标签： 广州品茶上课资源APP

　　CCTV News:On May 4th, the police in Jiulongpo District of Chongqing announced that they had cracked a serious fraud case of "routine loan". The police acted at the same time in Chongqing, Guangzhou, Shantou, Sanya, Chengdu and other places across the country, arresting more than 290 suspects and destroying more than 70 fraud dens.

　　At 3 o’clock in the afternoon of April 18th, Chongqing Jiulongpo District Public Security Bureau dispatched more than 700 police officers, and carried out centralized arrest operations in Chongqing Shiqiaopu Business Circle Cybercity and Atlantic International Office Building.

　　Chun Wong, Chief of Comprehensive Brigade of Criminal Investigation Detachment of Jiulongpo District Branch of Chongqing Public Security Bureau: "At the same time, we also sent arresting teams from other places to Shantou, Guangzhou, Chengdu and other places for early ambush and surveillance. By 3: 30 pm, each group was started at the same time, and all the suspects were successfully controlled within one minute, and all the evidence was fixed. "

　　Subsequently, the police mobilized five buses to take all the suspects away and review them one by one.

　　Chun Wong, Chief of Comprehensive Brigade of Criminal Investigation Detachment of Jiulongpo District Branch of Chongqing Public Security Bureau: "A total of more than 290 people involved in the case were arrested. After preliminary examination, criminal compulsory measures were taken against 250 of them."

　　At present, the case is being further processed, and more than 1200 victims have been identified.

　　The victim gets 60 thousand and 70 thousand

　　What is the "routing loan" fraud? This should also start with a large number of warnings found by Chongqing police in Shiqiaopu IT business circle at the beginning of this year. According to the survey, there are a large number of small loan companies in the market here, which trick victims into falling into the trap of "routine loan" under the guise of not needing mortgage, lending on the same day or charging only a small fee.

　　Mr. Chen, who is in urgent need of money, is a victim of "routine loan". He was tempted because a loan company claimed that the loan did not need mortgage and promised to lend on the same day. However, when he entered the company, the waiter said that he could not give him the loan directly, and he had to borrow the money by installment through his mobile phone.

　　Victim Mr. Chen: "He gave me three mobile phone installment loans. At that time, a mobile phone was more than 4,000 yuan, and a total of three mobile phones were loaned. The three mobile phones actually transferred 6,000 yuan to me."

　　In other words, a mobile phone loan is more than 4,800 yuan, and Mr. Chen borrowed three mobile phones totaling more than 14,000 yuan, but he actually only got 6,000 yuan. However, Mr. Chen’s loss is far more than that.

　　Victim Mr. Chen: "I just picked up my mobile phone and gave him my bank card, ID card and mobile phone. He meant to transfer the money borrowed from my mobile phone to me. As a result, I downloaded a software on my mobile phone and lent me 30,000 yuan on the software platform. As a result, he gave me all the other 30,000 yuan. I didn’t know this 30,000 yuan until a month later. "

　　In this way, Mr. Chen got 6000 yuan through the loan from this small loan company, but with interest, Mr. Chen needed to pay back 70000 yuan. After learning that he was cheated, the victim Mr. Chen immediately called the police for help. After receiving the alarm, the police quickly investigated the case and found that there were many such cases.

　　The police exposed the fraud of "routine loan"

　　How does the "routine loan" routine the victims and let them fall into the trap step by step? The police exposed several major fraud methods of "routing loans".

　　According to reports, "routing loan" mainly has several operation methods. The first one is the simplest, that is, deducting the high "handling fee" far beyond the normal level. The second is to "sell mobile phones" by installment. A cheap mobile phone is finally sold at a high price through a high interest mortgage, so as to cash out. The third way is to use the victim’s mobile phone to bind the bank card without authorization. After taking advantage of the victim’s unauthorized increase in the quota, he cashed in with the POS machine and lied that it was the loan that he helped the victim handle, and charged a high handling fee under various pretexts. The fourth way is to use the victim’s mobile phone and identity information, bank card, download the APP without authorization, borrow money from the microfinance company, and transfer it to his account, and then delete the loan traces on the victim’s mobile phone. And the fourth way is the worst.

　　Xie Wenjun, a policeman of the Criminal Investigation Detachment of Jiulongpo District Branch of Chongqing Public Security Bureau: "In fact, all the loan information and loan contents are all the names of the victims themselves, and the suspects did not leave a trace in the whole process."

　　In this way, the suspect transferred all the loans borrowed from the mobile APP, and let the victim bear all the repayments, and the victim usually didn’t know that he was cheated until one month later.

　　Xie Wenjun, a policeman of the Criminal Investigation Detachment of Jiulongpo District Branch of Chongqing Public Security Bureau: "Because the APP online loan takes about a month, the company urges him to repay, and then the victim knows that he has borrowed a lot of money online."

　　It is understood that once the victims want to call the police or ask the industrial and commercial departments for help, they will return some or all of the funds to the victims, so as to avoid the blow.

　　Sun Weiguo, a policeman of the Legal Detachment of the Criminal Investigation Corps of Chongqing Public Security Bureau: "Try to borrow money from regular financial institutions and banks, and don’t let criminals take advantage of it because of petty gain or convenience. When you find that you have been defrauded by a routine loan, don’t hide it because you are afraid or love your face. You should report the case to the public security organ at the first time, and at the same time keep the relevant loan contract, WeChat, SMS, chat records and other evidence and submit it to the public security organ in time. "

A bankruptcy case involving nearly 3,800 buyers and more than 300 creditors caused a storm: the only investor with reorganization intention supported by most creditors and debtors was "kicked out" by the "review committee" by secret ballot.

The judging meeting site. Photo courtesy of respondents

The incident originated from Chongqing Tianxianhu Real Estate Co., Ltd. (hereinafter referred to as Tianxianhu Company) being filed for bankruptcy liquidation by a creditor. After the relevant documents of Chongqing municipal government explicitly supported the bankruptcy reorganization of Tianxianhu Company, the Wanzhou District People’s Court of Chongqing agreed that the bankruptcy administrator Daxin Certified Public Accountants Chongqing Branch (hereinafter referred to as the administrator or Chongqing Daxin Firm) would recruit and reorganize investors.

In the recruitment process, Chongqing Lancheng Lanyue Construction Project Management Co., Ltd. (hereinafter referred to as "Lancheng Lanyue Company") became the only intended investor and submitted the reorganization investment plan to the manager. On November 3, 2020, the jury set up by the administrator voted on the reorganization plan submitted by Lancheng Lanyue Company, and more than half of the votes were "No", so Lancheng Lanyue Company failed to become a formal investor.

Civil Ruling made by Wanzhou District Court (part). WeChat public map of Tianxianhu real estate bankruptcy information publicity platform

However, several creditors of Tianxianhu Company filed written objections, saying that the Wanzhou District Court agreed that the review committee set up by the administrator was not a statutory body stipulated in the Enterprise Bankruptcy Law, nor was it authorized by the creditors, so it could not make a decision on behalf of the creditors, and some judges reflected that it was coerced to vote, so the review results had no legal effect and could not be used as the basis for ruling liquidation.

In this regard, the administrator made a "reply" on November 19, 2020, saying that the selection of the evaluation Committee members was determined by the administrator after absorbing the debtor’s views and suggestions, and the people’s court supervised and examined the suitability of the nominees. This review is to evaluate whether the intended investor can become a reorganization investor, not to decide whether Tianxianhu Company will be reorganized, nor to vote on the draft reorganization plan.

Although the administrator said in the Reply that "(review) is not to decide whether Tianxianhu Company is reorganized", based on the above review results, Wanzhou District Court made a civil ruling on December 14, 2020, arguing that Tianxianhu Company was insolvent and declared Tianxianhu Company bankrupt.

Xie Yong, chairman of the creditors’ meeting of Tianxianhu Company, said that Tianxianhu Company has nearly 2 million square meters of undeveloped land, which has the value of reorganization. However, if Tianxianhu Company is declared bankrupt, creditors will suffer huge losses. Recently, the creditors of Tianxianhu Company refused to accept the bankruptcy ruling made by Wanzhou District Court and applied to Chongqing No.2 Intermediate People’s Court for supervision.

Expert argumentation opinion (part). Photo courtesy of respondents

Unfinished property, bankruptcy and reorganization of developers

According to the national enterprise credit information publicity system, Tianxianhu Company was established in Wanzhou District of Chongqing in 2004 with a registered capital of 300 million yuan and its business scope is real estate development. Investment, operation and management of water environment comprehensive management project in Zhuxi River Basin.

According to the relevant person in charge of Tianxianhu Company, the company is the core enterprise of Chongqing Yinxing Zhiye (Group) Co., Ltd. (hereinafter referred to as Yinxing Group), a local veteran housing enterprise in Chongqing. Influenced by many internal and external factors, Tianxianhu Company is in trouble. More than 1,400 households in the "Gold Coast" community developed by the company in Wanzhou have not yet been handed over, and more than 2,300 households are in the process of applying for real estate licenses.

In December 2018, Wanzhou District Court accepted the application of creditors of the company for bankruptcy liquidation of Tianxianhu Company. After being appointed by Chongqing Higher People’s Court, Chongqing Daxin Office became the bankruptcy administrator of Tianxianhu Company. In October 2019, Wanzhou District Court appointed Xie Yong as the chairman of the creditors’ meeting. In the same month, the shareholders of Tianxianhu Company applied to Wanzhou District Court to convert the bankruptcy liquidation procedure of the company into bankruptcy reorganization.

The announcement of Chongqing Tianxianhu Real Estate Co., Ltd. (hereinafter referred to as the "Announcement of Recruitment") issued by the administrator in May 2020 shows that after the administrator’s investigation of the debtor’s historical operating conditions, assets and creditor’s rights and debts, it is believed that the operating value of the debtor’s assets can only be realized under the condition of introducing investors, and the debtor has the greatest possibility of restructuring. In order to safeguard the legitimate rights and interests of creditors and debtors and realize the effective integration of resources, the Wanzhou District Court agreed to carry out the intentional investor.

The only intended investor was rejected by the jury by secret ballot.

After paying a deposit of 20 million yuan, Lancheng Lanyue Company became the only intended investor who entered the fourth stage of the recruitment process and submitted a letter of intent and the Reorganization Investment Plan of Chongqing Tianxianhu Real Estate Co., Ltd. (hereinafter referred to as the "Investment Plan") to the manager.

According to the Investment Plan, Lancheng Lanyue Company intends to acquire Tianxianhu Company by accepting 75% equity, and reorganize the original board of directors and management team to be fully responsible for the subsequent development and construction of the company. At the same time, it promises to give priority to ensuring that the projects that have not been handed over are handed over within one year. Xie Yong, the chairman of creditors, said that the scheme was supported by major creditors, debtors and property buyers.

On October 19, 2020, after receiving the Investment Plan, the administrator issued a notice saying: "The administrator will set up an evaluation committee under the guidance of the people’s court to evaluate the Investment Plan submitted by Lancheng Lanyue Company."

Since then, the administrator has made the Appraisal Scheme of the Prospective Investor Selection Appraisal Committee (hereinafter referred to as the Appraisal Scheme), and determined that the Appraisal Committee consists of 13 members. After the intended investors explain the Investment Plan and answer the questions of the judges, 13 judges will vote by secret ballot. If more than half of the votes are agreed, it will be passed, otherwise it will not be passed.

On November 3, 2020, the administrator presided over the review meeting. Before the meeting, Xie Yong, chairman of the creditors’ meeting, learned that some members were "intimidated" and "unable to vote according to their own wishes". At the meeting, Xie Yong submitted a statement saying that the review committee had no legal authority and could not take the place of creditors to "decide the life and death of prospective investors", and some members were coerced, unable to guarantee the fairness of the voting results, and requested to terminate the review and hand over the decision to all creditors’ meetings for resolution.

