Fraud on Credit Card

ChrisyB_2

Hiya all,

I logged into my AA Credit Card statement today and saw multiple transactions for xbox live had gone out, I phoned up Microsoft who infromed me that apparently I am the owner of that account and have been since Feb, the account has my name and address and details of two other credit cards from different addresses as well, mine being the main. I got the nice lady at Microsoft to remove my card and flag the account as fraudulant.

I then phoned up AA again who were very helpful, I got a slight ear bashing for not checking my statement soon as the first transaction had gone out in Feb, but she happily passed me onto the right team, got the card cancelled and the form for me to sign is in the post.

Now my actual question/s are;

1) Is there anyway to actually find out who has been using my card, as they have been using Xbox live, maybe a IP or anything or is it pointless and forget about it, and why only Xbox live?

2) How on earth did they get my details, including my home address? The only websites I have used it on is play.com and maybe a few petrol stations if im desperate.

3) Also i'm slightly worried as they have my home address, could anything more sinister come out of this?

Thanks

Chris

ChrisyB_2

Anyone got any info?

ElkyElky

ChrisyB wrote: »

1) Is there anyway to actually find out who has been using my card, as they have been using Xbox live, maybe a IP or anything or is it pointless and forget about it, and why only Xbox live?

2) How on earth did they get my details, including my home address? The only websites I have used it on is play.com and maybe a few petrol stations if im desperate.

3) Also i'm slightly worried as they have my home address, could anything more sinister come out of this?

Thanks

Chris

1) No. Data Protection Act prevents companies from revealing who has used your card, if they ever find out. They could try and trace the person using the IP address, but obtaining a false IP address is extremely easy these days - many criminals use a proxy IP address to prevent authorities from finding them.

2) There could be a number of ways. Scavenging through your bins for bank statements and any other letters. Any letter with your name and address on it is valuable to identity robbing criminal. It could even someone closer to home, someone you know and has recently had access to your purse/wallet or even a compromised website you've recently shopped at. Impossible to say how or where they obtained your details but what's important is that you be extra cautious in future. Any documents you bin, shred them first (or skip the shredding and just burn them like me ).

3) The thing you need to worry most about is if they decide to open accounts using your details. Keep an eye on your credit report and report any unrecognised accounts to the credit reference agency.

INT1

Most likely attack on your computer or a transaction you have done on line ever since the card was activated could have been compromised.

X Box is pretty common fraud transaction which i don't really understand why as they shut down the x box account and can even find the serial of the machine if they wanted too. Nintendo points is another common fraud transaction.

teasleym

I had a call from my bank yesterday telling me my credit card had been cloned and had tried to be used fraudulently. It hasn't been used for a while and the last time I used it was at Play.com too!
I think this is where my details had been compromised and said this to the bank and although the caller couldn't comment, his tone of voice clearly let me know that he thought that too. I will not be using Play again and have warned off all my friends and family. Fortunately, my card has been stopped and no transactions have gone through.

soul619

it probably wasnt play directly, if you googled it you most likely went via a phishing site and if you use favorites there is a known virus about that redirect them to phishing sites

teasleym

I know I didn't google it and they aren't stored in my favourites. I just typed www.play.com. Surely this wouldn't take me to a phishing site?