Keep a close eye on your credit card statements

Status
Not open for further replies.

erinspeed

Senior Member
ECF Veteran
Verified Member
Sep 13, 2011
110
36
59
St. Louis
This just happened to us. 4 charges for $29.99 39.99 29.99 and 29.99. All these were to dating sites. I'm a happily married guy with no reason to go to those sites. My bank didn't catch them. I looked at my online statement and found these charges dated for TOMOROW. Like a post-dated electronic check!.

Scumbags.
 

jazon1

Ultra Member
ECF Veteran
Dec 16, 2012
1,662
1,075
Phoenix,AZ
i had something similar happen once,someone hacked my first paypal account that i had not even used yet and charged $500 in itunes gift cards,im assuming they just turn around and sell them on ebay to get the cash.luckily my bank blocked the charge from paypal but as it turned out paypal payed them anyways and billed me the $500 and by the time i found out about all this ist was to late for me to do anything about it.
 

xbassman

Super Member
ECF Veteran
Verified Member
Apr 1, 2012
627
342
64
Tulsa, OK. USA
This just happened to us. 4 charges for $29.99 39.99 29.99 and 29.99. All these were to dating sites. I'm a happily married guy with no reason to go to those sites. My bank didn't catch them. I looked at my online statement and found these charges dated for TOMOROW. Like a post-dated electronic check!.

Scumbags.

Same thing here as well...
2 pre-authorizations @ match.com and one @ Napster UK.
We caught it the day they appeared though.

Matter of fact I placed an order with Ave a couple of months ago.... :glare:

BTW- over the last 20 years I've had a CC compromised 4 or 5 times.
Really, as long as you avoid using Paypal or a debit card it'll never hit your bank account.
My bank has already cancelled my card and dispatched a new one.
 
Last edited:

tA71ana

Ultra Member
ECF Veteran
Verified Member
May 26, 2012
1,243
2,530
Round N Round the Mulberry Bush
I haven't noticed any funny stuff on any of my accounts yet (there's practically no money in them).
Has anyone determined if these breaches are vendor specific?
I didn't order from BWB or AVE but I have ordered from others.
I know if I see amounts like 0.01 and the like I'm about to be hacked; to see the look on the thief's face when the subsequent 1000.00 transaction is declined would be priceless :evil:
 
Last edited:

GwenB

Senior Member
ECF Veteran
Verified Member
Mar 16, 2013
222
156
Virginia Beach, Virginia
I recently had a problem as well. My bank, being the awesome bank that it is, caught the problem and never let anything pass. I ended up cancelling my card and ordering another one. Before I started vaping, I very rarely ordered anything from the internet, though I've never had any problems like that before. There were two attempts on my card that the bank caught. The first was an attempt to preauthorize a $0 purchase from Napster. The second was a $1.95 attempt from Epoch, which is a third party biller for internet companies. Upon investigation, I found that the attempt from Epoch was linked to an...adult related website. No one here at home has access to my card, so it was clear that the culprit is some sort of an identity theft attempt. The bank told me that it's common for them to first attempt to authorize very small amounts to gain access to the card. After that, they clean you out. I was just lucky that my bank of awesomeness caught it before it was approved.

Norton doesn't seem to protect as well as I thought it would. Now, I have a new card. Though, I'm scared to order anything else from the internet. I'm not sure how I'm going to fund my vaping from now on.

Now that you mention it, the attempt happened just a few days after ordering from AVE. Hopefully, AVE can get the situation all sorted out. I agree that they are a very pleasant company to do business with.

I received an email from another vendor that stated it must be viruses on our computers. Really?!
Shame too, it was my favorite Brew!
 

L7D4N

Ice Cream!
ECF Veteran
Verified Member
Nov 30, 2011
437
303
Dallas, Texas
Yea well. I do all of that and still got hit!

They don't have a vaild SSL Certificate on avejuice.com, it's a Comodo Free CA/SSL that does not appear to encrypt the Traffic, and without a legitimate SSL Handshake to encrypt the Traffic, it still allows "eavesdropping" as reported by Firefox below:

19058434.jpg
 
Last edited:

juicejunky

Vaping Master
ECF Veteran
Jan 22, 2011
3,745
2,799
gone
Happened to me on my Amex last summer. Thousands charged on Alyssa Keys concert, Olympic event, and Jet Blue airline tickets, movie cameras, etc. Amex picked up on the bad charges before I did and amazingly pretty much knew which were fraud. No sweat for me because they fedexed a new card the next day. The movie camera company called me when the charges were cancelled and the camera was to be shipped somewhere in Georgia. The info they had with the order made it clear that the thieves got my card from an internet transaction. I order from pretty much from the same vendors listed below and one I had ordered my brew the week before. If they hacked a CC processor it is difficult to pinpoint the timing of my order and the theft.

