topic Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned! in myFICO® Product Feedback

Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!!!

CBear — Wed, 22 Apr 2009 00:39:34 GMT

The story is below - and at first - it looked like myFico was taking the situation seriously. Now - it's been five days and no action has been taken. myFico apparently likes supporting unethical banks - as long as they can make a buck - and as long as the credit card bank changes the name of cards to fool the end users...

***********************

After enrolling in the myFico program I decided to take a look at the credit card offers offered through the myFico site as suggestions. These cards are advertised on the myFico site - but link to the credit card's website. I was in the process of enrolling for a New Millenium card, and had entered my information - but before hitting "Submit" thought (belatedly) - "maybe I should check these guys out first!" I backed out, closed the tab - enough said. I did my due diligence and found TONS of negative feedback on New Millenium and decided not to "go there".

However, within TWO hours, of submitting my information to this bank (turns out they are also the bank behind the First Option card offered on the myFico site) - I was receiving credit card spam. Not a little spam - I'm talking HUNDREDS of messages! I was appalled - I only went to this site because it was linked through myFico - and I thought they were reputable! They obviously sold my email address immediately to scammers.

I called the New Millenium Bank - no one has ever returned my calls. I called First Option (not associated with New Millenium, but having the same first name) - and the first thing they said was "That bank is bad news. If they have any of your information, we recommend closing your bank accounts. And here's the number for the New Jersey Banking Commission and the FTC."

Needless to say - I was shocked. This is a bank that is linked from the myFico site.

On calling myFico - I got a massive runaround - from "it's not our responsibility what they do...", etc, etc., etc.

As of today I have over 1300 spam messages, all of them from credit card companies - I have had to close and move ALL of my bank accounts and monitor them for unauthorized withdrawals.(First Option says they have some people that they take 99.99 dollars out PER MONTH!). I have also had to change my email address that I have had for years because of this.

My question is - why is myFico linked to such an unethical bank - and not taking responsibility for removing it from their "marketing" campaign? Do they need the money THIS badly????

Chana Campos

At first from myFico -

Thanks for bringing this to our attention, CBear! We're very concerned and are seriously looking into it. I'll let you know the outcome shortly.

ETA: New Millenium Bank has been removed the myFICO credit card offer program. (emphasis mine)

Sorry you had this experience, CBear!

*********

Then I discovered that the bank had just changed the name on the CARD! and it was STILL New Millenium Bank issuing the card! So, I called this to myFico's attention - and have gotten ZERO response.

myFico is doing business with an incredibly unsavory bank - and doesn't mind exposing its customers to them...I'm guessing that New Millenium Bank is sending significant advertising dollars myFico's way.

WHY NO RESPONSE myFICO????

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CHARGE_IT — Wed, 22 Apr 2009 00:54:01 GMT

This should also be located on the credit card thread.

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

fused — Wed, 22 Apr 2009 01:09:24 GMT

Must you post this in the forums? What makes you think forum members can answer these questions?

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

Creditaddict — Wed, 22 Apr 2009 01:18:53 GMT

In the end does Myfico have ANYTHING to do with these credit cards that are posted there??

I mean if you google a credit card for bad credit Millenium will be right at the tops of the lists and if you give one of those websites your e-mail, your in for a surprise from ALL the creditors that offer products to people with bad credit, and payday loans etc.

Sorry to say but in my opinion in the end, your the only one that gave your e-mail address and call it a lesson learned to ask board members about banks you are thinking about or do the research like you did in the end but do it before you give out any of your information.

I call Myfico a hosting site, kind of like Craigslist, you can't blame a host because they can't track it all.

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

Anonymous — Wed, 22 Apr 2009 01:20:39 GMT

"..... I was in the process of enrolling for a New Millenium card, and had entered my information - but before hitting "Submit" thought (belatedly) - "maybe I should check these guys out first!" I backed out, closed the tab - enough said.

