play.com not very secure!!

loztiggy

the other day i had been buying some bargains from play.com. i had to set up an account and enter CC details. i then logged out.

I got an email the day after with more offers, went back on and logged in, ordered something else-and then i realised. It hadnt asked for my CVV code or "verified by visa" or anything, it just took me from the basket page, to the order confirmed page. Money has left my account.

now im presuming if my email gets hacked (which it seems to regularly-gmail) and they find an email from play, they could go on and say "forgot password" and gain access, and then buy whatever they like!

worse still i cant remove my details.

Is this even legal?!

custardy

loztiggy wrote: »

the other day i had been buying some bargains from play.com. i had to set up an account and enter CC details. i then logged out.

I got an email the day after with more offers, went back on and logged in, ordered something else-and then i realised. It hadnt asked for my CVV code or "verified by visa" or anything, it just took me from the basket page, to the order confirmed page. Money has left my account.

now im presuming if my email gets hacked (which it seems to regularly-gmail) and they find an email from play, they could go on and say "forgot password" and gain access, and then buy whatever they like!
well thats more of an issue,dont you think?
worse still i cant remove my details.

Is this even legal?!

so you had to put in your log in details?
play save your card details
so its up to you to ensure your email,PC and login details are secure

pcombo

loztiggy wrote: »

the other day i had been buying some bargains from play.com. i had to set up an account and enter CC details. i then logged out.

I got an email the day after with more offers, went back on and logged in, ordered something else-and then i realised. It hadnt asked for my CVV code or "verified by visa" or anything, it just took me from the basket page, to the order confirmed page. Money has left my account.

now im presuming if my email gets hacked (which it seems to regularly-gmail) and they find an email from play, they could go on and say "forgot password" and gain access, and then buy whatever they like!

worse still i cant remove my details.

Is this even legal?!

All this ranting for nothing, Why dont you contact your bank and ask them why you didn't get offered it(Maybe its not activated). It clearly shows a secure shopping image with verified by visa and mastercard.

scottishblondie

A lot of online retailers do this. Amazon has the details of several of my cards stored, I don't get asked for any more info when I order. I believe you can choose not to have your card details stored for future purposes.

AngelBadger

I used to love play.com but I'm a little concerned with them at the moment. A few weeks ago I was looking for an old bbc series on DVD and google came up with play.com, I signed in and went to the page of the DVD, there it stated that they were out of stock. There was no-where to click to buy it and it didn't state whether they would be getting any more stock in, so I looked elsewhere. The next day there was an email in my inbox from them confirming my order for the item that I was looking at. I emailed them to find out if there was an issue with their system and explaining the situation. A couple of days later I receive another email telling me that my card has expired (thankfully for me as I'd already bought it on Amazon) and that I needed to pay for the item purchased. Since then I've emailed them on a few occasions but have had no response. I refuse to fork out to phone their 0845 no so I've no idea why such a ridiculous incident happened on a supposedly secure site.

KevInChester

What sticks out for me is you saying your Gmail is hacked on a regular basis.... that shouldn't happen, unless you have keyloggers on your machine, you use a generic password, succumb to phishing or have an easily guessable secret answer.

Nilrem

KevInChester wrote: »

What sticks out for me is you saying your Gmail is hacked on a regular basis.... that shouldn't happen, unless you have keyloggers on your machine, you use a generic password, succumb to phishing or have an easily guessable secret answer.

Aye, Gmail shouldn't be any less secure than most other forms of email, if the PC(s) used to access it are virus free, and the password is reasonably secure with the "i've forgotten my login details" questions/answers being reasonably secure.

I've never had any of my emails hacked despite currently having about 10 active addresses, including 2x hotmail and a gmail with a very easy name.

Email passwords should always be at least 6-8 characters long (preferably longer), with a mix of both numbers and letters - easy ways to do them that you won't forget but will be very hard for someone to guess would be say the first letters to the lines of a song such as:
Always Look On The Bright Side Of Life + a random number = 19alotbsol79 - easy to remember (song and year). as an example.

And don't put the reset question as something someone can easily guess, something like a Pet's name, or Mothers Maiden name are fairly easy to guess. Try and use something that is a little harder

Play like many shops don't ask for VBV or Securecode when you buy stuff as a repeat shopper unless you either change the address it's going to, or change the card, or it's expensive etc as a lot of people get very annoyed about VBV and MCSC.


Also never use a "public" PC to login into your email or shopping, unless you absolutely have to and have reasonable trust in the machines - and if you do clear the browers cache and cookies and make sure the "remember password" field is unticked...(I think IE8's "in private" option may effectively do this automatically.)

Meadows

loztiggy wrote: »

the other day i had been buying some bargains from play.com. i had to set up an account and enter CC details. i then logged out. I got an email the day after with more offers, went back on and logged in, ordered something else-and then i realised. It hadnt asked for my CVV code or "verified by visa" or anything, it just took me from the basket page, to the order confirmed page. Money has left my account.now im presuming if my email gets hacked (which it seems to regularly-gmail) and they find an email from play, they could go on and say "forgot password" and gain access, and then buy whatever they like!worse still i cant remove my details. Is this even legal?!

Go through old forums on this site about Play.com going back a few years an you will see this site has had lots of fraud using logged credit card details.

custardy

Meadows wrote: »

Go through old forums on this site about Play.com going back a few years an you will see this site has had lots of fraud using logged credit card details.

"a few years ago"

so how is that valid now?

Meadows

custardy wrote: »

"a few years ago" so how is that valid now?

I still come across comments on a few sites on the Internet the last time I saw one was about a month ago.

custardy

Meadows wrote: »

I still come across comments on a few sites on the Internet the last time I saw one was about a month ago.

and you are replying to a thread where the OP says their email gets regularly hacked.
its easy to blame a site when its down to your own lack of security
ie used play for years without issue
none of my email accounts have ever been hacked either