Tesco Clubcard fraud - online vouchers stolen

camis

Had my vouchers stolen yesterday Received an email from Tesco.com at lunchtime yesterday saying my email address had been changed but only saw this when I got home. Phoned straightaway - they changed email address back and reset password and advised me to ring Clubcard, when I then found out over £200 of vouchers had been used. To be fair, they did say straightaway that they would refund them in my next statement, but it all seems a bit too easy for fraudsters to print vouchers and off they go. At one time when redeeming, you had to input all the Clubcard voucher numbers - now you can just go online and print anything you can find! The name on the account was even changed without seeming to cause any issue. They have said they are investigating, but I won't hold my breath.

Oh, and for those with issues setting accounts back up, when I spoke to them again this morning as I was unable to reset my password, they did say there were issues but when they re-issued a password reset it worked.

camis

Hmm, although on a further look, although my details for groceries have changed, the direct details are still showing as the fraudulent ones - Tesco are trying to work out why! On the plus side, it means I have the address of the fraudsters as they foolishly ordered goods for home delivery!

Cyberchick_2

Hi All,
I was aware of the Tesco Clubcard vouchers problem earlier in the year and dutifully checked my account and all was well. Today 25/09/2013, however, my vouchers had all gone! Checked the online clubcard vouchers statement and apparently they'd been used on 7/9/2013. Not by me!!!! Immediately tried to change my password for my Tesco account only the website said this service was temporarily unavailable. So, phoned the Clubcard people first and they were very helpful. Apparently my vouchers had been used at a Cineworld cinema on tickets and drinks and popcorn!!!! No Cineworld cinemas anywhere near where I live!! They said they will refund the vouchers back to my account. I told them that I needed to change the password so they said I should phone their technical helpline. Before I did this I checked my personal details stored under the 'my account' section and there was an unknown email address registered under my account. I then phoned the technical helpline and they said that I would have to have my Tesco.com account deleted and then re-register in ten minutes time. They also de-registered my clubcard number from the old account, too. This is what they did and I have re-registered and tied up my clubcard number with my new account. I have also tried the 'forgotten my password' link and can confirm that they no longer send your password to you but a link to reset the password instead. I did say to Tesco that it was obvious that this means their servers were obviously hacked into and wondered what Tesco would do about that, they wouldn't agree with me that that had happened and just apologised.

sylwright

I went into my Tesco account earlier to check on an order I'd made with Tesco Direct. Thought I would check my clubcard vouchers whilst I was logged in, only to find they have been spent in Nottingham (I'm near Manchester) on the 14th September.

I've posted a message on the Tesco Facebook page and will try and get it sorted tomorrow.

Like all the other posters, none of my other accounts have been hacked so this is obviously a problem coming from Tesco.

I will update on here once I have some progress

Ploys

I had a similar experience last week. I always use my vouchers for clubcard rewards, so when I logged in to find the balance was £1 and the vouchers had all been spent in 'litherland pfs', 'northwich pfs' and 'Warrington extra', I was somewhat surprised.

It was extremely 'coincidental' that in the same week I was applying for a mortgage with Tesco Bank, and the address I had to send the paperwork to was in Warrington. Up until last week, I'd never had any issues.

Tesco assure me that there is no issue with their website or security, although they did tell me that they have set up a dedicated fraud department to deal with this as it happens so regularly. Seems a little surprising given the number of posts on here that they haven't done something a little more fundamental to sort the security out - they must be losing a lot of money if they are reimbursing everyone who asks, without question... Although they haven't actually reimbursed me just yet. I'm thinking of writing to the CEO email address.

None of the other accounts linked to the email address have had any issues at all, so it's got to be a Tesco issue...

On the 'plus' side, someone has been spending large amounts in Essex and building my points up this week, but Tesco say that's to my advantage, which I guess is true...

moto16

Hello,

Newbie here prompted to join as we have had our vouchers stolen over the last month.

We were blissfully unaware as they had been spending them "in store" since 13th August, but then I got an email last Wednesday thanking me for changing my email address!!!!!!!!!! The thieves had spent the remaining vouchers on email rewards and so needed their own email address>

We are now £114's worth of vouchers down (they cleaned us out), and are waiting for Tesco's fraud team to reimburse us.

Tesco obviously have a VERY LARGE hole in their on-line security systems, (despite repeated warnings from industry experts reportedly).

Why don't they get this problem by the scruff of the neck.............is it possible that it is an "insider" job and they don't want to admit it?

heatherks

Its good that they are finally taking heed and alerting the clubcard account holder that their email had been been changed something that should have alerted us in the first place...but shocked that the fraudsters have went a step further and actually getting the goods / rewards sent to there own address / email

no1catman

heatherks wrote: »

Its good that they are finally taking heed and alerting the clubcard account holder that their email had been been changed something that should have alerted us in the first place...but shocked that the fraudsters have went a step further and actually getting the goods / rewards sent to there own address / email

Actually, it seems they are becoming over confident. On some occasions, they don't realise a 'virtual CC' linked to their email address is leaving a 'paper-trail'. But, where they change the details in MCA - it makes it more obvious - who they are!
If you can see it 'screenshot' it before you change anything.

peachyprice

no1catman wrote: »

Actually, it seems they are becoming over confident. On some occasions, they don't realise a 'virtual CC' linked to their email address is leaving a 'paper-trail'. But, where they change the details in MCA - it makes it more obvious - who they are!
If you can see it 'screenshot' it before you change anything.

And yet Tesco are still doing nothing to stop them.

ktk

Just a quick update, still unable to register my new Clubcard number or set up a new account. With so much at stake (£550 vouchers = nearly £2000 worth) I am not impressed.