So, I logged onto my VISA this morning to pay off the balance and noticed a suspicious charge for approximately $1,300 to a computer/IT company near the Toronto area yesterday.  I definitely did not purchase any computer-relate ware, hard nor soft, in recent memory, so I called the company and they advised me to contact VISA.  Could my card have been compromised?  As I was waiting to talk to someone at VISA, I scrolled down and noticed another suspicious charge made on August 18th to some online gaming store.  Someone had purchased about $1,400 of what I assumed to be Pokeman cards online.  And that someone was NOT me.  I finally got through to the VISA rep and they were very nice.  They cancelled my card, said they’d be sending me a new one in the mail, and informed me the charges would be withdrawn pending a fraud investigation.  If the merchants could prove I had made the purchase – which would be one neat trick – then the charges would apply.  If not, then I wouldn’t have to worry about them.

Still, I am concerned.  About the inconvenience.  And the fact that someone stole my credit card information.  But who?  And how?

What’s interesting is that my old VISA card expired this month and I was mailed a new one end of July.  And this new card had to be the one used to make the online Pokemon purchases since it was made the 18th and my cell phone company contacted me a few days earlier to inform me that my old credit was no longer in use.  Which MEANS that whoever stole my credit card information had a very narrow window to do so. A little over two weeks.

I don’t know the exact date I started using the new card (which automatically invalidated the old one), but it was near the end of July. So, knowing this, I went through the itemized charges on my VISA.

There were some uber payments, but those go through my phone.  There were some amazon payments but, again, that was my old card and I’m assuming purchases on a new merchant’s online platform would require the 3 digit code at the back of the card – which is not readily available.  There were some substack charges but again, like the amazon payments, those are pre-existing subs from my old card.  I made two purchases with the card August 11th, a restaurant and a chocolate chop, but those were taps and I never let the card out of my sight.  Then, August 15th, the payment to my cellphone provider, processed after I updated my new credit card information to their website.

Hmmmm.  Updated my new credit card information to their website.  Could my cellphone provider’s website have been hacked?

Or did someone at the restaurant or chocolate shop – however unlikely – catch a glimpse of the 3 digit code at the back of my card?

What do you Sherlocks think?

In the meantime, I look at the bright side.  The fact that my VISA has been deactivated clears any old subscriptions I may be unaware of or failed to cancel in the past.

credit-card-fraud


Discover more from Joseph Mallozzi's Weblog

Subscribe to get the latest posts sent to your email.

Podcast also available on PocketCasts, SoundCloud, Spotify, Google Podcasts, Apple Podcasts, and RSS.

8 responses

  1. Some of the newer ways to pay like waving a card around or tapping the point of sale open you up to additional theft by cutting edge thieves. One trick is card readers at gas station pumps. They clone your card’s credentials and then use it to make other purchases.

    To the extent you may store your card’s information on your device as a stored card in a browser or the like your information is potentially additionally vulnerable.

    I’m sure there are many other ways it could have happened. Thieves make their money being sneaky, though thankfully sometimes not quite clever enough.

    1. I thought on your concerns more and I think you should call the police right now directly yourself with your own fingers or voice somewhere no human being at all can hear you.

      The timing of the fraudulent charges coinicides with the arrival of a new card, which may indicate a bad actor ( no pun intended ) has physical access to your mail.

      When you pay via taps, the card reader doesn’t see your CC code in your own hand, yet the transaction goes through. Likewise if the information thief partnered with an employee of a merchant who can run your card number and name as if, for the paper trail, you were there in person at checkout.

      Call the cops. Don’t wait either.

      1. Joseph Mallozzi Avatar

        I’ve been thinking that is a likely possibility.

  2. That’s so frustrating. I’ve had it happen to me a few times. Still don’t know how they got ahold of my info. I’m glad you caught it fairly quickly and were able get it resolved. I started having the bank notify me of every charge, so now I know right away what charges have been made.

  3. It almost sounds like an inside job. Unfortunately, that can happen. If it’s not that, it could be Trojan malware harvesting somewhere inside the chain of data custody. It could even be an AI inspired penetration and it would not surprise me if VISA was a target.

  4. I vote for the restaurant or chocolate shop but the circumstances are strange. I agree with Danielle, set up a spending notification text with your credit card company. The last time my cc number got stolen, I did that. Now, I get a notification of any charge over a certain amount.

    One of my friends got her mail highjacked. I’m not sure if that’s what you call it but someone changed her mailing address. They forwarded all of her mail to an abandoned trailer out in the middle of nowhere. She had a lot of construction people coming and going (big, big house remodel) at the time. I guess one of the subcontractors saw an easy mark.

    Anyhoo, I told her to set up an online account at USPS. USPS will notify you about any mail coming your way. It emails a photo of your mail/package alert. I don’t know what mail service Canada uses, but think about that too.

    If thieves put as much effort into an actual job, as they do stealing…..

    Good luck with everything!

  5. I don’t know how the thieves do it but it has happened to me on two separate occasions. The first was 12-14 years ago, I got a call from the credit card issuer to inquire if I were trying to purchase train tickets in Spain…. I wasn’t. Card canceled and replaced, that time the caught it before the charge went through, I have no idea if they caught the thief or not. Another time about 5 years later I got a phone call after several charges had already gone through, in New York state for large orders of pizza, some software etc. Funds were reimbursed and a new card issue… still no idea if they caught anyone. The latter incident, for pizza and software, only amounted to a few hundred dollars which doesn’t seem to make stealing CC info very worthwhile.

  6. This just happened to me, sort of. My card was used to buy something in Malaysia and at a cafe in Hong Kong. Sadly, I was in neither place. No idea how it happened as I generally use apple pay for most everything. When I received the replacement I set up virtual cards via the app for recurring charges. In the event I am hacked again, only the physical card number is replaced and the virtual ones stay active. Only charges for that specific site are allowed on the virtual card. Won’t help in cleaning up legacy subscriptions, but after the hassle of changing the card number in multiple locations, I decided it was worth it.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Discover more from Joseph Mallozzi's Weblog

Subscribe now to keep reading and get access to the full archive.

Continue reading