After a short recess, the administrator did not adopt this request and continued to vote by 13 judges. The voting results on that day were: 5 votes for "Agree" and 8 votes for "Disagree".

A week later, the administrator announced the voting result: "After legal review, the review committee did not agree that Lancheng Lanyue Company would become a formal reorganization investor."

The court declared Tianxianhu Company bankrupt according to the evaluation results.

This evaluation result attracted the dissatisfaction of some creditors, some employees and prospective investors of Tianxianhu Company.

A number of creditors claimed that from the Announcement of Recruitment to the convening of the review meeting, there was no communication between the administrator and the creditors on the establishment, authorization, personnel composition, authority and other details of the "review Committee", and no written documents were issued.

In this regard, the reply made by the administrator on November 19, 2020 stated that the selection of the investor review committee of Tianxianhu Company was determined after the administrator nominated the debtor’s views and suggestions, and the people’s court supervised and examined the suitability of the nominee.

The "Reply" also said that this review is a review of whether the intended investor can become a reorganization investor, not to decide whether Tianxianhu Company will be reorganized, nor to vote on the draft reorganization plan.

Regarding the content of the Reply, the creditors of Tianxianhu Company raised a written objection that the creditors’ meeting is the highest decision-making body in the Enterprise Bankruptcy Law, but most creditors didn’t know that the review meeting was held until the review results were announced. The administrator’s "Reply" also admitted that the creditor’s authorization was not obtained.

Although the administrator once said in the aforementioned written reply that "(review) is not to decide whether Tianxianhu Company is reorganized", based on the aforementioned review results, Wanzhou District Court made a civil ruling on December 14, 2020, declaring Tianxianhu Company bankrupt.

According to the ruling, the court found that on March 31, 2020, the administrator issued an inventory report on the debtor’s property status. As of April 30, 2019, the debtor’s total assets were 3.57 billion yuan, the total liabilities were 3.914 billion yuan, and the asset-liability ratio was 109.63%, which was insolvent. With the consent of the institute, the administrator issued the Announcement of Recruitment, which made it clear that the determination of the intended investors of Tianxianhu Company as reorganization investors must be reviewed by a specially established review committee. On November 3, 2020, Lancheng Lanyue Company failed to pass the evaluation of the intended investors as reorganization investors. The Wanzhou District Court held that Tianxianhu Company, as an enterprise legal person, could not pay off the debts due, and its assets were not enough to pay off all the debts. The ruling declared Tianxianhu Company bankrupt.

Xie Yong, chairman of the creditors’ meeting of Tianxianhu Company, said that the relevant documents of Chongqing Municipal Government and Wanzhou District Government (Wanzhou Government Letter [2020] No.36) clearly support the legal reorganization of Tianxianhu Company, and the company has nearly 2 million square meters of undeveloped land, which obviously has the value of reorganization, but if Tianxianhu Company is declared bankrupt, it will make creditors suffer huge losses. Therefore, the creditors of Tianxianhu Company recently applied to Chongqing No.2 Intermediate People’s Court for supervision.

On April 16th, Chen Huamao, the relevant person in charge of Chongqing Daxin Office, told The Paper that the announcement by the administrator to recruit intended investors did not mean the completion of the bankruptcy liquidation to bankruptcy reorganization. "There is also a review process, and only after the review (the court) will the liquidation be reorganized."

Expert: "Deliberating" non-"resolutions"

In response to this matter, Xie Yong, chairman of the creditors’ meeting, some creditors and debtors entrusted relevant experts from Southwest University of Political Science and Law to make an Expert Demonstration Opinion.

The submission points out that the review committee is not a clear statutory body in the Enterprise Bankruptcy Law, nor does it have the statutory authority to make decisions and reorganize investors. The rights of the evaluation committee come from the entrustment of the bankruptcy administrator, and its scope of rights should be limited to the evaluation of investors’ economic strength, investment value and other matters and give professional advice according to the Recruitment Announcement, rather than simply voting against investors and their Investment Plan.

