Credit / Debit card fraud
Discussion
Seeing that last thread got removed rather quickly - if someone had my debit / credit card details - other than ordering shopping items to my home address - what else could they do with them? Curious as i have never seen a website that would let you buy something and have a different delivery address to stop credit card fraud.
I thought fraudsters were stopped doing this years ago and now rely on hacking bank accounts and tricking people into to sending them money by various means?
I thought fraudsters were stopped doing this years ago and now rely on hacking bank accounts and tricking people into to sending them money by various means?
Edited by lambo666 on Thursday 5th November 11:49
They could use your card as a means of online authentification to set up a mail re-direct with Royal mail. Once the re-direct is in place, they've by-passed having to have things delivered to your home address, they get it delivered to whatever address they want. They can then access bank statements etc, set up new accounts before you notice you're not receiving your mail.
Also certain other websites accept a bank card for use as online authentification. Along with the fact that fraudsters will very rarely only have one single piece of stolen information on you, they're likely to have multiple sources, enabling them to infiltrate different accounts. Each compromised account gives them further information on you.
Also certain other websites accept a bank card for use as online authentification. Along with the fact that fraudsters will very rarely only have one single piece of stolen information on you, they're likely to have multiple sources, enabling them to infiltrate different accounts. Each compromised account gives them further information on you.
Greshamst said:
They could use your card as a means of online authentification to set up a mail re-direct with Royal mail. Once the re-direct is in place, they've by-passed having to have things delivered to your home address, they get it delivered to whatever address they want. They can then access bank statements etc, set up new accounts before you notice you're not receiving your mail.
Also certain other websites accept a bank card for use as online authentification. Along with the fact that fraudsters will very rarely only have one single piece of stolen information on you, they're likely to have multiple sources, enabling them to infiltrate different accounts. Each compromised account gives them further information on you.
RM send a confirmation of the redirect to the card holder address.Also certain other websites accept a bank card for use as online authentification. Along with the fact that fraudsters will very rarely only have one single piece of stolen information on you, they're likely to have multiple sources, enabling them to infiltrate different accounts. Each compromised account gives them further information on you.
Mine was used to buy plane tickets, so there's nothing to deliver.
I'd have thought it might be possible to check who actually used those tickets but the bank didn't seem to give a toss. Someone suggested it might be an inside scam where a refund is given by a different means so the tickets are never used.
I'd have thought it might be possible to check who actually used those tickets but the bank didn't seem to give a toss. Someone suggested it might be an inside scam where a refund is given by a different means so the tickets are never used.
Sheepshanks said:
Mine was used to buy plane tickets, so there's nothing to deliver.
I once had my card used to buy flights. By chance I spotted it on the morning of departure.The bank were pretty unhelpful - citing 'data protection'. It was my card but I wasn't entitled to know what I'd bought.
I did manage to get a name from the bank and airline. I called the airline and said 'You have fraudsters on flight XXX travelling under the name of YYY, but they weren't interested in looking into it.
It seems that large companies just look on fraud as a cost of doing business and ignore the massive inconvenience that the general public is put through resolving these frauds.
We bought a MacBook direct from Apple and had it delivered to my OH shop as it was convenient. The credit card is registered to my home address.
Different name and address for delivery from the means used to pay for it and it wasn't a cheap purchase.....
It arrived on Tuesday so we now have a delighted 17 year old but it did occur to me that it was ripe for fraud.
Different name and address for delivery from the means used to pay for it and it wasn't a cheap purchase.....
It arrived on Tuesday so we now have a delighted 17 year old but it did occur to me that it was ripe for fraud.
Kateg28 said:
We bought a MacBook direct from Apple and had it delivered to my OH shop as it was convenient. The credit card is registered to my home address.
Different name and address for delivery from the means used to pay for it and it wasn't a cheap purchase.....
It arrived on Tuesday so we now have a delighted 17 year old but it did occur to me that it was ripe for fraud.