I order many things from the internet, so I can't be 100% sure it is ecig related, but I strongly suspect. I'd be very leery of using a debit card, but Amex made the ordeal pretty painless. First time getting hacked for me.

I no longer store credit card numbers on vendor websites. I even delete mine from Amazon every time I order.
 
Last edited:

Bullette the Cowdog

Ultra Member
ECF Veteran
Mar 5, 2012
1,582
1,600
Treasure Coast, FL
They don't have a vaild SSL Certificate on avejuice.com, it's a Comodo Free CA/SSL that does not appear to encrypt the Traffic, and without a legitimate SSL Handshake to encrypt the Traffic, it still allows "eavesdropping" as reported by Firefox below:

19058434.jpg
Yes & it has been marked by Norton too. Several months ago I was going to order from them & Norton flagged them. I reported it in the AVE forum here, but my comment was (in effect) criticized by posters & Norton was ridiculed there too.

I chose not to go to their website. Tho I would still be interested in their juice if they got a little more professional.
 

Plaz

Super Member
ECF Veteran
Feb 17, 2013
306
552
Churzee
They don't have a vaild SSL Certificate on avejuice.com, it's a Comodo Free CA/SSL that does not appear to encrypt the Traffic, and without a legitimate SSL Handshake to encrypt the Traffic, it still allows "eavesdropping" as reported by Firefox below:

19058434.jpg

Whoa. I'm surprised Chrome doesn't catch that and notify the user. I've never seen that from their page before.

EDIT: Actually, I'm not getting that warning with Firefox when I connect via https. Is that an extension?
 
Last edited:

Day

Senior Member
ECF Veteran
Sep 7, 2011
160
156
Raleigh, NC
Damn glad I used my practically maxed out CC that expires this month for my last AVE order. Can't believe with the amount of money these guys are transacting that some of them don't have encrypted SSL certs. Quite frankly shocking, wish I had known before I even ordered. I didn't really want to blame the vendor at first but damn.

So sorry to hear so many of you got hit. I been buying stuff left and right recently, I'm really going to rethink how I'm doing this.

Curious if those that got hit stored their CC with the vendor?
 

L7D4N

Ice Cream!
ECF Veteran
Verified Member
Nov 30, 2011
437
303
Dallas, Texas
Whoa. I'm surprised Chrome doesn't catch that and notify the user. I've never seen that from their page before.

EDIT: Actually, I'm not getting that warning with Firefox when I connect via https. Is that an extension?

Nope, no extension, I just go to https://avejuice.com and click the Globe Icon.

I reviewed all the content on the site and the majority of the code references https://avejuice.com/etc..., however when clicking "Your Basket", it always goes to the HTTP version, no matter what I do. It's possible the SSL Certificate is working, but the encryption isn't sticking throughout the site.
 

Plaz

Super Member
ECF Veteran
Feb 17, 2013
306
552
Churzee
Nope, no extension, I just go to https://avejuice.com and click the Globe Icon.

I reviewed all the content on the site and the majority of the code references https://avejuice.com/etc..., however when clicking "Your Basket", it always goes to the HTTP version, no matter what I do. It's possible the SSL Certificate is working, but the encryption isn't sticking throughout the site.

Yeah, I don't think this is the issue. I just signed on on the site, and the login page was securely encrypted. I added a juice to my cart, and went to the checkout page, and it's properly securely encrypted as well. So someone could sniff in on us browsing juices and look at our carts, but not any checkout information, as far as I can tell.

I'm no expert, but my best guess is that the problem exists upstream of the user-vendor connection. Whether it's an intercept between AVE and Authorize.net or an inside job at Authorize.net, or something else.
 

Gatillero1980

Senior Member
ECF Veteran
Jul 2, 2012
128
39
Cali, Colombia
Their page is securely encrypted, the https trick is not correct, they relay the http to SSL http (https) once you login into your account, besides, the CC form is located in their CC processor, they don't pass your CC through their servers (this is actually a standard way of doing things).

This is clearly a problem in their CC processor and NOT Ave's fault by any means.

EDIT:

BTW, i was hit on Friday by a $650 charge and i didn't order from AVE, i ordered from BWB, AvidVaper, AltSmoke and WizardLabs.
 
Last edited:
Status
Not open for further replies.

Users who are viewing this thread