Weak Phl digital infrastructure

Cybercriminals are on their newest moneymaking scam. Over the weekend, the Metropolitan Manila Development Authority (MMDA) warned against “fake” notices of violation under the no-contact apprehension policy, or NCAP. The supposed “fake” notices of NCAP violations were reportedly sent using MMDA emails to targeted victims of these cyber scammers.

The MMDA posted on its official Facebook account a screenshot of the purported “fake” NCAP notice of violations. It notifies the addressee: “You have receive these message because you have a violation observation true No Contact Apprehension Policy (NCAP).” (sic)

The NCAP uses closed-circuit television (CCTV) cameras with artificial intelligence (AI) capabilities to track traffic violations as well as a system that automatically issues notices to traffic violators.

The Supreme Court (SC) issued a temporary restraining order (TRO) against the NCAP on Aug. 20, 2022. Acting on petitions by various public transport groups and motorists’ organizations that questioned the lack of public hearing and imposition of exorbitant fines, the initial implementation of NCAP was suspended.

In May 20 last year, the SC partially lifted the TRO on the MMDA’s version of the NCAP on major thoroughfares like EDSA and C-5 to help ease severe traffic jams. However, the SC retained the ban on local government unit (LGU) ordinances in five cities, namely, Manila, Muntinlupa, Parañaque, Valenzuela and Quezon City. As of this writing, the 15-man High Court has yet to render its final ruling on the anti-NCAP petitions.

The MMDA clarified they indeed maintain emails for NCAP notices using [email protected] as its official sending address. Also, the MMDA confirmed they send out NCAP notices of violations through text or SMS (short message service) to mobile phones of registered motorists with official heading: “MMDA_NCAP” These are the only legitimate sources of the NCAP notices of violation being issued by the agency, the MMDA cited.

But official notifications from the MMDA would not contain links, ask to reply to sender, contact information of the sender via text and the name of the car owner, the MMDA clarified.

The MMDA introduced these enhancements in the delivery of notice of violations through text messages and email. As such, it has installed mechanisms through which motorists can appeal apprehensions online.

Other improvements include a better “May Huli Ka” website that enables motorists to track potential violations using their license plate number and motor vehicle file number, the use of body-worn cameras during road-clearing operations targeting illegally parked vehicles, among others.

This latest scam involves sending email to potential victims. At a first glance, it would seem to contain genuine information about the name of the registered owner of the vehicle. Then it tells you about the supposed traffic violation and the corresponding fine, the MMDA warned. However, the MMDA noted, the motor vehicle file number and the license plate number are both concealed using asterisks (*). To further convince their victims, it adds: “Note: Some details are not show to protect you. Note: Pay your fines on time to avoid interest charges.” [sic]

Just ignore it to avoid getting scammed.

Another platform literally driven by cybercrime syndicates in their illicit moneymaking racket also targets motorists as victims. It mimics the Land Transportation Office (LTO) telecommunications signal. To wit: “Unsettled violation under RA 10913 (Using Mobile Phone While Driving). Fine: P1,000 due in 24 hours. Non-settlement may lead to penalties, suspension, or an LTMS alarm. View: https://lto-phweb.com”

Obviously, this scam uses the IMSI (or international mobile subscriber identity) catcher which is a portable electronic device that tricks phones into connecting them. The IMSI catchers threaten the privacy of mobile phone users by identifying and tracking them.

An IMSI is specific to the subscriber’s identity within the mobile network. IMSI catcher is strictly regulated by government law enforcement and intelligence authorities only for court-allowed surveillance or court-sanctioned eavesdropping of mobile phone conversations and SMS exchanges. But these cybercriminals use them as tools for their illegal trade and other nefarious activities.

I laughed so hard the first time this SMS got through my smartphones. How could I be fined? I do not even know how to drive, much less possess an LTO driver’s license. These cyber scammers maybe tech-driven but they are as stupid as they come.

Repeatedly, if not often enough, government agencies led by the Department of Information and Communications Technology (DICT) continue issuing advisories to the public on the prevalence of various scam activities. There are also very active anti-scam advocate groups like ScamWatch Pilipinas headed by Jocel de Guzman.

For the past three years, ScamWatch Pilipinas has been helping the public as well as the DICT and other government agencies in the war against cybercriminals. Our own Kapihan sa Manila Bay news forum supports the advocacy of ScamWatch Pilipinas in featuring in our weekly news forum leading cyber experts and law enforcement authorities to alert the public on the latest scams by these online con artists.

But as fast as modern technology evolves, these cybercrimes also become sophisticated. There is certainly no fool-proof solution, especially with the advancements in AI technology. So it was a welcome relief that Elon Musk has blocked from his social media platform “X” its generative AI Grok innovations bordering already on cyber sex crimes. Musk was forced to take this action after international outcry over sexualized “deep fakes” of photos of real people being edited without their knowledge, much less their consent.

The funny part of this story was on the same day Musk took this action last week, DICT Secretary Henry Aguda was boasting at a press conference in Malacañang that the Philippines is following the lead of its neighboring countries to also disconnect from this offending AI Grok.

All told, Philippine digital infrastructure remains weak, thus enabling these criminals to ply their illicit tech-driven trade with impunity in cyberspace.