Unauthorised TikTok Coins Purchases

A new modus operandi has been discovered, involving TikTok Coins purchased by scammers after a customer's Gmail account was compromised. These charges are subsequently reflected in the CelcomDigi bill. Customers typically become aware of the issue upon receiving SMS or email notifications of the transaction, or when the charges appear on their bill statement.

To prevent future incidents, it is important for customers to take precautionary actions to keep their Google accounts secure by following the steps below:

• Customers should immediately change their Google account password if they detected unauthorized activities.
• Enable 2-factor authentication to prevent further misuse via https://myaccount.google.com/.

• (Manage Google account > Security > How you sign in to Google > 2-Step Verification)

• Users should also review the devices they are signed into with their Google account via https://myaccount.google.com/ and remove/sign out of any unrecognized devices.

• (Manage Google account > Security > Recent Security Activity)

Sample SMS and email notifications

Notification of new device login in Gmail:

Transaction history in Google: