topic Re: Unauthorized card use, card never out of possession and never used online in General Credit Topics

Unauthorized card use, card never out of possession and never used online

Bob555 — Mon, 20 Feb 2023 18:38:38 GMT

Hi,

Someone apparently hacked my card and started making unauthorized purchases. My bank caught it immediately and declined them, so no money lost. I'm just trying to figure out how it happened. The card has a chip. I only use this card rarely and have never used it for online purchases. I have only used it at 3 stores and it was always just tap the card to pay, the card was never out of my possession, no stor employee touched it or had a chance to take a photo of the card.

Any ideas?

Thanks,

Re: Unauthorized card use, card never out of possession and never used online

SouthJamaica — Mon, 20 Feb 2023 18:48:40 GMT

@Bob555 wrote:
Hi,
Someone apparently hacked my card and started making unauthorized purchases. My bank caught it immediately and declined them, so no money lost. I'm just trying to figure out how it happened. The card has a chip. I only use this card rarely and have never used it for online purchases. I have only used it at 3 stores and it was always just tap the card to pay, the card was never out of my possession, no stor employee touched it or had a chance to take a photo of the card.
Any ideas?
Thanks,
B

There are many ways it can happen. In your case some of the possible ways are (a) someone scanning it through your wallet (b) the number being released in a data breach or (c) someone near you at the store using a scanning device to intercept the NFC signal.

Re: Unauthorized card use, card never out of possession and never used online

Kforce — Mon, 20 Feb 2023 19:42:12 GMT

A card can be compromised, not being used, and locked in a safe.

The reason that it is necessary to monitor and check every credit/debit card

and all savings/checking accounts every month. I check each a minimum of twice

Re: Unauthorized card use, card never out of possession and never used online

FireMedic1 — Mon, 20 Feb 2023 21:38:40 GMT

The dark web. Got a new Disco card 3 weeks ago. Same thing.

Re: Unauthorized card use, card never out of possession and never used online

OmarGB9 — Mon, 20 Feb 2023 22:10:11 GMT

Unfortunately no matter how much you may try to physically safeguard a card, there'll always be ways of bad actors compromising it. As long as the banks catch it and/or you catch and report it, it's not a big deal.

Re: Unauthorized card use, card never out of possession and never used online

AndySoCal — Tue, 21 Feb 2023 01:30:27 GMT

@Bob555 Call the credit card company and that account closed ASAP. Dispute the fraud charge and creditor will send you another card with a new account number.

Re: Unauthorized card use, card never out of possession and never used online

Bob555 — Tue, 21 Feb 2023 14:45:58 GMT

Thanks to all for the replies, the bank caught it, the card has been canceled, no harm. Was just hoping for some insight on how it happened so I could better protect myself in the future. Guess they somehow got my PIN as well as the card number and security code. Also wonder how the bank knew it was fraud. The hacker placed an online order, would the bank know the shipping address was different from mine? @SouthJamaica - "someone scanning it through your wallet"??? I though chip cards were supposed cur down on fraud.

Re: Unauthorized card use, card never out of possession and never used online

SouthJamaica — Tue, 21 Feb 2023 17:08:34 GMT

@Bob555 wrote:
Thanks to all for the replies, the bank caught it, the card has been canceled, no harm. Was just hoping for some insight on how it happened so I could better protect myself in the future. Guess they somehow got my PIN as well as the card number and security code. Also wonder how the bank knew it was fraud. The hacker placed an online order, would the bank know the shipping address was different from mine? @SouthJamaica - "someone scanning it through your wallet"??? I though chip cards were supposed cur down on fraud.

Yeah, well.

A lot of things are supposed to be, that aren't.

Here's an article on RFID scanning of contactless cards:

https://www.forbes.com/sites/andygreenberg/2012/01/30/hackers-demo-shows-how-easily-credit-cards-can-be-read-through-clothes-and-wallets/?sh=7221b2d078a6

Re: Unauthorized card use, card never out of possession and never used online

Bob555 — Tue, 21 Feb 2023 17:54:35 GMT

Thanks, scary.

