---
title: "Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested | DMARC Report"
description: "Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested from DMARC Report explains practical steps for email authentication, domain protection."
image: "https://dmarcreport.com/og/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested.png"
canonical: "https://dmarcreport.com/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/"
---

Quick Answer

\_According to the FBI's 2022 Internet Crime Report (IC3), 300,497 US-based victims reported phishing incidents in a single year, and Business Email Compromise (BEC) caused more than $2.7 billion in direct losses. DMARC Report Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested

Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fbanks-drop-otps-major-cyber-heist-spying-spouses-arrested%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Banks%20Drop%20OTPs%2C%20Major%20Cyber%20Heist%2C%20Spying%20Spouses%20Arrested&url=undefined%2Fblog%2Fbanks-drop-otps-major-cyber-heist-spying-spouses-arrested%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fbanks-drop-otps-major-cyber-heist-spying-spouses-arrested%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fbanks-drop-otps-major-cyber-heist-spying-spouses-arrested%2F&title=Banks%20Drop%20OTPs%2C%20Major%20Cyber%20Heist%2C%20Spying%20Spouses%20Arrested "Share on Reddit") [ ](mailto:?subject=Banks%20Drop%20OTPs%2C%20Major%20Cyber%20Heist%2C%20Spying%20Spouses%20Arrested&body=Check out this article: undefined%2Fblog%2Fbanks-drop-otps-major-cyber-heist-spying-spouses-arrested%2F "Share via Email") 

![Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 

![Dmarc analyzer 3470 150x150](https://media.mailhop.org/dmarcreport/images/2024/07/dmarc-analyzer-3470-150x150.jpg) 

> From a product strategy perspective, DMARC reporting is evolving from a security tool to a business intelligence platform, says Brad Slavin, General Manager of DuoCircle. The data in aggregate reports tells you not just who’s spoofing you, but who’s sending legitimate email on your behalf - and whether they’re doing it correctly.

\_According to the [FBI’s 2022 Internet Crime Report (IC3)](https://www.ic3.gov/Media/PDF/AnnualReport/2022IC3Report.pdf), 300,497 US-based victims reported phishing incidents in a single year, and Business Email Compromise (BEC) caused more than $2.7 billion in direct losses. DMARC Report

Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested

```
					<button title="Play" aria-label="Play Episode" aria-pressed="false" class="play-btn">
						
```

Play Episode

```
					</button>
					<button title="Pause" aria-label="Pause Episode" aria-pressed="false" class="pause-btn hide">
						
```

Pause Episode

```
					</button>
				

					<audio preload="none" class="clip clip-14447">
						<source src="https://media.mailhop.org/dmarcreport/images/2024/07/Banks-Drop-OTPs-Major-Cyber-Heist-Spying-Spouses-Arrested.mp3">
					</audio>
						

							<button class="player-btn player-btn__volume" title="Mute/Unmute">
								
```

Mute/Unmute Episode

```
							</button>
							<button data-skip="-10" class="player-btn player-btn__rwd" title="Rewind 10 seconds">
								
```

Rewind 10 Seconds

```
							</button>
							<button data-speed="1" class="player-btn player-btn__speed" title="Playback Speed" aria-label="Playback Speed">1x</button>
							<button data-skip="30" class="player-btn player-btn__fwd" title="Fast Forward 30 seconds">
								
```

Fast Forward 30 seconds

```
							</button>
						

							<time class="ssp-timer">00:00</time>
							
```

/

```
							<!-- We need actual duration here from the server -->
							<time class="ssp-duration" datetime="PT0H1M44S">1:44</time>
			

								<nav class="player-panels-nav">
												<button class="subscribe-btn" id="subscribe-btn-14447" title="Subscribe">Subscribe</button>
																		<button class="share-btn" id="share-btn-14447" title="Share">Share</button>
										</nav>

						
```

RSS Feed

```
							<input value="https://dmarcreport.com/feed/podcast/dmarc-report" class="input-rss input-rss-14447" title="RSS Feed URL" readonly />
						

						<button class="copy-rss copy-rss-14447" title="Copy RSS Feed URL" aria-label="Copy RSS Feed URL"></button>
					

						Share						
					

						<a href="https://www.facebook.com/sharer/sharer.php?u=https://dmarcreport.com/blog/podcast/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/&t=Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested" target="blank" rel="noopener noreferrer" class="share-icon facebook" title="Share on Facebook">
							

						</a>
						<a href="https://twitter.com/intent/tweet?text=https://dmarcreport.com/blog/podcast/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/&url=Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested" target="blank" rel="noopener noreferrer" class="share-icon twitter" title="Share on Twitter">
							

						</a>
						<a href="https://media.mailhop.org/dmarcreport/images/2024/07/Banks-Drop-OTPs-Major-Cyber-Heist-Spying-Spouses-Arrested.mp3" target="blank" rel="noopener noreferrer" class="share-icon download" title="Download" download>
							

						</a>
					

						Link						
					

						<input value="https://dmarcreport.com/blog/podcast/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/" class="input-link input-link-14447" title="Episode URL" readonly />
					

					<button class="copy-link copy-link-14447" title="Copy Episode URL" aria-label="Copy Episode URL" readonly=""></button>
					

						Embed						

					
```

