Card Fraud

Status
Not open for further replies.

Waterman

Super Member
ECF Veteran
Verified Member
Nov 25, 2012
613
631
Colorado
Added mine, but it was back in April. I emailed them letting them know and they responded back quickly. I hadn't used my card in a while so I felt sure it was there. Now I don't use my card and don't make many purchases. I find coops and the classified's to be safer. I worry for the vendor's as well, it couldn't help the industry
 

SirGuyNate805

Full Member
Verified Member
Jun 14, 2013
23
17
PDX
Looking around at a lot of vape shops websites it is probably the implementation of the credit card processing that is the problem.

There are several ways that a website can handle credit card information. The most insecure being your credit card information (encrypted) is sent to and stored on a server that is owned (or leased) by the website owner. Most likely this server is not, what the credit card industry calls, PCI compliant, the credit card is charged via a merchant account gateway in batches. Often your original credit card information remains on a server somewhere for a long time.

A more secure method but still potentially insecure is your credit card information is stored on a server ran by the company's merchant processor on a PCI compliant server. A PCI compliant server must go through yearly checks to test the level of security on the server. Also PCI compliance regulation states that the CVC2 CVVC2 (3 digit number on the back of the card, or 4 digit number on the front of an AMEX) can not be stored on the server.

The most secure method is direct pass through of the encrypted credit card transaction directly to the merchant processor.

There are some stores that will not charge your card until they ship your item, these companies store your information on servers to charge your card at a later date. If your information is not stored on a secure server, and they store your CVC2/CVVC2 information your the most at risk.

(But SirGuyNate - Amazon doesn't charge until they ship! This is true, they also don't store your CVC2/CVVC2 - they don't even ask for it. They rely on the address verification system only, they also take further in house steps to thwart fraud. Plus amazon runs one of the biggest cloud based services, they know a thing or two about securing there servers. )
 

cags

Vaping Master
ECF Veteran
Verified Member
Jan 27, 2011
3,908
4,401
east TN
I've tried to use virtual account number and it will just not work for me. Not sure if it's user error or what, but when I sign in it tells me my user name or password is wrong (it's not). No one at Citi seems to be able to explain why or fix it. But I digress....

I've been using the VC at citibank for a long time, but lately I've been having trouble with it too. hopefully they will fix it soon
 

Tripster

Super Member
ECF Veteran
May 21, 2011
741
559
I suggest everyone that everyone that uses a pc manually check windows update asap. Expect 16+ security updates! Really makes me want to buy a mac, and I hate apple. Maybe a Linux OS instead....
Microsoft, Adobe Patch Critical Vulnerabilities in Security Updates

No matter what OS you use, there will always be vulnerabilities...Windows OS is targeted more frequently due to the fact that it is found in majority of homes that have a computer. Mac OS has been breached countless times along with Linux and the like (you don't hear bout it cause it affects a minority of users).

Online shopping will never be 100% safe/secure.
 

C Heise

Super Member
ECF Veteran
Verified Member
Jul 18, 2012
430
280
MN
No matter what OS you use, there will always be vulnerabilities...Windows OS is targeted more frequently due to the fact that it is found in majority of homes that have a computer. Mac OS has been breached countless times along with Linux and the like (you don't hear bout it cause it affects a minority of users).

Online shopping will never be 100% safe/secure.

Not true, I ran linux for 6 years and not once was there any security issues during that time. I even have a phone with a Linux OS. For a Linux binary virus to infect executables, those executables must be writable by the user activating the virus. That is not likely to be the case. Chances are, the programs are owned by root and the user is running from a non-privileged account. The less experienced the user, the lower the likelihood that he actually owns any executable programs. The users who are the least savvy about such hazards are also the ones with the least fertile home directories for viruses. Linux is a very hostile environment for a virus. The deck is stacked against them.
 