However, within TWO hours, of submitting my information to this bank ....."

Wait, you backed out and closed the tab or you submitted it? You said you did both...that makes no sense. There is no conspiracy going on.

MyFico is just a site. The site is a business. I don't know what email service you have but ALL email services have spam blocking. You're making your life a very stressful one it seems.

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 01:48:00 GMT

Sorry, you're right, I wasn't clear.

I had entered all the information - but never hit the "Submit button. I closed the tab. It is extremely easy to fake an "OnClick" event in a website - and that's how I believe they were able to retrieve my information.

I wasn't worried until I read the reviews, contacted the bank with the unfortunate first name as the credit card "First Option" - and was told by *them* to close my bank accounts because these are such bad folks - and NEVER heard back from New Millenium Bank.

What I am furious about is having to close an email that I had had for years - yes, GMail catches spam - but 5% gets through - and if you inadvertently click - you are in trouble if the site is serving up malware. (I'm an IT Security professional, btw.)

As for this being a "business" - well, why is myFico professing concern, telling me that they aren't going to do business with them (removing them from their marketing strategy) - and then allowing them to simply do business with them by changing the credit card name.

That just seems a *little* coincidental. Frankly, there has been no response in 5 days - they said they were "taking it seriously" - which seems pretty funny now.

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 01:49:57 GMT

It was. myFico removed it back here.

Thanks!

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 01:50:59 GMT

I don't think they CAN answer these questions. But, I'm trying to protect your customers from the experience *I* had - which myFico doesn't seem to have the inclination to do.

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 01:55:03 GMT

Sorry, but wrong. I *didn't* give them my email address...I backed out from the site by clicking the tab closed.

I believe (because it is extremely easy to do) that the site faked an ""OnClick" event. It is trivial to do that with a simple Perl or PHP function call. I *never* hit the Submit button.

First Option Bank (whose name New Millenium uses for a card) advised me to close my bank accounts, etc. My problem is that myFico trys to engender an aura of trust and respectability - that, in my view, is not justified

by their business association with scam artists like this.

Thanks for your response,

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

haulingthescoreup — Wed, 22 Apr 2009 02:08:16 GMT

I've wandered all over the myFICO forums for 2 years now, and I have never, ever had this happen to me. And I was a member here, just like you, for a long time before I became a moderator, so I don't think that I have some sort of mysterious immunity.

And I've read a bunch of angry posts (none of which have been censored or deleted, btw) by members who were unhappy with the myFICO CC recommendation link, but it was mainly because Discover was represented as easy to get or something. I've never seen anyone with an experience like yours.

I'm not discounting what happened to you. I'd be really p.o.'d if I had to change my e-mail addy. But you are the only person that I have ever, ever heard this happening to, and I'm sorry, but I don't think it was evil click recorders here.

Barry did look into this for you, as I recall. Perhaps some things can't be accomplished instantaneously?

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 02:15:02 GMT

Understood. But, here's the problem. I contact New Millenium Bank - and asked to talk to their IT personnel. It really occurred to me - because it DOES happen..that their site had been compromised and they didn't know it. It happens ALL the time. (90% of malware is served from legitimate sites, according to Google.). So, I contacted them. NO response. NADA. I called back and asked to speak to their Marketing person. Again. NADA. So, I

contacted First Option Bank in Kansas. They pointed me to the New Jersey Banking Commission, advised me to close my accounts and talk to the FTC. WHY do you think they would do this?

Forget the spam. Forget the email and bank account changes I had to make. (But, I'll be happy to send you printouts of all the spam. That's what my husband recommended I send to Suze Orman...)

Even if their site isn't compromised, they still have a really bad reputation - even among other banks.

Why would you even want the *hint* of that around your site?

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 02:16:04 GMT

BTW, Barry did look into it and told me they were being removed. They are still there - and he has not responded back to my email about that.