/\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-14447” readonly/>

```
					<button class="copy-embed copy-embed-14447" title="Copy Embed Code" aria-label="Copy Embed Code"></button>


```

Digitization and [cybersecurity](https://dmarcreport.com/blog/major-cybersecurity-trends-that-will-reign-in-2024/) go hand in hand. They are like the two sides of the same coin. If you wish to reap the benefits of **digital advancements**, then you must educate yourself about cybercrimes and threat actors. The implementation of [SPF](https://dmarcreport.com/what-is-spf/), [DKIM](https://dmarcreport.com/blog/dkim-explained-how-dkim-works-and-why-is-dkim-important-for-organizations/), and [DMARC](https://dmarcreport.com/) helps mitigate risks like cyber heists and privacy breaches, enhancing [email security](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) for financial institutions and beyond.

_We bring to you our weekly dose of global cyber news so that you can steer clear of any such cyber mishaps_. In today’s edition, you will get to know why [Singaporean banks](https://www.darkreading.com/endpoint-security/singapore-banks-ditch-one-time-passwords) have decided to eliminate OTPs for good. On the other hand, an elderly couple in Australia has been **arrested for espionage**. Also, a major cyber heist has shaken the Indian banking system to the core.

Keep reading to get into the juicy details\*\*! Lastly, Apple has once again warned its users against potential spyware attacks.

## Singapore banks decide to give up on one time passwords!

In the next three months, Singapore banks will stop using OTPs or one-time passwords for their **retail customers**. This significant step has been taken with an aim to keep [malicious phishing](https://www.cnbc.com/2023/11/28/ai-like-chatgpt-is-creating-huge-increase-in-malicious-phishing-email.html) attempts at bay.

The Association of Banks in Singapore (ABS) and The [Monetary Authority of Singapore (MAS)](https://en.wikipedia.org/wiki/Monetary%5FAuthority%5Fof%5FSingapore) have made an announcement regarding the \*\*progressive phasing out of OTPs across all the major Singapore retail banks.

The new authentication system will now involve digital tokens instead of one-time passwords. Customers will now have to activate digital tokens on their smartphones. _The same digital tokens will be used for bank account logins_. The use of \*\*digital tokens eliminates OTP generation and thereby easily thwarts phishing attempts. If there isn’t any OTP, then there will be no risk of [threat actors](https://www.scmagazine.com/news/threat-actors-launch-financially-motivated-attacks-abusing-oauth-applications) stealing the data. Also, the scammers won’t be able to compel naive customers to share their OTPs.

_The Singaporean authority believes that this major change will bring down the rate of cybercrimes in the banking sector_. They urge the customers to activate digital tokens at the earliest to fortify the \*\*authentication process and safeguard their [hard-earned money from scammers](https://www.birminghamtimes.com/2024/05/trying-to-get-rich-can-put-your-hard-earned-money-in-scammers-pockets/).

## Cyber heist worth INR 16.71 crores shook Nainital Bank in India

The Nainital Bank Limited in Noida Sector 62 got the biggest shock ever when the \*\*IT manager \*\*realized about the cyber heist. A staggering 16.71 crores have been stolen by [cybercriminals](https://www.goperigon.com/news/tech/2024/07/15/nainital-bank-noida-hacked) by hacking into the servers of the Indian bank.

![Dmarc office 365](https://media.mailhop.org/dmarcreport/images/2024/07/dmarc-office-365-2049.jpg) 

Sumit Shrivastava, the IT manager, discovered about the heist back on 17th June while he was cross-checking the balance sheets . He came across a discrepancy of INR 3.60 crores in the Real Time Gross Settlement account which made him suspicious. Soon, the bank authorities realized that INR 16.71 crores had been transferred to \*\*84 different accounts within just 5 days.

Nainital Bank has approached the Indian [Computer Emergency Response Team](https://www.techtarget.com/whatis/definition/CERT-Computer-Emergency-Readiness-Team) or CERT-IN for **an in-depth investigation**. The IT manager has also filed a complaint against the hackers with the Noida Cyber Crime Police Station.

