Phishing Attack Targets South Korean Online Shoppers, Stealing Credit Card Data

On July 5, 2026, the Financial Supervisory Service (FSS) of South Korea issued a consumer alert regarding a phishing scheme that has compromised credit card information on domestic online shopping sites. The Financial Security Institute reported 5,707 cases of stolen credit card data as of June 29, 2026. Attackers exploited weak security in online shopping malls to insert fake payment pages into the checkout process. These phishing pages prompted users to enter excessive personal information, including full resident registration numbers and all four digits of their card passwords. Victims were misled into thinking their transactions were legitimate due to misleading error messages. The FSS is collaborating with credit card companies to mitigate further losses and has urged consumers to be vigilant and report any suspicious activity. Immediate actions recommended include card suspension and password changes for affected users.

Key Points: • Over 5,700 cases of credit card data theft reported in South Korea. • Phishing pages mimicked legitimate payment screens to steal sensitive information. • Consumers are advised to report suspicious requests for excessive personal information.