SCANDORCOM ? who are they

deadthings

It's not simply a matter of generating a number! In order to debit you they will need your expiry date and your CVS number, which is the last three numbers found on the back of the card.

Without this they could not have gotten authorization.

What may have happened is your card could have been skimmed and its details copied. Someone else with a clone card could be using it to set this kind of thing up without either the firm or you knowing. It could be a perfectly valid purchase, on a skimmed and cloned card.

You must insist this is passed to the fraud department. Barclaycard have a dedicated fraud telephone number and you should have it with your statement.

Call them, and insist you did not make this purchase and want it disputed.

It will no doubt take ages but you are entitled to your money back.

Chase it up and don't give up!

The advice to state your card is missing is what a lot of people do.

D.

lyns_2

Hi thanks for all your help
I have not used my card for any ongoing payments i only use my debit card for that. i only use this card online so how could it happen if they need the 3 digit code on back?
I phoned BC again and was told not to worry that the fraud department are looking into it but they will not cancel my card i gave them the information on the cable forum site and what i had found out about scandorder.com.It seems you have to do your own investigating if you want anything done i also asked if i should email this site to find out what was happening but was told not to.
Dont know what to do now though

Reaper

zcaprd7 wrote:

If you cancel your card, are you not issued with a new card number that they will be unaware of, so they can't charge you again?

Your old card will return from the grave if a CPA demand comes through. Scary huh?

student100

The CVV2 or whatever it is called code is not necessary for all online transactions. I have shopped online at legitimate websites before that haven't needed it.

I expect it could be possible to obtain valid CC numbers complete with expiry dates and CVV2 codes by such means as phishing scams, dodgy websites, viruses/spyware on your computer, very lucky guesses, etc...


I'm sure Barclaycard must be able to treat this as fraud and stop the card; this case is different to setting up a continuous payment authority yourself.

dchurch24

It's not that difficult to generate valid CC numbers.

I used to work for a large Holiday/Insurance/you name it company (whos name you would almost certainly have heard of, so they shall remain nameless) and I had to write the CC validation software - they were too tight to buy any/use NW Streamline etc...
The 'trick' is to have the card number (and you can do this in MS Excel) in one row, and underneath (for VISA I think this was) - have 1,2,1,2,1,2,1,2 etc... then multiply the card digit by either the one or the two depending on which was in the column below it.
If the multiple was >9 then subtract 9 from it. Then sum the third row (the multiple) and if it was divisible by 10 (ie. Mod 0) then it was a valid card number.
All the scammers have to do is to 'find' a valid card - enter that number, and change the last 4 digits until the total is MOD 0 (ie no remainder) and bingo! a valid card no - and as CC's are issued with monthly start/exp dates the odds are that the number that is generated would have been generated in the same month as the 'valid find' card.
This doesn't explain the security code on the back, but I think I shouldn't put all that info in the public domain, if you catch my drift.
This makes it incredibly easy for scammers to create valid card numbers.

There is a little more to it than this, as different cards/issuers have different 1,2,1,2 'etc... (i.e. 1,3,2,1,2,1) to complete the check against.

Hope this makes sense, I've started to confuse myself.

MattLG

The CVV2 code is not needed for authorisation. It may be a mandatory field on some websites but it is still unlikely to be checked. I think this is just used as a way of checking up AFTER any fraud has occurred.

I had a problem with barclaycard fraud a few years ago and they tried this "you'll have to contact the company yourself BS". I cut up my card, sent it back to them with a letter informing them that I had contact the Banking Ombudsman and would be taking legal action if they did not cancel the charges. They wrote back with a complete apology, £25 in compensation and I also made an extra profit when the fraudulent charges (made in US dollars) were refunded to my card due to the currency fluctuations in between :-)

Don't take any crap from them, throw the book at them and they capitulate instantly. Make sure they know that you know what you're doing.

MattLG

student100

dchurch24 wrote:

It's not that difficult to generate valid CC numbers.

Yes, but there is a difference between a valid card number (i.e. one that passes check digit tests etc). and a card number that is actually in use. There will be millions of perfectly valid card numbers that are not linked to an active account - they have either never been used yet or have been used a long time ago and are now no longer in use.