Tripster

Super Member
ECF Veteran
May 21, 2011
741
559
Not true, I ran linux for 6 years and not once was there any security issues during that time. I even have a phone with a Linux OS. For a Linux binary virus to infect executables, those executables must be writable by the user activating the virus. That is not likely to be the case. Chances are, the programs are owned by root and the user is running from a non-privileged account. The less experienced the user, the lower the likelihood that he actually owns any executable programs. The users who are the least savvy about such hazards are also the ones with the least fertile home directories for viruses. Linux is a very hostile environment for a virus. The deck is stacked against them.

One word...Stuxnet.
 

Racehorse

ECF Guru
ECF Veteran
Verified Member
Jul 12, 2012
11,230
28,254
USA midwest
The POINT of a pre-paid card.....is that if your pre-paid card is stolen, they only have access to the amount you put on the card.

I am not willing to lose ANY amount to credit card fraud. :)

My bank has a full time fraud protection team/service....guess it saves them $ in the longrun. They saw the fraud before it hit my account, though it had been put thru and had been authorized. But it did not come OUT of my account.

But by the way, you are coorect about BoA telling that BS story.

Pretty much any CC processor could have a hardware (not software) firewall and not much is going to get by that. Software firewalls are sort of a joke, unless you have a full time foresic guy with a good sniffer program monitoring your servers. I used to always have a gateway next to my desktop......a hardware firewall. Nothing "out there" ever made it to my desktop computer. It's really not that sophisticated, it is 2013 after all. :)
 

supermarket

Ultra Member
ECF Veteran
Verified Member
Jul 2, 2010
1,401
1,852
Near Atlanta, Georgia, US of A
I just added mine, too. I had been very lucky until a couple of weeks ago :(


BTW, Supermarket, the link in your signature doesn't seem to work.


You are right, it isn't working for me either. Thanks for bringing this to my attention.

I would fix it, but I was just linking it to...it is actually one of the mods here who is now collecting the data. I'll take it off my signature until I find out the new page. Thanks again!
 

supermarket

Ultra Member
ECF Veteran
Verified Member
Jul 2, 2010
1,401
1,852
Near Atlanta, Georgia, US of A
You are right, it isn't working for me either. Thanks for bringing this to my attention.

I would fix it, but I was just linking it to...it is actually one of the mods here who is now collecting the data. I'll take it off my signature until I find out the new page. Thanks again!


I figured out what is wrong. For some reason, when you click the link, it is adding an asterisk (*) at the end of the link.

I will try fixing it. Until I do, just remove the asterisk at the very end of the link in the window that opens up :)




Edit: I fixed the link. Thanks !
 
Last edited:

DaveP

PV Master & Musician
ECF Veteran
May 22, 2010
16,733
42,646
Central GA
I am not willing to lose ANY amount to credit card fraud. :)

My bank has a full time fraud protection team/service....guess it saves them $ in the longrun. They saw the fraud before it hit my account, though it had been put thru and had been authorized. But it did not come OUT of my account.

But by the way, you are coorect about BoA telling that BS story.

Pretty much any CC processor could have a hardware (not software) firewall and not much is going to get by that. Software firewalls are sort of a joke, unless you have a full time foresic guy with a good sniffer program monitoring your servers. I used to always have a gateway next to my desktop......a hardware firewall. Nothing "out there" ever made it to my desktop computer. It's really not that sophisticated, it is 2013 after all. :)

My CC processor (BofA) caught the first two attempts at fraud immediately after they hit and they froze the card number, then called me to let me know my old card was locked down and they were FedExing me a new one. Two more hits were denied while we talked on the phone.

I know that some here don't care for BofA, but my experience has been positive. I got emails right before the call that alerted me to the charges. I really like the email alerts that I get on my phone right after charges occur. It's a system that allows immediate action to be taken if needed.
 

mightymen

Ultra Member
ECF Veteran
  • Nov 22, 2012
    2,878
    27,514
    No you can't
    I never had a problem with credit card fraud, though 6 months ago someone tryed to open a new account with bill me later. Damm credit agencies OK it with only my name and address correct all other information wrong. Only reason I caught it was a package came to my house the next day, I called the company up at once got account closed then called all the credit card agencies talked to them lock them down for 90 days. So far everything is OK. Order was placed with a company less the 50 miles from me.

