What does Uber say

Read the full statement sent by Uber below:

Fraud schemes are constantly evolving, which is why Uber is committed to updating and strengthening its internal processes to protect the platform and its users. Our fraud detection teams use manual analytics and automated learning systems that analyze over 600 different signal types looking for fraudulent behavior. We are continually implementing new processes and technologies to prevent fraud, and we are improving training for our agents as we continue to work to stay ahead of the latest scams.

The company also clarifies that it has a tool called U-Código, which consists of a four-digit password, created by the app for each trip, which must be verbally provided by the user to the driver when entering the vehicle, so that he can then start the trip. trip.

We reinforce in communications that, for the verification code to fulfill its role, it is important that the person does not share the 4 digits with the driver before he arrives at the boarding point. That is, the code must not be shared via chat or over the phone under any circumstances, only in person, when meeting the driver. The code serves to confirm that both the user and the partner are on the correct trip and so that the driver can start the trip.

If the person believes they have been the victim of a crime committed by the other party, the company encourages them to contact the competent authorities. Uber has a team made up of former police officers and a response team to authorities ready to collaborate with investigations, as required by law.