Cheers,

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

Anonymous — Wed, 22 Apr 2009 12:32:21 GMT

I think you got bad advice from that commission. From what I have read, you didn't give out any acount numbers...

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

llecs — Wed, 22 Apr 2009 14:03:58 GMT

CBear, did you give your e-mail address to any else on the web? For example, any other CC site, blogs, forums, event hosting sites, etc.?

Message Edited by llecs on 04-22-2009 10:03 AM

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 14:40:05 GMT

Sorry, but no. I just don't "do" that. I usually use a "disposable" email address if I need to use an email address. One that expires in 2 to 48 hours. It was just WAY too coincidental - suddenly hundreds of spam within hours of using that site? I've been on the net for 15 years - and never had any experience like that. The only reason I used my real email address was because I thought it was a trusted site from myFico.

Thanks for asking though!

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

llecs — Wed, 22 Apr 2009 15:52:37 GMT

I have to echo others. I've been on this site since 2007 and even apped for CCs the same way you did, using my primary e-mail, and never received any spam. And like you, I am very picky as to who can see my e-mail. It is tied to my URL. My DW also has the same and she's been spam-free, though hasn't posted in here, yet.

I'm not discounting that the CCC sold or passed your info, though if you used your e-mail anywhere on the web in the past, the problem could have come from anywhere. Others I'm sure have done the same thing through that same CC and never have I seen a post like yours. And while I agree with you that that CCC isn't a very good one, and maybe that had a lapse in security, it certainly isn't FICO's fault. If you app'd for a Citi CC using the same method, and you were spammed through Citi, I would get mad at Barry for removing any Citi link. Same standard should apply to NMB.

Have you called New Mellinium Bank back? What are they saying now?

Another thought...have you tried googling your e-mail to see if it comes up on any website? Maybe you could track the source that way.

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 16:31:54 GMT

Hi -

Thank you for your reasoned response. I did as you suggested and googled my email. It came up on exactly one website - where I was given a temporary password for some development work I was doing.

As far as New Millenium Bank goes - I have had no response to three phone calls. So, I don't expect any in the near future.

It is curious, however, that people think because it "hasn't happened before" - it can't ever happen. That is, sorry to say, illogical. In fact, statistically, the exact opposite is the case.

People also seem to confuse an OnClick event - as somehow being a keystroke logger or "click recorder" as one moderator put it.. They are entirely different programming events - and "things". I have NEVER said that myFico keystroke-logged ANYONE! Although I am being accused of that by people who are not reading my posts carefully as somehow "defaming" myFico!!! And that is plain ludicrous.

I am now being threatened with a "ban"! I have been polite and only responded to (mainly) replies from moderators...so that doesn't make any sense at all.

I have asked to whom I should speak. And gotten no reply. So, this morning I called Fair Isaacs in Minneapolis and I am making my way through the ranks there. Someone is responsible for the moderators in this forum and if I have to go to every member on the Board - I will. Byrdman owes me an apology for abusing his position as moderator. Plain and simple.

So, it's not just about having to close an email account - I have had to close my bank account, as well! That is serious stuff..

Thanks again for your response!

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

llecs — Wed, 22 Apr 2009 17:50:05 GMT

Perhaps this was all a misunderstanding. The tone I had gathered from your posts (here x2 and in CC) was that myFICO was to blame for the spam. If the source was NMB, then it would have to have come from their website and not myFICO's. It has sounded as if you were blaming us.

I just checked over within the "Get a CC" link or whatever it says. I can't find NMB anywhere. Maybe it was removed. I don't think it should be removed, though if it were a cronic problem with others getting spam, then I would agree with you that it should have been removed. Clicking on any CC offer within that section, you'll find yourself directly within the website of the CC issuer. For the benefit of others reading this, myFICO didn't transmit any info to NMB, and if they are the spam-source, then they are the ones to blame, not myFICO.

