Attempted Bank Scam
Author
Discussion

bad company

Original Poster:

21,330 posts

288 months

Saturday 19th August 2023
quotequote all
I’d heard about people getting calls from scammers claiming to be from their bank. I’ve received a few very amateur attempts in the past but this morning I got a call that shocked me.

The call came in and a well spoken man claimed to be from Chase bank. He said he’d stopped 2 payments from my account in the last hour as they looked suspicious. He knew my name, phone number, address and Chase bank card number. I said I’d call back on the number on the Chase card or app. His response was that in that case he’d have to authorise the fraudulent payments. That comment confirmed him as a scammer for me.

At home I called Chase and confirmed that the call was not from them. There’s no numbers on the Chase card so I was able to change the card number on the app. My questions:-

1. Having changed the card number, is there anything else I should do?

2. How did they get so much information on me? As I said they knew my name, phone number, address and Chase bank card number.

Austin_Metro

1,421 posts

70 months

Saturday 19th August 2023
quotequote all
I had similar the other day.

He had my mobile but my wife’s name.

He was very competent and had identified payments (fictious ones!) that he said we’re dubious. I told him to go ahead and cancel them and that we’ll sort later if they are genuine.

When I called him out, we had a good chat, before he eventually told me to fro. Other than that, and being a criminal, nice lad.

Racing Newt

1,277 posts

227 months

Saturday 19th August 2023
quotequote all
Had similar last week, the wife sent a cheque to HMRC, and after 10 days there was phone call trying to get her to confirm the transaction details or there would be a possible scam payment taken so she said if you suspect a scam block it why ask me!!

M4cruiser

4,865 posts

172 months

Saturday 19th August 2023
quotequote all
bad company said:
2. How did they get so much information on me? As I said they knew my name, phone number, address and Chase bank card number.
Do you buy stuff on the internet?
So many times I've entered all those details, and often wondered how safe it is.

bad company

Original Poster:

21,330 posts

288 months

Saturday 19th August 2023
quotequote all
M4cruiser said:
bad company said:
2. How did they get so much information on me? As I said they knew my name, phone number, address and Chase bank card number.
Do you buy stuff on the internet?
So many times I've entered all those details, and often wondered how safe it is.
That’s the only plausible explanation. I don’t think they had my date of birth or pin so I reckon that’s what they wanted.

mph999

2,766 posts

242 months

Sunday 20th August 2023
quotequote all
I had similar a few years back .... at least in terms of complexity and details known.

I received a phone call from my bank (it was really them) asking me if I knew where my bank card was, in my wallet I replied. No it's not was their reply ....

Well, it was, but some oik had called up my bank pretending to be me, and got a new (credit) card dispatched apparently to my home address which never arrived. It was then used over a period of a few days to spend £8500 at the Apple Store in Greys, Essex - which is no where near where I live.
Given that I only ever spent low amounts on the card, I was slightly amazed it took them so long to stop it, but that's by-the-by.

Once stopped, the scammer called up the bank attempting to get it re-activated - I actually spoke to the lady in the fraud department that'd taken that call, and she caught them out with a security question they couldn't answer correctly.

Further, they apparently had two paper statements, and had gained access to the online banking - and that was secured with a 'proper' password.

I can only assume it was an 'inside job'.


Sheepshanks

39,064 posts

141 months

Sunday 20th August 2023
quotequote all
mph999 said:
I can only assume it was an 'inside job'.
Leaky call centres in India….

Jamescrs

5,823 posts

87 months

Sunday 20th August 2023
quotequote all
Sheepshanks said:
Leaky call centres in India….
Around 20 years ago I worked in a Call centre in England as one of my first jobs, it was for a major U.K airline, a guy I worked with got arrested for taking peoples credit card details, I have no idea what he was doing with them, didn't know it was happening until one day the head of security turned up at his desk with two Police Detectives and took him away.

I would hope things have tightened up somewhat since then but certainly back then it would have been very easy for that type of activity to take place.

Sheepshanks

39,064 posts

141 months

Sunday 20th August 2023
quotequote all
M4cruiser said:
Do you buy stuff on the internet?
So many times I've entered all those details, and often wondered how safe it is.
Even just calling people - paid off the PCP on wife’s car last week and gave all the payment details to someone who it became apparent was working at home.

Yet on another recent thing - paying for a boiler manufacturer visit - I had to key all the numbers into the phone, the guy said they’re not allowed to take card numbers if working at home.

bad company

Original Poster:

21,330 posts

288 months

Sunday 20th August 2023
quotequote all
I don’t often use this card online but did so a week ago to buy about £70 of stuff.

I have my suspicions.

NDA

24,587 posts

247 months

Sunday 20th August 2023
quotequote all
bad company said:
I

1. Having changed the card number, is there anything else I should do?
My bank have just introduced a 'challenge word' to help prevent fraud. A word of your own choosing. I haven't set this up yet, but it seems a good idea.

My card has been subject to a couple of incidences of fraud over the past 30 years.... once buying £8,000 of lingerie in Paris (I was in Paris the day before and the only transaction from me was lunch at one of its most famous restaurants). Money refunded. And secondly a Jet2 flight from Leeds to Mallorca (from memory) plus hotel bills and repeated attempts in bars. All refunded. However neither the bank or Jet2 would give me the name of the fraudsters (passengers on flights) due to 'data protection laws'. It seemed ironic that the criminals have this protection.

siremoon

246 posts

121 months

Sunday 20th August 2023
quotequote all
Always call them back. If they tell you that will cause you a problem then it is a scam.

