A Lebanese resident in Kuwait has reportedly lost nearly all of his bank balance after falling for an online scam. A caller who appeared to know about his job and his parents’ planned trip to Kuwait persuaded him to approve an authentication request sent through the “Kuwait Mobile Identity” app.
The case came to light as the General Department of Criminal Investigation, through its Cybercrime Department, urged people in Kuwait to avoid untrusted links sent via WhatsApp and social media. In an awareness bulletin on its official account, the department warned that many links are malicious and designed to steal money or sensitive personal information.
How a phone call led to the withdrawals
According to the resident, the call arrived at about 8:30 am last Tuesday. The caller asked whether he was arranging a visit visa for his parents. After he confirmed, the caller said the application had been rejected because his biometric fingerprints were out of date.
When he asked how the issue could be fixed, the caller said an authentication request would be sent so he could book an appointment to update his fingerprints. He then received the request in the app and, believing it was part of an official procedure, approved it.
Within minutes, he began receiving messages about withdrawals totalling KD25. When he tried to log into his bank account, he found that his password had been changed. After regaining access, he saw that his balance had fallen to just 900 fils.
Bank confirmed fraud, but the data source remains unclear
The resident said he never gave the caller any banking details or verification code. When he contacted his bank about the transactions, he was told he had been the victim of fraud.
What troubled him most was the caller’s apparent knowledge of his occupation and his parents’ travel plans. That detail made the call seem genuine and convinced him he was dealing with someone connected to an official transaction.
He suspected the fraudsters had obtained his information elsewhere, or that someone familiar with his circumstances may have passed it on. The account, however, did not establish where the information came from.
Warning over digital approvals and suspicious links
The incident underlines the risks of trusting unsolicited calls that mention genuine personal circumstances, and of approving digital authentication requests without independently checking their purpose. Such cases show how quickly a single approval can lead to losses.
The Cybercrime Department has asked citizens and residents to be careful with untrusted links, warning that they can be used to compromise personal data and financial security.
