Credit Card Used Fraudulently - How?

So my bank texted me saying they noticed unusual activity on my credit card and did I authorise a particular transaction. I didn't and when I logged in there were 7 transactions that weren't me, all made interstate, hotels, online food delivery etc even an audio store which doesn't seem to even sell online?

Anyway the bank is sorting it out, but I'm wondering if anyone has suggestions as to how they got my card details? I never lost my card, I never use ATMs, no idea how they got my card details…

Anyone else experienced this and found out how it happened?

Comments

  • Bar tab

  • I am wondering this too after a $1200 transaction appeared on my AMEX. It was to a company at Stoke on Trent in London. After having credit cards for years this is the first fraudulent transaction ever. Amex is investigating.

  • +2

    https://en.wikipedia.org/wiki/List_of_data_breaches

    those are the famous ones, theres's probably another 10x that aren't reported. I've never understood why websites are allowed to store credit card info.

  • +1

    Skimming. CCTV. Hacked into a website that you used it on. It's not terribly hard to get your hands on a credit card number.

  • Ever paid with your credit card over the phone?

  • +2

    Malware on your computer capturing keystrokes when you enter your credit card details (number, exp date, name, security code)?

    • I think this is most likely, especially considering all the purchases were interstate. One of the purchases was for a VPN provider, so that makes me think hacker too… But I haven't purchased anything recently online, and the card that got hacked isn't the card I normally use either

      • +2

        I usually type the last 12 numbers of my credit card first. Then mouse click back to the start and type the first 4 numbers. So 1111-2222-3333-4444, becomes 2222-3333-4444-1111

        I don't use the keyboard to move the cursor back as someone reading the key logger record would still be able to tell the last 4 digits were typed at the beginning of the credit card number

        Even though I run security software, this hopefully protects me from new and unknown malware just a little.

        Mod: Edited comment for clarity by request of commenter

        • Thanks for the tip!

        • That's a great suggestion. Will keep in mind for future.

          The only thing I'll add - Mastercard's start with 5 and Visa's 4, so if any of the 3 blocks of 4 (after the first) start with 4 or 5, maybe start with that.

        • +1

          @tomsco:
          Maybe
          1111-4444-2222-3333
          So the first 4 digits stay the same.

        • You're a genius, gummibear.

  • I went through a spate of them earlier this year with Amex. I had 4 new cards in less than 2 months. It only stopped after Amex actually closed my account, and set up a new account (with a slightly different name on the card), instead of just giving me a new card for the same account. I still have no idea where it was compromised in the first place, but it's been ok since then. Prior to that, I've had a new one every year or two due to issues, but I use it online several times a week, so it's unfortunately inevitable. Amex at least seem to be pretty good at catching onto when it is compromised.

  • When I travel I use a prepaid, 'disposable' credit card from the post office, where possible. It usually has just enough for my short term needs, before an auto top up happens - which I can stop at any time.

    • +4

      I don't see the point of using the disposable card? that's like carrying cash. If your CC got used fraudulently, 100% chance you get your money from the bank?

  • Its the systematic error at Bank's end, sometimes they charge you twice or even thrice on online transactions. Happened to me, luckily they rectified it within a day.

  • My bank called last week to tell me that there was risk that my card COULD be compromised and recommended that they re-issue me with a new one. I agreed but remain puzzled by COULD. Nothing has gone wrong but I have enough experience to know not to ask banks what they mean by that. My only guess is that some retailer I used it with got hacked or something.

    A bit of a hassle because I have to change all of my direct debits and need to use back up cards until this one arrives.

  • I've had this happened to me as well. Seems like there's a lot of it going around at the moment. Think for the time being I'll just pay using my smartphone. Wish more banks took up Apple or Samsung Pay. Makes it a lot more difficult for hackers to get to your credit card.

Login or Join to leave a comment