Egg Money - Security a mockery

a&akay

My wife has been a second user on my account for only a month. All her transactions have been in local shops using her PIN ie none over the internet using the 3 digit security code. She changed her PIN to one she usually uses at a hole in the wall. We have today been warned via an Egg automated telephone message that they suspect a transaction(s) in Brighton which is more than 250 miles from us. There is therefore a very high likelihood that the PIN or security code has been used by an insider selling on details. Check your transactions!

MPH80

Sorry - why is the security a mockery?

Egg have detected a possible fraudulent transaction and alerted you ...

You don't know how someone else got hold of your info - for example - was the PIN used on the transaction ... was it an internet transaction ... could the 3 digits have been noted when it was being used in a store? It's equally possible that your card was skimmed WHEN she changed the PIN.

Could you have a key logger on your computer - you do have to enter the 3 digit code in order to see your pin?

There are lots of options before you go accusing insiders.

M.

pfpf

not really to do with fraud but.........

i have had an Egg account for ages, and today for the 1st time ever i got a phone call from egg on a security check.

they asked me to confirm 2 transactions i made recently, both to Gambling organisations.

i have never used my egg money card for gambling before so i thought this was a good sign of them being on the ball.

i am assuming if i had said that i did not make those payments they would have stopped them as they are NOT showing on my account yet.

thumbs up Egg. :T

James

a&akay wrote:

My wife has been a second user on my account for only a month. All her transactions have been in local shops using her PIN ie none over the internet using the 3 digit security code. She changed her PIN to one she usually uses at a hole in the wall. We have today been warned via an Egg automated telephone message that they suspect a transaction(s) in Brighton which is more than 250 miles from us. There is therefore a very high likelihood that the PIN or security code has been used by an insider selling on details. Check your transactions!

If you're PIN has been compromised and your card cloned you can bet the fraudulent transactions were made at an ATM.

If your card details compromised and the 3 digit code (CVV) used then your card would most likely have been used to acquire goods bought via the internet, mail order, or by phone or fax. (Note: not all companies ask for the CVV).

I would inform the Police asap.

Egg are one of a few card issuers who allow cardholders to view their PIN on the net. If you can view your PIN on-line, who else can?

""I can quote an instance where an employee of Boots was found with a card swipe machine and two BT cards with two Barclays cards' details on them.

"When the customer would hand over the card he would drop it and swipe it and then take down the pin number as the customer entered it. Chip and pin is not as safe as you might think."

Ex Fraud & Commercial Fraud Squad Copper.

Click here for full story.

a&akay

I accept all that has been said but my wife checked the ATM before she changed her PIN. She uses this machine regularly and it had not been tampered with. All her transactions were also in shops she uses regularly and she is most careful about shielding the keypad. The card was never out of her sight. As posted she has not made any internet transactions with it since it was issued. The likelihood therefore is that it is an inside job and if it it was then Egg's security is a mockery. Others will find out too if so.

James

There are so many different ways of acquiring a PIN it's frightening.
Shoulder surfing, cameras (of various sorts), false ATM keypads, doctored PIN entry devices (Shell Garage Fiasco), Hardware and Software key stroke loggers.

Card/personal details likewise, (including CVV) are easy to acquire, recent cases in the media have confirmed this.

Banks are now being held to account for recent breaches of customers personal information.

U.K. bank data breaches probed by info commissioner