You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more
I got a message from my credit card provider saying that they had blocked a payment for a purchase that I knew nothing about.
Few hours later got an email from a well know retailer (who I made a purchase from 2 years ago) saying that they had cancelled said order that I knew nothing about.
After speaking to the retailer, they’ve said that my account was compromised.
- I don’t recall setting up an account 2 years ago and use Dashlane which scans my inbox for new accounts and auto adds passwords etc from the browser. It doesn’t show any account. I have no email record of creating an account. The company told me the new email address that the hacker had used (temporary email service) and started telling me the address before shutting up - needless to say it wasn’t mine. I also tried to login in whilst on the phone using old passwords that I may have used 2 years ago and it said no account existed.
- the billing address on the alleged account was an old address so the company in question allowed a payment to go through without the security code and the incorrect address. Or they hold all my card details including the security code but still the wrong address - they deny this but won’t answer the first part.
- I’ve asked them why they still hold full details from 2 years on that allows a hacker to make a purchase. They’ve not answered that.
- they’ve confirmed that they’ve now deleted all my details.
What would you do next?
Move on & forget it as the credit card company have done their job?
Kick up a fuss with the company to get answers? Though I’m not sure what that would achieve.
Pass this over to the ICO as a GDPR case?
I feel annoyed that they have simply shrugged and tried to blame me.
If I were you I’d rest easy knowing that anti-fraud teams within card companies are actually shit hot and catch a lot more than they miss and even if it did go through, you’d likely not been out of pocket.
Is it Wiggle?
Last time I spoke to my bank they said that if the card was approved once if the address is changed it raises a flag but does not stop the payment for subsequent transactions.
i found out after I moved house but still had billing address as the old house on file. no idea why the system works like this or even if every provider is the same.
is there any regulation that requires deletion of details after s certain time? I can see cards and addresses on amazon going back years.
Think you're expecting a bit much personally, scammers will scam, hard to point the finger knowingly at anyone other than at the scammers. Somebody bought 2 first class train tickets with my card the other month for a London train company, can't remember who it was. How did they get my details, address, cvv code etc? Had the same thing where my cc company text me asking if it was legit. Knowing the cc companies pick up the bill keeps me from worrying more than anything to be fair.
Okay. Appreciate the replies. Thanks