"Hacking Organization Behind 300 Million Won in Unauthorized Credit Card Payments... Investigation Underway"

Personal Payment Data Stolen via Hacked Phones and PCs
Over 30 Cases Reported Nationwide

Jeonnam Provincial Police Agency building.

The unauthorized credit card payment incidents that occurred mainly in Yeosu and Suncheon, Jeonnam Province, have been found to be the result of personal payment information, provided during proxy purchasing transactions, being leaked by a professional hacking organization.

According to the Cybercrime Investigation Unit of the Jeonnam Provincial Police Agency on March 5, a total of 14 reports were filed—4 in Yeosu and 10 in Suncheon—of unauthorized purchases made with credit cards during the late-night hours. These incidents occurred around the Lunar New Year holidays in January and February, and in all cases, the cardholders had not actually purchased the items.

The items purchased through unauthorized payments were mostly expensive electronics such as health supplements, massage chairs, and refrigerators. In one case, a victim’s card was used for unauthorized payments totaling 13 million won across six transactions. Another victim’s card was initially declined due to exceeding a 3 million won limit, after which a second attempt was made for 2 million won, demonstrating the perpetrators’ meticulousness.

Upon taking over the investigation, the police discovered that the victims had entrusted their card numbers and other payment information to a proxy buyer, identified as Mr. A, whom they knew personally, for the purpose of purchasing overseas health supplements. The police determined that Mr. A’s mobile phone and PC had been hacked, resulting in the stored payment information files being entirely leaked.

The hackers used the stolen information to make product purchases, then intercepted the payments intended for the sellers. Notably, they went so far as to hack and manipulate the systems of payment gateway (PG) companies in order to divert these funds, employing highly sophisticated techniques.

The damages confirmed so far amount to approximately 120 million won in the Suncheon and Yeosu areas alone. Similar cases have been reported nationwide, with the total number of incidents estimated at over 30 and total damages projected to reach around 300 million won. Most victims did not suffer direct financial losses because the credit card companies promptly canceled the unauthorized transactions, but significant losses were incurred by payment gateway companies that had already advanced the funds.

An official from the Jeonnam Provincial Police Agency stated, "Given the sophisticated methods, including manipulation of payment gateway company systems, it is highly likely that a professional hacking crime organization is involved. We will keep all possibilities open and pursue the suspects until they are apprehended."

This content was produced with the assistance of AI translation services.