_As per the Additional Commissioner of Police, the threat actors had managed to access the login ID and password of the bank manager_. A \*\*special investigation team is working closely with the bank authorities to get hold of the culprits.

## A married couple got arrested for engaging in espionage for Russia!

**Kira and Igor Korolev**, a married couple based in Australia, have been arrested for engaging in espionage activities for Russia. The 40-year-old wife was also an [Australian Defence Force (ADF)](https://donaldwilliamtate.medium.com/the-disgraceful-australian-defence-force-e23f44c07ac1) army private. They have been residing in Australia for the past decade. _The authorities arrested them from their residence in Brisbane_. Together, the couple was spying to gain access to ADF data.

Kira often took long work leaves to travel to Russia. During that time, her spouse would log into her official ID to access [sensitive information](https://www.theguardian.com/us-news/2023/oct/06/donald-trump-us-nuclear-submarines-potentially-sensitive-information-australian-billionaire-anthony-pratt) and share it with her. The Australian Federal Police believes that Kira and her partner have misused her ADF login credentials multiple times to gain access to **ADF-related data**.

![Dmarc record](https://media.mailhop.org/dmarcreport/images/2024/07/dmarc-record-10.jpg) 

## Apple issues spyware attack warnings across 98 countries!

Once again, iPhone users are concerned about their \*\*data and privacy since Apple has issued another potential [spyware attack warning](https://www.forbes.com/sites/kateoflahertyuk/2024/07/11/apple-issues-new-spyware-attack-warning-to-iphone-users/). The tech giant has been tight-lipped about the suspected attackers, though.

The first such warning was issued in April 2024 across 92 nations . The Apple warning reads, “Apple detected that you are being targeted by a mercenary spyware attack that is trying to remotely compromise the \*\*iPhone associated with your Apple ID-xxx - .”_Indian users have confirmed receiving the same alerts_. Reportedly, \*\*Indian journalists and politicians received the earlier slot of warnings as well.

Apple, while emphasizing on its effective [threat detection](https://www.akamai.com/glossary/what-is-threat-detection) methods, has urged its users to stay vigilant and not divulge **any personal details**.

## Topics

[ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ News ](/tags/news/)[ SPF ](/tags/spf/) 

![Vasile Diaconu](https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg) 

[ Vasile Diaconu ](/authors/vasile-diaconu/) 

Operations Lead

Operations Lead at DuoCircle. Runs project management, developer coordination, and technical support execution for DMARC Report.

[LinkedIn Profile →](https://www.linkedin.com/in/vasile-diaconu/) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) 

## Related Articles

[  Foundational 4m  Akira flaunts victims, Idaho targets orthodontist, AI granny protects  Nov 22, 2024 ](/blog/akira-flaunts-victims-idaho-targets-orthodontist-ai-granny-protects/)[  Foundational 4m  Ambient Light Spying, Cybersecurity Prices Drop, Euro 2024 Threats  Jul 10, 2024 ](/blog/ambient-light-spying-cybersecurity-prices-drop-euro-2024-threats/)[  Foundational 4m  Car Cameras Hackable, UK Water Breach, Thailand Frees Captives  Feb 28, 2025 ](/blog/car-cameras-hackable-uk-water-breach-thailand-frees-captives/)[  Foundational 4m  China Targets India, Security Firm Mistake, Zeus Hacks Olympics  Aug 1, 2024 ](/blog/china-targets-india-security-firm-mistake-zeus-hacks-olympics/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested","description":"Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested from DMARC Report explains practical steps for email authentication, domain protection.","url":"https://dmarcreport.com/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/","datePublished":"2024-07-18T09:08:16.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2024-07-18T09:08:16.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vasile-diaconu/#person","name":"Vasile Diaconu","url":"https://dmarcreport.com/authors/vasile-diaconu/","jobTitle":"Operations Lead","description":"Vasile Diaconu is the Operations Lead at DuoCircle, the company behind DMARC Report and AutoSPF. He coordinates between engineering, product, and technical support - running project management, interfacing with developers on customer-reported issues, and making sure work that comes in through the support channel actually gets closed out. Vasile sits at the intersection of customer feedback and engineering execution, giving him a direct view of which email authentication problems customers hit most often in production.","image":"https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg","knowsAbout":["SaaS Operations","Technical Support Coordination","Customer Issue Resolution","Engineering Program Management","Deployment Operations"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vasile-diaconu/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/"},"articleSection":"foundational","keywords":"dkim, DMARC, email security, News, SPF","wordCount":1073,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested","item":"https://dmarcreport.com/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/"}]}
```