Re: Unauthorized card use, card never out of possession and never used online

DollyLama — Tue, 21 Feb 2023 18:55:12 GMT

I don't use a debit card, asked for one not to be issued-due to previous data breaches. So I use credit cards as a debit (plus the cash back rewards). What I like with mine, is I have it set up in alerts with the CC issuer for the lowest amount possible, and as soon as my card is swiped in my possession or I buy online, I receive a text message instantly, with amount and with whom. Sure, it may get compromised, but I would know sooner than my creditor.

Re: Unauthorized card use, card never out of possession and never used online

Remedios — Tue, 21 Feb 2023 19:31:22 GMT

For cards that haven't been part of the breach, it's usually card number generator.

It's actually super easy, computer will try all possible permutations of card number/exp date/cvv.

It's really not that hard especially since leading six numbers are IIN, followed by numbers unique to you with last number being Luhn check digit.

It ain't that hard. If it was, it wouldn't be the fastest growing "business" on the planet.

Re: Unauthorized card use, card never out of possession and never used online

Bob555 — Tue, 21 Feb 2023 19:31:41 GMT

Thanks, why is a debit card less secure than a credit card?

Re: Unauthorized card use, card never out of possession and never used online

SouthJamaica — Tue, 21 Feb 2023 19:58:28 GMT

@DollyLama wrote:
I don't use a debit card, asked for one not to be issued-due to previous data breaches. So I use credit cards as a debit (plus the cash back rewards). What I like with mine, is I have it set up in alerts with the CC issuer for the lowest amount possible, and as soon as my card is swiped in my possession or I buy online, I receive a text message instantly, with amount and with whom. Sure, it may get compromised, but I would know sooner than my creditor.

Excellent strategy.

Re: Unauthorized card use, card never out of possession and never used online

SouthJamaica — Wed, 22 Feb 2023 22:11:41 GMT

@Bob555 wrote:
Thanks, why is a debit card less secure than a credit card?

1. The laws protecting credit cards are better.

2. The credit card isn't linked to your bank account(s); the debit card is.

3. Here's one of many articles on the subject: https://clark.com/personal-finance-credit/never-use-debit-card-pay/

Re: Unauthorized card use, card never out of possession and never used online

OmarGB9 — Tue, 21 Feb 2023 20:26:45 GMT

@Bob555 wrote:
Thanks, why is a debit card less secure than a credit card?

Mainly because it's YOUR money in YOUR bank account at stake if there's fraud, versus the card issuer's "money" in the case of a credit card.

Also, depending on issuer, protections such as extended warranty, return protection, travel interruption, etc.

Re: Unauthorized card use, card never out of possession and never used online

NoMoreE46 — Tue, 21 Feb 2023 23:35:08 GMT

That sucks OP. Was it the Bilt card? There have been many reports of hacked accounts even before account holders received their cards.

Re: Unauthorized card use, card never out of possession and never used online

Kforce — Wed, 22 Feb 2023 00:51:22 GMT

@DollyLama wrote:
I don't use a debit card, asked for one not to be issued-due to previous data breaches. So I use credit cards as a debit (plus the cash back rewards). What I like with mine, is I have it set up in alerts with the CC issuer for the lowest amount possible, and as soon as my card is swiped in my possession or I buy online, I receive a text message instantly, with amount and with whom. Sure, it may get compromised, but I would know sooner than my creditor.

Might work if you don't have a large family all running around spending money all day.

My phone's speaker would die from all the SMS notifications.

Re: Unauthorized card use, card never out of possession and never used online

Bob555 — Wed, 22 Feb 2023 01:50:51 GMT

Nope, not a Bilt card.

Re: Unauthorized card use, card never out of possession and never used online

NoMoreE46 — Wed, 22 Feb 2023 02:16:31 GMT

Arrgh, just noticed that you said it was a debit card -sorry, my oversight.

FYI, here's good read about the attacks on credit cards:

What is a BIN attack on a credit card? Understanding this type of credit card fraud - The Points Guy

Re: Unauthorized card use, card never out of possession and never used online

M_Smart007 — Wed, 22 Feb 2023 20:24:58 GMT

@NoMoreE46 wrote:
That sucks OP. Was it the Bilt card? There have been many reports of hacked accounts even before account holders received their cards.

My propel card was hacked about two weeks ago, for the second time in less than 2 years.

The charge was declined ..I called WF right away to get a replacement card.

I hardly ever use the card. Mostly lives in a secure SD.