Experts believe that the question of whether investors are qualified is a key issue that substantially affects the smooth implementation of the debtor’s enterprise reorganization, and it is also a decisive issue that whether the overall interests of creditors can be maximized and whether the proportion of compensation can be improved. Therefore, the review of the Investment Plan submitted by the sole intended investor should belong to the deliberation of the review committee rather than the resolution. Therefore, the review committee has no right to exercise the veto power on behalf of the debtor’s enterprises and creditors, and the voting conclusion of the review committee should not constitute a legal obstacle to the start of the reorganization procedure.

Experts also believe that the reorganization of the investor selection mechanism must first solve the problem of who chooses, the bankruptcy procedure is centered on creditors, and the investor’s right to choose should be exercised by creditors. In this case, the administrator directly appointed 13 members to form the evaluation Committee as the subject of the right to choose. From the structure of the Committee, it can not fully express the interests of debtors and all creditors, nor can it guarantee the fairness and justice of the selection process. The selection rules formulated by the administrator and the failure to perform due diligence in the process of selecting investors.

　　A netizen recently posted that when he woke up in the morning, he found that his mobile phone had received more than 100 verification codes, and the balance of Alipay, Yu ‘ebao and related bank cards had all been transferred away. JD.COM’s account was opened with gold bars and white bars, and he borrowed money and transferred more than 10,000 yuan. The news caused great concern.

　　According to the investigation of Zi Niu news reporter of Yangzi Evening News, there are not a few people who have been attacked by this kind of SMS verification code recently. Previous reports have not fully explained the attack methods, and the preventive suggestions such as "turning off your phone while sleeping" are not necessarily useful. Experts pointed out that the continuous occurrence of SMS verification code attacks is a sign of the industrialization of attack tools. Using SMS to verify identity can no longer guarantee security, so we need to improve it as soon as possible and choose a more secure way. Zi Niu news reporter Song Shifeng

　　SMS verification code attacks occurred continuously, mostly in Longgang, Shenzhen.

　　On August 1st, an old man fishing in the cold river-snow, a netizen in Longgang District, Shenzhen, posted, "I was awakened by urine at 5 am on July 30th, and found that my mobile phone had been shaking. At first glance, I received more than 100 verification codes, and Alipay, JD.COM and Bank had everything. I was so scared that I suddenly woke up and went to see Alipay. The balance treasure, the balance and the money associated with the bank card were all transferred away. JD.COM’s account was opened with gold bars and white bars, and more than 10,000 yuan was borrowed. "

　　Another victim lives near the central city of Longgang, Shenzhen. He told Zi Niu news reporter that when he was sleeping at 6 o’clock in the morning on July 24, he suddenly heard his mobile phone ringing off the hook. He picked up his mobile phone and found that he had received more than 100 SMS verification codes. "Alipay, JD.COM, bank, and house purchase have everything. Suddenly I saw the consumption of 2,999 yuan, and I suddenly woke up." He immediately called the Construction Bank to report the loss of the card and freeze the account in JD.COM, and then reported it to the police station. During the reporting period, he found that Alipay was stolen and swiped 466.12 yuan, the construction bank card was stolen and swiped 5,000 yuan, and JD.COM IOUs borrowed 19,000 yuan.

　　There was an earlier victim in Longgang District, Shenzhen. He told Zi Niu News reporter that he was attacked by SMS verification code on the night of May 27th. Criminals invaded a Netcom client of China Merchants Bank in this way, raised his credit card limit from 30,000 yuan to 40,000 yuan, and then stole it all. Because his Agricultural Bank card is also tied to China Merchants Bank’s Netcom, the balance of this card has also been brushed away. The next morning, he turned on his mobile phone, only to find that he had received more than 70 SMS verification codes and debit information. On the night of July 5, his wife was similarly attacked.

　　Although Longgang District in Shenzhen may be a frequent area, such attacks are not limited to there. Qian Qian (pseudonym), a victim in Wuhan, told Zi Niu News reporter that she was attacked in the early morning of July 18th, and the online banking of CCB was stolen and her JD.COM account was invaded. However, because the bank card balance was only over 300 yuan, the actual loss was not too much.

