Card details stolen

Jennikay

Sometimes it is totally random though. I had CC fraud when I'd paid my accommodation deposit a few days earlier - does that mean Manchester university are guilty of fraud? I don't think so...

And when I got the automated message it was also flagging up my deposit as a potential fraudulent transaction since it was so big.

Azari

Alton_Towers wrote: »

Yes to clarify the bank went through my transactions and the bank did say that it looks like the card details have been taken from Very as that was the last transaction I had made.

That's just crazy!

Why on earth would they assume your details were passed on by the last company you dealt with?

I know some criminals are pretty stupid but even the thickest must realise that it would be best to wait a while after getting details before using them.

It was also unbelievably unprofessional of the bank to make such an accusation unless they had very solid evidence.

shaun_from_Africa

does that mean Manchester university are guilty of fraud? I don't think so...

Why not?
It only takes one person to copy CC details, and this could just as likely be someone working at a uni or someone working at a garage or pub.
It doesn't have to be someone working there if your details were left for someone passing through an office to see.

I'm not implying that the fraud did originate at the university, just that you shouldn't rule it out simply because it is a university and therefore everyone there should be considered totally honest.

Azari

shaun_from_Africa wrote: »

Why not?
It only takes one person to copy CC details, and this could just as likely be someone working at a uni or someone working at a garage or pub.
It doesn't have to be someone working there if your details were left for someone passing through an office to see.

I'm not implying that the fraud did originate at the university, just that you shouldn't rule it out simply because it is a university and therefore everyone there should be considered totally honest.

Yes, but it's the whole 'It was probably the last company to register a transaction with you' line of thinking that is so absurd.

geordieracer

Alton_Towers wrote: »

Yes to clarify the bank went through my transactions and the bank did say that it looks like the card details have been taken from Very as that was the last transaction I had made. I work in IT and am well aware of the security issues and also know that the banks are able to track details via IP addresses and service providers. The bank seemed certain they knew where the details had been taken from.

I only posted it to warn people and can only go by what I was told by the bank.

If you work in IT then you know IP tracing is a pretty weak arguement as both fraudsters and the general joe sat on his computer will not have a static IP address unless requested.In fact right now im using a proxy server because i prefer browsing that way so my IP is really one routed via germany.

mr_fishbulb

Alton_Towers wrote: »

I work in IT and am well aware of the security issues and also know that the banks are able to track details via IP addresses and service providers. The bank seemed certain they knew where the details had been taken from.

Not sure I understand this bit.

Suppose the scenario is this (as I think you are describing):

1. You pay for something at Very with your card.

2. Someone at Very got hold of your card details (including the CVV security code). This is slightly odd as these details should not be stored unencrypted in their systems, but it's not unbelievable as some companies are rather lacking here.

3 . The Very employee then used your card details to attempt a transaction which your bank identified as fraudulent and confirmed with you.

Now, unless step number 3 happened from within the Very offices (i.e. using their Internet connection) AND the counterparty to the fraudulent transaction told your bank the IP address the transaction originated from, how can your bank identify Very by IP address?