You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more
A few months ago there were a couple of purchases on my credit card that weren't mine, both for American Netflix. Contacted the bank and the card was cancelled and a new card with new number issued. This month, yet again, another Netflix payment.
I don't have Netflix. I live alone so it's no-one else in the house. The only thing the new card has been used for was renewing XBox Live.
I am at a total loss as to how the new card could be hacked by (presumably, going by what was paid for) the same person. Anyone any clues how this is done? Could they have set up a standing order on the old card that then, for some reason, got copied over to the new one?
Can you use an Xbox account to subscribe to Netflix?
If the only thing you've used it for is an XBL sub then either it was compromised before you received it or ipso facto it has to be that transaction.
How did you renew the subscription? If you did it on the console / xbox.com (which is the single most expensive way of doing it, incidentally) I'd look to changing your Microsoft password and setting up 2FA (which you really should do anyway).
Look up the "Visa Account Updater" (or there's a similar thing from Mastercard). When your old card expires or is cancelled, the credit card company automatically supplies the new number to the merchant. So any recurring payments on Netflix etc can continue.
Thanks guys, I'll look into those.
Look up the “Visa Account Updater”
I was not aware of that. Seems somewhat counterproductive when you've flagged up a fraudulent payment...!
Yup some now auto renew your cards makes it too easy for fraudsters.
If the only thing you’ve used it for is an XBL sub then either it was compromised before you received it or ipso facto it has to be that transaction.
Not necessarily, it could have been spoofed. I think some people generate card numbers with random expiry dates and CVVs in the hope some turn up with real accounts.
I was not aware of that. Seems somewhat counterproductive when you’ve flagged up a fraudulent payment…!
Afaik it's only bigger companies with standing payment authorities that get that privilege.
Microsoft is definitely one, fairly sure my card got auto updated at Google too. By contrast companies like ringgo, the Dartford toll and the like needed a manual intervention at last card update.
As you say though crap for the user if the card has been cloned 🙄