If they call you on a landline then call them back on a mobile. If they call you on a landline and you have to use the same landline to call them back then put the phone back on the hook and leave it there without touching it for 5 minutes before making the call. If you don't do this the original call my still be established when you attempt to call the bank and the spammers can spoof dial tone and fool you into thinking you've made a new call when in fact you're still connected to them.

Never ever disclose passwords or access codes to a caller claiming to be from your bank.

Never ever transfer money to another account given to you by a caller claiming to be from your bank.

Finally, don't be a total idiot. I read a story about a guy who got a call saying that all his local branch employees were committing fraud so he should draw out all his money and post it to an address for safe keeping. And he did it. Some people just don't do themselves any favours


omniflow

3,567 posts

173 months

Sunday 20th August 2023
quotequote all
My card was once fraudulently used to pay school fees, which I thought was totally bizarre.

Sheepshanks

39,064 posts

141 months

Sunday 20th August 2023
quotequote all
NDA said:
And secondly a Jet2 flight from Leeds to Mallorca (from memory) plus hotel bills and repeated attempts in bars. All refunded. However neither the bank or Jet2 would give me the name of the fraudsters (passengers on flights) due to 'data protection laws'. It seemed ironic that the criminals have this protection.
I’ve had flights too, and they also bought currency in a bank.

The card used was cloned on three occasions - I closed the account after the the third time, mostly because the card company did a very job of not seeming to give a toss.

Griffith4ever

6,283 posts

57 months

Sunday 20th August 2023
quotequote all
bad company said:
I don’t often use this card online but did so a week ago to buy about £70 of stuff.

I have my suspicions.
it's usually very tightly locked down. I take card payments online through a web form and I don't even get to see card numbers and it's all SSL encrypted and absolutely nothing is stored on my website. Only time I see card numbers is if I take a payment over the phone.

bad company

Original Poster:

21,330 posts

288 months

Sunday 20th August 2023
quotequote all
Griffith4ever said:
it's usually very tightly locked down. I take card payments online through a web form and I don't even get to see card numbers and it's all SSL encrypted and absolutely nothing is stored on my website. Only time I see card numbers is if I take a payment over the phone.
Fair enough but the information got out there somehow. There’s no numbers on the physical Chase card so it can only have happened online.


Alickadoo

3,288 posts

45 months

Sunday 20th August 2023
quotequote all
siremoon said:
Always call them back. If they tell you that will cause you a problem then it is a scam.

If they call you on a landline then call them back on a mobile. If they call you on a landline and you have to use the same landline to call them back then put the phone back on the hook and leave it there without touching it for 5 minutes before making the call. If you don't do this the original call my still be established when you attempt to call the bank and the spammers can spoof dial tone and fool you into thinking you've made a new call when in fact you're still connected to them.

Never ever disclose passwords or access codes to a caller claiming to be from your bank.

Never ever transfer money to another account given to you by a caller claiming to be from your bank.

Finally, don't be a total idiot. I read a story about a guy who got a call saying that all his local branch employees were committing fraud so he should draw out all his money and post it to an address for safe keeping. And he did it. Some people just don't do themselves any favours
Or, better still, assume that everyone is going to try to rob you blind.
Just put the phone down.
Even that old lady claiming to be your granny.

Vasco

18,009 posts

127 months

Sunday 20th August 2023
quotequote all
Banks will rarely ring you, they know it's not the right way of sorting anything out. In any event, if they have any suspicions they will usually just stop a payment rather than query it with you.

You should never give ANY details on the phone to somebody ringing unexpectedly from your 'bank'.
If in doubt at all just put the phone down.

Scabutz

8,700 posts

102 months

Sunday 20th August 2023
quotequote all
bad company said:
Griffith4ever said:
it's usually very tightly locked down. I take card payments online through a web form and I don't even get to see card numbers and it's all SSL encrypted and absolutely nothing is stored on my website. Only time I see card numbers is if I take a payment over the phone.
Fair enough but the information got out there somehow. There’s no numbers on the physical Chase card so it can only have happened online.

By and large there are two ways websites take card payments. Big companies with established tech will take and process the card details directly on the website and may store them for future use. These companies will have to comply with PCI-DSS which is very strict and their security will be top notch. Still not infallible of course but should generally be OK.

Others will off load the processing to a provide such as Stripe. Here the card details are not processed or seen by the website you are buying from. The provide will be secure.

However, if the website itself is insecure or mistakes have been made with the integration then it can be possible to read the details.

I worked for a company that this happened to. Thankfully it was nothing to do with me or my stuff but a different team. They had some insecurities and malicious code had been injected which was lifting card details as they were entered.

bad company

Original Poster:

21,330 posts

288 months

Sunday 20th August 2023
quotequote all
siremoon said:
Always call them back. If they tell you that will cause you a problem then it is a scam.
That’s exactly what happened. I was out & said I’d call back on the official number when I got home. He said in that case he’d have to put the fraudulent payments through. That confirmed that the caller was a scammer.