　　Defending rights frequently encounters prevarication, and the victims experience "can write a book"

　　After the attack, the victims’ experience of defending their rights was quite difficult. They have to go to the police station to report the case and record the confession, go to the bank to make a running account, inquire about the abnormality of the account, contact Alipay customer service, JD.COM customer service, and customer service of various banks, and wait for various commissioners to reply.

　　Mr. Tang’s loss mainly occurred on the platform of JD.COM. He believed that there was a serious deficiency in identifying the authenticity of user accounts in JD.COM, and the gold bar loan review process was useless. He said that he communicated with JD.COM personnel many times at first, but every time he shirked his responsibility. Other victims often encounter similar situations when negotiating with institutions such as Alipay.

　　Some victims have no choice but to expose online, and after the experience of netizen "an old man fishing in the cold river-snow" was disclosed by the media, the attitudes of third-party payment platforms such as JD.COM and Alipay began to become positive.

　　JD.COM said on the 4th that he could waive the gold bar loan of 11,000 yuan from an old man fishing in the cold river-snow. Alipay staff told him on the 5th that they would pay 932.31 yuan for the Q-coin recharge order consumed by Alipay and exercise the right of subrogation. Mr. Tang has received a phone call from JD.COM on the 6th, expressing his willingness to pay for the loss, but he still needs to submit some information. Ms. Wu Fang from the marketing department of Jingdong Finance told the reporter that Jingdong Finance paid close attention to this matter and set up a special channel for handling stolen brush cases.

　　In contrast, victims generally find it more difficult to negotiate with banks. Qianqian first looked for a bank and met with prevarication. She went to the police station to make a record, but the amount was not enough to file a case. The police asked her to complain to the CBRC about the bank. After she complained, the bank called and replied that the case was sent back to the bank, and someone was found to contact me to provide information to enter the claim settlement process. However, whether you can claim compensation after providing the information depends on the audit of the provincial bank, and you can pay 70% of the stolen brush amount at most. The victim, who had been attacked by himself and his wife, told the reporter, "From May to August, you can write a book about the experience of defending rights when bank cards were stolen."

　　One or two hundred yuan to get the attack equipment, the security of mobile phone short messages is worrying.

　　After this short message verification code attack was exposed, some people called it a "GSM hijacking+short message sniffing" attack. Criminals set up pseudo base stations to obtain the surrounding mobile phone numbers, and then used short message sniffing equipment to sniff short messages. However, a veteran in the information security field said that the specific attack type cannot be determined, and there are many ways to obtain the SMS verification code.

　　Seeker, the founder and CEO of China Haitian Group Co., Ltd., enjoys a high reputation in the network security field and is known as the "hacker alchemist". In 2016, he exposed the vulnerability of using pseudo base stations to attack SMS verification codes. Zou Xiaodong told Zi Niu news reporter that there are four ways to attack SMS verification code, two of which do not need pseudo base stations. What is even more frightening is that among the four methods, three can intercept the short message and prevent the victim’s mobile phone from receiving it. If you don’t see the inexplicable verification code and consumption tips on your mobile phone, the victim may not even know that the account has been attacked.

　　Zou Xiaodong said that it seems that these victims have encountered the lowest attack method recently, and all the attack equipment can be handled with a minimum of 100~200 yuan. Because it is relatively low-level and not difficult, it is easy to be mastered by the black industry and has a great social impact.

　　As early as 2011, the GSM network of mobile communication has been cracked. GSM network can not only talk, but also send short messages. Although mobile communication is generally upgraded to a more secure 4G network, GSM network is still playing a role.

　　Criminals use jammers and other devices to drive the surrounding mobile phones to the GSM network, and then they can listen to the victim’s SMS verification code. In addition, the disclosure of personal information is very serious now. Information such as mobile phone number, ID number, bank card number, home and work address of individual users can almost be bought at a very low price. If the user’s mobile phone number and SMS verification code are mastered, such users are basically transparent to attackers.

