Saltar al contenido
Underc0de /foro

Fake Mercadopago APP

🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
ANTRAX ·
Los enlaces son solo para miembros. Registrate o iniciá sesión

I'm making this post for informational purposes, so you can keep in mind this new scam that is becoming more and more frequent in businesses.
MercadoPago is a digital wallet that lets you transfer money from one account to another. Very recently, SEVERAL replica apps came out. I stress SEVERAL, because there is more than 1.

In this post I'm going to show you not only how it looks and how it works, but also highlight some tips you can share with your friends who own businesses so they don't fall for this scam.


Home screen:

Los enlaces son solo para miembros. Registrate o iniciá sesión/i.imgur.com/VPibs1L.jpeg

At first glance, the main screen where the balance is shown looks very similar to the original, but it has 2 things that let us quickly identify whether this app is fake or not.

1) Almost none of the icons work
2) If we rotate the phone, the APP rotates too and all the styles, icons and texts break (the original mercadopago app does not rotate)


Transfer screen

Los enlaces son solo para miembros. Registrate o iniciá sesión

This screen has a hidden menu that expands from the left side.
It has fields to fill in with the business name, bank, CUIT and CBU. This same information is what the fake receipt then shows. So the person who is going to scam will first go to the business, pay with the real app and obtain the business's details. Once this is done, they have the seller's details. Then they simply fill them into the fake app and can issue these fake receipts.


Payment screen:

Los enlaces son solo para miembros. Registrate o iniciá sesión/i.imgur.com/Los enlaces son solo para miembros. Registrate o iniciá sesión/i.imgur.com/UY2rzgY.jpeg

The screens are very similar. If we look closely, the receipt has some visual errors. But in a rush, it goes unnoticed.


How to avoid scams:

Los enlaces son solo para miembros. Registrate o iniciá sesión

That small flyer presents two possible solutions. And the third is to take a good look at the app of the person paying us to see whether or not it's the fake app. The easy way is to ask them to rotate the phone (auto-rotate must be enabled on the phone, otherwise it won't rotate)

I hope this helps so they don't scam more of your acquaintances with businesses!

(DO NOT ASK FOR THE FAKE MERCADOPAGO APP. IT IS NOT AVAILABLE)
cristian24 ·
Awesome
To know whether it's fake or not
ahciuL ·
Thanks! Good to know about the screen rotation
Fl0r Pons ·
Excellent information ℹ
Thanks a lot
Dynamo_52 ·
Great post! The recommendations to avoid falling for the scam are very important.

Currently digital wallets are malfunctioning with transfers and there are delays.

When a transfer is delayed, I ask the customer to send me the receipt via WhatsApp with their real details.
China ·
Excellent post!
y4sm1n ·
Great app so you don't get scammed at your business
cachorrotrenque ·
I wonder how the fake app manages to affect the real app, because from what I saw in examples, sometimes you see the balance in the real app increase. But with a simple refresh of the app we go back to the original balance.
M4rD3v ·
I could fix those bugs for it to look more real
Padilla alan ·
Great apk for scamming😁
kkuu ·
How does the current one work? the one that is supposedly yellow and has "account impact"
Grupo de WhatsApp