Fraudulent transaction (Very.co.uk)

Beckyy

I just had a phone call from the bank while I was out walking the dog to say they had declined my transaction of £170 through very.co.uk and asking me to call the fraud helpline if I didn't recognise it. Needless to say, I didn't and spoke to someone to find that my card details had been used. Declined for the Very transaction but used on a foreign airline to pay for something smaller.

The man said he has dealt with quite a lot of fraudulent transactions from very.co.uk today, so I think they they may have been hacked? I used them once, about 3 years ago, and am wondering if my card details were saved. I've logged back in, but couldn't find anything and just ended up with an error message saying their website was down for maintenance, which seemed to tally.

Just heads up for anyone who has purchased from them. I might be barking up the wrong tree here, but if they do save card details then it's something to check out if you have an account.

thenudeone

Amongst the numerous bank phishing emails in my spam folder every day there are often ones from "very.co.uk" along these lines:

Dear Customer,
Our record shows that you have a refund slated for your account due to charges made against your account by us. We do apologize for this mistake which was caused by error from our system.
This transaction cannot be completed due to the errors present in your account information.
You are required to click on the LOGON below to fix this problem
immediately. Please note, it will take 3 working days to credit your account with the refund.

followed by a fake link.

It may be that it's possible to access stored card data once logged into a very.co.uk account, and that's where the data was stolen.

I have forwarded the emails to abuse@very.co.uk and phishing@very.co.uk but they always bounced, so it seems very.co.uk don't care if their customers are fleeced and can't be bothered to take any effort to stop the practice.

Plxply

thenudeone wrote: »

I have forwarded the emails to [EMAIL="abuse@very.co.uk"]abuse@very.co.uk[/EMAIL] and [EMAIL="phishing@very.co.uk"]phishing@very.co.uk[/EMAIL] but they always bounced, so it seems very.co.uk don't care if their customers are fleeced and can't be bothered to take any effort to stop the practice.

There's nothing they can do apart from employing SPF and DKIM on their mail servers (which is probably why it landed in your spam folder). Email is inherently insecure and it's simple to send an email to appear to come from any address. If you are very concerned I'd recommend reporting it to Phishtank and Google.

Very.co.uk_company_representative

Hi Beckyy,

Thank you for you bringing this to our attention. We do have an Account Security team who can look into any instances of orders being placed on accounts without the account holders knowledge. They can be called on 0800 015 1290 and are available from Monday to Friday 8am - 6pm and Saturday 9am - 5pm.

@thenudeone

Hi,

We do have an email address that you can send any emails to that appear to be spam messages asking for Very account details or other personal information. Please forward these messages to [EMAIL="CustomerSecurity@shopdirect.com"]CustomerSecurity@shopdirect.com[/EMAIL] and they will be investigated.

Hope this helps.

Dave
Very Network Team x

thenudeone

Plxply wrote: »

There's nothing they can do apart from employing SPF and DKIM on their mail servers (which is probably why it landed in your spam folder). Email is inherently insecure and it's simple to send an email to appear to come from any address. If you are very concerned I'd recommend reporting it to Phishtank and Google.

I understand how easy it is to spoof email and how difficult it is to stop spam being sent.

But, the least I would expect a company to do would be to identify the fake URL within the email and report it to the provider hosting the site, and the relevant registrar, and ask for it to be taken down; as well as reporting it to blacklist providers (of which google is one).

Now that very.co.uk have listed an email address, I'll forward them from now on.