　　When banks and third-party payment platforms verify the identity of users, if they only use SMS, there is no security for such attackers. Some people suggest that users turn off their mobile phones at night to prevent SMS verification code attacks. In this regard, Zou Xiaodong said, "Turning off the phone or flying mode is useful, but don’t forget that it will still be attacked when it is turned on, and there are many ways to make the victim’s mobile phone not receive or prompt the text message."

　　Experts say

　　Businesses that have loopholes and do not improve in time should bear the main responsibility.

　　Zou Xiaodong said: "From the hacker’s point of view, no one’s system is 100% secure, and it is impossible for all services to pursue 100% security when designing. They all made some compromises for ease of use. Users and businesses have enjoyed the benefits of ease of use in the past. As long as the security risks are controlled within a certain range, they will not be serious. When the threat of black products increases, businesses should respond in time and increase security measures. At the same time, ease of use used to bring more benefits to businesses than to individual users, so morally, businesses should bear most of the losses in the case of Shenzhen. "

　　Logics, a well-known legal blogger, told Zi Niu news reporter that "at present, the referee’s thinking in the case of bank card theft in China is relatively clear, that is, to protect the interests of depositors and strictly require banks to fulfill their security obligations."

　　He said that a case in Shanghai was selected as a typical case to protect people’s livelihood by the Supreme Court, and the judge thought so: banks are better equipped to prevent criminals from using banks to commit crimes, so banks should formulate perfect business norms and strictly abide by them to avoid risks as much as possible and ensure the safety of depositors’ deposits.

　　"logics Logics" believes that the court may conclude that the mobile online banking service provided by the bank failed to resist similar technical means, which is a "security obligation" not stipulated by law and requires the bank to bear the liability for compensation.

　　Attack tools or industrialized

　　It’s time to say goodbye to SMS verification code.

　　Zou Xiaodong told Zi Niu news reporter that SMS verification code is really fragile, loopholes have always existed, and there are solutions. It is only because it is convenient to use that it is barely used as an identity authentication method. Zou Xiaodong believes that a secure system should at least adopt "two-factor authentication", which means a method of authenticating users by combining the two conditions of password and physical object. Only when both pass can identity authentication be considered.

　　In fact, the central bank has long demanded "two-factor authentication". On June 13th, 2016, the People’s Bank of China issued the Notice on Further Strengthening the Risk Management of Bank Cards, requiring all commercial banks, payment institutions and card clearing institutions to strengthen the internal control management and security protection of sensitive payment information.

　　The notice clearly requires strengthening the security management of business opening identity authentication. Since November 1, 2016, when establishing related business with payment institutions and commercial institutions based on bank cards, commercial banks should strictly adopt multi-factor identity authentication to directly identify customers and obtain customer authorization. Identity authentication should use digital certificate, transaction password and dynamic token device to combine at least two kinds of authentication.

　　The circular also requires all commercial banks and payment institutions to use big data analysis, user behavior modeling and other means to establish a transaction risk monitoring model and system, promptly warn abnormal transactions, and take measures such as investigation and verification, risk warning and delayed settlement. For abnormal behaviors such as batch or high-frequency login, IP address, terminal equipment identification information and browser cache information should be used for comprehensive identification, and additional verification and rejection of requests should be taken in time.

　　Many victims have received hundreds of verification and transaction messages in a short period of time, and it is doubtful whether the relevant banks and payment institutions have fulfilled the monitoring obligations required by the central bank.

　　Zou Xiaodong pointed out: "If there are many SMS verification code attacks in succession, it is a sign that the attack tools may be industrialized. In this case, it is even more difficult to rely solely on the SMS verification code. " There was a glorious time for SMS. In 2012, the number of SMS messages sent nationwide reached an astonishing 897.31 billion. With the change of communication mode, SMS has declined rapidly in recent years, and receiving verification code has almost become its main function. However, in the face of the attack of black products, it may be time to say goodbye to the mobile phone verification code.