Because you were hammering the same point over and over and over, and that we took it as being myFICO's fault, it appeared that your posts were meant to inflame others. Moreover, you cross-posted which seemed to have intensified your assumed point. Because of that a couple of warning were issued. Byrdman doesn't owe an apology. In fact, I personally would have done the same as he did by that point.

MyFICO did nothing wrong. You are still assuming the FICO has a hand in all of this by calling them in MN. You need to go after New Mellinium Bank if indeed the spam came from that source.

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

CBear — Wed, 22 Apr 2009 22:05:51 GMT

First, the cross post (into one other forum!) came only after *5* days of no response from myFico on new concerns that were raised (changing credit card names, etc.). I thought that by cross-posting into one (and only one) other forum - that was specifically credit card related - would raise awareness of a potential (and for some of us) very real problem. Hardly "bombing the forums" which I know is against the policies...I have read them, you know...In fact, if you read back, you will see one person who thought it SHOULD be posted in Credit Cards.

>"just checked over within the "Get a CC" link or whatever it says. I can't find NMB anywhere. "

Look harder.

The NMB program is (unfortunately) very much alive. They have just changed the name of the

card to "Millenium Advantage" - and the First Option card (which is also issued by NMB) is still on offer. (Last week it was the "Next Millenium" and the week before it was the "New Millenium" card...The First Option card is also an "offering" from NMB.

So, nothing has really changed.

As to the "hammering" of my point - 90% of what I responded to were moderator responses. I have to assume they must not be terribly technically savvy - or they would have understood my post. I was having to explain the same point multiple times to multiple people who obviously weren't getting the difference between a programming function and a piece of malware.

ByrdMan did not warn me before terminating and locking the thread. He just decided *he* was tired of my posts. He then threatened to have me banned - for nothing more than posting (very politely) in two forums. As I told him - I might be annoying - but that is not violating any policy that I am aware of. I was not defamatory, or any other such ludicrous nonsense...and anyone reading the posts carefully will see that.

He owes me an apology, he gave no warnings, just a petty threat. He abused his power as a moderator by simply shutting off someone he disagreed with - not the characteristics of a very good moderator, I think most people would agree...

There's really nothing more to say about this...I have made my point. I am already pursuing this - I have spoken to several people in Minneapolis so far today. I will be talking to Richard Deal on Friday.

One thing Byrdman didn't realize is that - I don't give up and I don't go away. You can ban me from the forum if you like. That's fine...but, I don't give up or go away - mainly because I don't want someone else to have to go through this kind of treatment. Ever. (Also, several people in MN were surprised to hear the name "Byrdman" - they stated that forum moderators typically don't use pseudonyms - and that they had no record of a "Byrdman" thus far in their records. But, perhaps a moderator is a volunteer post - unlike an admin?

One thing has changed as a result of this, however - now I have far less respect for the moderators and the employees hired by myFico as a result of this. And that is truly unfortunate.

Have a great day,

CBear

Re: Over 2,000 "credit card" spam messages from myFico Credit Card links....be forewarned!

Junejer — Wed, 22 Apr 2009 22:35:17 GMT

CBear, you need to read that thread again. Moderator Fused asked you on two occasions not to post any more and to take it up with an admin. You actually gave him a retort, rather than simply complying with his wishes. After the second warning went unheeded, I locked the thread. A moderator can lock any thread that he or she deems to be unproductive. That thread was unproductive and was going nowhere. You'd already posted in Product Feedback, there was no need to post in CCs too, regardless if another member thought it belonged in CCs or not.

I am not an employee of FICO, I am a member, a volunteer that was "promoted" to this position based off of my contributions to this community, just as all of the other moderators were. One of my jobs is help keep this forum clean and posts in the correct place (i.e. we move threads). When a member refuses to comply, we lock or delete threads.

You were only threatened with a ban, when you became belligerent in a PM to me. In fact, you had me and another moderator completely mixed up in your PMs. That said, I make no apologies for my actions against locking that thread.

Here is the thread, so that you can refresh your memory.