The merchant knows all this info & the merchants bank has fraud screening measures in place too. Did you card have Visa 3DS or MasterCard SC enabled?Different name and address for delivery from the means used to pay for it and it wasn't a cheap purchase.....
It arrived on Tuesday so we now have a delighted 17 year old but it did occur to me that it was ripe for fraud.
Dave_ST220 said:
The merchant knows all this info & the merchants bank has fraud screening measures in place too. Did you card have Visa 3DS or MasterCard SC enabled?
I have no idea what that means or how to check. Is it where I put a password in when purchasing online, I think it does have that.
Not directly related, but someone set up a 'Next' account in my wife's name and the first order was £2,500 to a different address. We just got the bill a week or so later. When I called them, the only check they do is that the name of the person on the account and their billing address matches the electoral register. That is insane and just begging to be defrauded.
Kateg28 said:
Dave_ST220 said:
The merchant knows all this info & the merchants bank has fraud screening measures in place too. Did you card have Visa 3DS or MasterCard SC enabled?
I have no idea what that means or how to check. Is it where I put a password in when purchasing online, I think it does have that.
Dave_ST220 said:
RM send a confirmation of the redirect to the card holder address.
Intercepting one peice of mail isn't that much effort in the grand scheme of things, taking into consideration what you can get away with once you've got the re-direct in place. It's also very easy to find out if people are about to go on holiday via social networking sitesThank you for all the responses.... have used the royal mail redirection service in the past and they do indeed send out written confirmation....but as posted...someone only needs to intercept that one letter...and then obviously goods can be ordered and delivered to a safe address. Aircraft/travel tickets i understand as they are not deliverable items (emailed) - I guess the fraudsters travel on tickets bought with stolen data could simply say 'my friend' paid for the tickets..... but as posted the banks don't care....they are still out there making huge profits with fraudsters taking just a small chunk out of their profits. I was unaware that there are still companies willing to deliver items to a non cardholder address - these must be targeted on a large scale if the amount of stolen credit/debit info out there is to believed....
Does anyone know if you can contact your bank so that your card will only work for point of sale transactions only (chip and pin) I assume this would make your card info safe if the details were stolen and were for sale on the web?
Does anyone know if you can contact your bank so that your card will only work for point of sale transactions only (chip and pin) I assume this would make your card info safe if the details were stolen and were for sale on the web?
Greshamst said:
Intercepting one peice of mail isn't that much effort in the grand scheme of things, taking into consideration what you can get away with once you've got the re-direct in place. It's also very easy to find out if people are about to go on holiday via social networking sites
Yep, only this morning a friend on one of these sites announced to the world he was at Heathrow on his way to TenerifePillock
lambo666 said:
I was unaware that there are still companies willing to deliver items to a non cardholder address - these must be targeted on a large scale if the amount of stolen credit/debit info out there is to believed....
One of the biggest online shopping organisations, AMAZON, will deliver anywhere!I've shipped to family and friends in the UK, Europe and US, various hotels I've been staying in across the US whilst working abroad, customer site addresses in the US and Europe.
Amused2death said:
Yep, only this morning a friend on one of these sites announced to the world he was at Heathrow on his way to Tenerife
I think that can happen automatically if you haven't got your settings right. I've seen it happen many times, and at least two people had no idea they'd posted it.lambo666 said:
but as posted the banks don't care....they are still out there making huge profits with fraudsters taking just a small chunk out of their profits.
The banks definitely do care, as they (or at least their insurerers, which they pay premiums for) will generally have to take that fraud hit as a loss and refund the customer. The issue is more that the police don't care, the bank covers the loss so the victim doesn't lose out too much, the stats for debit card fraud etc didn't used to feed into crime stats, and they don't have the funding to chase what is largely internet based crime, often done outside of the UK.Gassing Station | Business | Top of Page | What's New | My Stuff