Tesco Clubcard fraud - online vouchers stolen

kev_hewitt

kev_hewitt wrote: »

Unfortunately i've had £278 that has been spent, it was all spent on the 3rd, 4th and 5th Dec nearly 170 miles away from where we live.
Have emailed Tesco so fingers crossed!
I have never used clubcard vouchers in store so it will be fairly easy to pick it up as fraudulent activity.
Annoyingly i'd last logged in to use some vouchers at the end of Nov and all was ok so it happened in the space of a couple of days after that.
It looks like most people are getting their value reinstated so i'm hopeful.
Regards suggestions of phishing, I work in IT, use different passwords for all manor of different secure logons so I am not easily caught but i'm concerned that I had a busy year last year and missed the news reports about this but Tesco could have emailed all customers to inform them?

Any suggestions about things I should do please let me know.

Thanks

I should add, that the hardest thing is it's such a waste of £278 when they are worth 3 or 4 times that on deals!
Atleast my email, password and address details hadn't been changed which I know has happened to some

sal

well, after lengthy conversations with tesco in november i was promised that my stolen vouchers would be reinstated on my account in february.

my february statement has arrived and nothing done.

getting nowhere with phone calls, it's like starting all over again, they know nothing about it.

waiting for them to call me back.

i rarely go to tesco nowadays, on principle, i shall go even less now.

kev_hewitt

Watchdog would surely be interested in this 1 year on from a Tesco first becoming aware?

Markrjohns

I just found that almost £80 of vouchers were spent on 23 Dec 2013. Checked my balance last night when I got my latest statement. £20 checked again this morning £10. Have now changed password and email login on the Tesco clubcard site. Tesco clubcard have promised to put the value of the vouchers back on my account and it will be available on my next statement in May. Come on Tescos. Get a grip and stop this now.

Dib

I was alerted to a possible hack of my account when my email account wasn't recognised. Once I had phoned Tesco and had my account re-set, I logged back on to see £60 worth of vouchers had been used back in November. When I rang back, it seems that they had been used for the Tesco Boost on phones one Sunday evening at 11.10pm and my email address had been altered, hence me not being able to access my account. I have been told that an investigation will be made and my account re-credited in May. The moral in the story must be to check accounts regularly. How many people are there out there who are blissfully unaware that their Tesco Clubcard accounts have been hacked?

Taadaa

Not over e mail but a number of years ago I called Tesco because we hadn't had any vouchers in the post for a while.

Turns out someone called Mrs Patel had spent them. How the operator knew that I don't know, but she seemed quite shocked that someone had nicked our vouchers.

kev_hewitt

Ok, so this is now funny beyond belief!

I have been emailed by Tesco to say they will be crediting all vouchers back in 48 hours - great news, well done Tesco.

So I logon to my account with my new password that I changed 2 days ago when I found out about this, just to be safe and the vouchers that were on my account yesterday, as I was on there, are now being spent in Plymouth!! Some 200 miles from where I live!

Surely this must point to a inside job?!!

This could be fun to see how this plays out.......

hjd

I first had about £300 worth of vouchers stolen a year ago. Took a long time for Tesco to accept this and stop calling me a liar.
I have been checking my account regularly since then - but not regularly enough!
Today I found out that all my re-issued vouchers have been spent again - on Tesco Direct. Tesco had picked this up, cancelled the order - and are again re-issuing the points as vouchers with the Feb statement, which is on its way.
The CS people read from the usual script about changing passwords etc.
I did get to speak to someone in the fraud dept and she said change your password to something containing * or & or similar as the people doing this just use software to try all letter and number combinations. So I try to follow her advice - but the system will only accept letters or numbers, not any other characters!
I really want to spend the vouchers, but just can't find anything suitable which I want to do/have - surely that can't be just me!

The email address on my account had been changed to kylewilliams123@hotmail.com - just thought I'd publish that detail...
The first time it happened my email address had not been changed at all.

peachyprice

hjd wrote: »

the people doing this just use software to try all letter and number combinations.

I don't believe for one minute that it's something as simple as that otherwise it wouldn't be only Tesco Clubcard vouchers, we would have 30+ page threads about Avios, Nectar, Boots Advantage cards etc. It's either an inside job they don't know how to stop or a serious flaw in their security.

hjd

Thank you for your input, but I think most people who have fallen victim to this would take issue with some of your comments.

If you read back, you will see that some victims work in IT and have different passwords etc for each account.

In addition, I know I have never clicked on a phishing email and I am sure I am not alone. I don't have a smartphone and don't use apps, and I can't remember the last time I installed new software. I don't use Facebook or Twitter either.

The evidence all points to an inside job. Customers with larger balances are being targeted, often just after the latest vouchers have been issued. Someone who works in IT is quite capable of covering their traces online and thus leaving no audit trail.

The Tesco Clubcard website is anything but secure, even with newer measures like requiring you to add details from your Clubcard number when you log in.
The only improvement has been that you are not now called a liar when you ring in to report this, but that is a testament to the sheer volume of fraud which has taken place on Tesco Clubcard.

It's interesting to know that some people have been prosecuted - would be nice to have more details/publicity on that!