Then, the scammers convince the victim to provide the nine-digit access code and to grant certain permissions.[19] After permissions are obtained and if no other security measures are in place, the scammers usually transfer money using the Unified Payment Interface.[20]