    The comapny that the purchase was made gave me the number to one credit agency where I could talk to some one the there gave me the number to talk to next agency and so on.

    You every try to talk to someone at these credit card agencies, press 1 the 4 the 2 then there tell you can't talk to a person. I was lucky that time.

    Now I found out all takes to open a NEW ACCOUNT, the BUMS need is my name and right address credit card agencies are OK with this!!!

    It's Scary!

    Beware when you get a phone call, make them Tell you who do their think you are, Don't give them your address or any other information. Get them to prove that it's you before you give any information to them.

    I ask them for the last four numbers of my social security number then I say thats me or its not.
    Let them tell you where you live (address) don't give any information to them Etc Etc.
     
    Last edited:

    Scott Ballentine

    Full Member
    Verified Member
    Jul 7, 2013
    65
    38
    58
    Cleveland, Texas, United States
    Glad to know I am not alone.. well kinda I guess. I made some purchases after the first of the month and since I review my banking regularly I spotted a charge coming in from a website in Scotland. Turned out my card had been used from Indonesia. The company confirmed it was a fraudulent purchase and reversed the transaction. Bank of America confirmed I was protected if the reversal hadn't been put through. We cancelled the card and they sent a new one.

    Unfortunately I had made about 5 purchases online a few days before so I can't confirm the vendor.
     

    flintlock62

    Ultra Member
    ECF Veteran
    Verified Member
    Oct 2, 2012
    2,597
    2,340
    72
    Arkansas Delta
    I'll wager to guess the hotel charges came first. When a thief steals your CC number, many times the first attempt to see if it will pass is to make a hotel/motel transaction for a small amount. If it goes through, hello Walmart. My card info was stolen a while back. Someone in Spain had tried to use it. My card company called me and gave me all the information. Yep, the first attempt was to a motel.

    I have now learned how to better protect my card!

    Hi,

    I just called my bank to learn that my debit card was recently blocked due to some fraudulent activity.

    After some purchases from the Apple App Store and two reputable vaping vendors, there were three declined charges on my card:

    Walmart.com - $600
    Crystal Hotel - 2x $3.49

    I'll name the vendors if I can get some hard evidence pointing to them, but at this time I do not want to make any accusations, and I've already written emails to them in the mean time.

    For now, please fill out this form if you've suffered from fraud after purchasing from a vendor:

    https://docs.google.com/forms/d/1rlxmFudpl1SJhtPaes6Fby5WGqRbOcZSU9Lc-vJroJc/viewform

    Please note your personal information will NOT be recorded. This is just to collect basic information.


    Thanks much!
     

    Underwhelmed

    Account closed on request
    ECF Veteran
    May 22, 2012
    6,071
    1,260
    Texas
    I purchased 1 bottle of Bee's Knees this week from AVE while they were open and looking at my billing summary yesterday found a $1 charge from Real Network and a $25 charge from justgive.org. Neither of these charges were mine.

    My card has been reported compromised and the charges are being disputed, a new card will be here in about a week, but I am quite ...... that this is still an issue with AVE and their credit card processor. I won't be back again.

    I've been buying stuff online for a long time, vape stuff for the last year, and I've never had this issue before.

    I am glad that this is a re-loadable card that didn't have much on it though, or no telling what might have been charged.
     

    mightymen

    Ultra Member
    ECF Veteran
  • Nov 22, 2012
    2,878
    27,514
    No you can't
    When it comes to money, you have realize that theres a lot of bad people out there all their want to do is put their hands in on your wallet.

    It use be said days ago buy beware into todays times its more so. Every purchase you make is a risk with credit cards we just have to accept it.

    But it goes beyond that today now it's information, someone is always looking over your shoulder even on the internet there looking at us and storing data on everything, it's the risk living in the world today that our parents didn't have! If those bad guys get it where in deep trouble.

    My best advice is think before you make a purchase anywhere not only on the internet.

    Pre-paid cards seems the be way to go.
     
    Status
    Not open for further replies.

    Users who are viewing this thread