Tesco Clubcard fraud - online vouchers stolen

CollisCustos

We have just tried to spend our Clubcard vouchers, but find that £67 of them have 'been spent' according to our clubcard account page. We have not as, like others, we were saving them to use in the Clubcard Boost offer. Have contacted Tesco and await a rely. Have also reported the matter to Action Fraud.

Boohoo

I have posted in this thread before about my missing vouchers.
Well I went shopping yesterday and hen I got home I was checking my receipt and noticed that I had 10,300 points which was a new one on me.
Today I checked my clubcard account and in April and May £172 taken which was all I had. On looking again I noticed that the points were refunded on 21/7/14.
I called Tesco and the man I spoke to said as the were used in Tesco Boost he passed me over to them. A lady asked what the issue was and I told her and she said it was likely that my EMAIL account was the reason I was hacked and not Tesco.
I asked why some of the vouchers were refunded without me knowing or being told and she said that it was not her department. She kept saying me email account(Outlook) was the problem as once they know your email address they can get into Tesco clubcard and I said they need the password but she no they don't.
I have all the vouchers infront of me and the she said that 10.000 points will be usable in November and the rest I can use now but I asked which vouchers were the ones I can use and she said I don't know.
I got the impression that she was a lady working from her home as there was no other voices and when on hold no music.
I will now have to wait till Novembers statement to see what of the £172 paper vouchers I have I can use and not look stupid when I try to use them instore.

Missye

And still no reimbursement of my vouchers.

Another email fired off asking for some deals to be sent instead of being asked to wait months for their addition to the next lot of mailings (which they don't appear)

watch this space...:mad:

cbeaze1

I've just come off the phone after reporting, for a second time, the fraudulent use of my vouchers. I had googled the story and found that Tesco knew about the problem at least before February 2013. I was after some compensation because of the fact that I had not been told of the problem and had lost £47.50 in vouchers which meant i missed being able to continue a magazine subscription.I was told that my email password needed to be changed - it seems the call centre people don't understand how their security system works and think that, because one logs on to the Tesco system using one's email id, the password for the email id is the same as the one for the Tesco system.

MARTHA433

Got letter last week from Tesco to phone them ref 'recent activity on my Clubcard Account'. Someone had taken £100 of points, but Tesco will be giving them back to us - so it is still happening - I can't believe Tesco knew about this for months/years ? Guy on phone said 'someone' had got hold of a list of email addresses, but I've now had a few attempted breaches on various accounts [eg Paypal], so wonder how far this will go.

GreatBeyond

MARTHA433 wrote: »

Got letter last week from Tesco to phone them ref 'recent activity on my Clubcard Account'. Someone had taken £100 of points, but Tesco will be giving them back to us - so it is still happening - I can't believe Tesco knew about this for months/years ? Guy on phone said 'someone' had got hold of a list of email addresses, but I've now had a few attempted breaches on various accounts [eg Paypal], so wonder how far this will go.

That sounds to me like someone has gotten access to your emails and are trying to access everything that you have there, have you changed the password of your email address?

I work for a company and and scammers constantly try and access customers accounts. We know all about it but there is usually nothing we can do until the account has been hacked as to gain access to the account the scammer somehow has done it through the side of the customer rather than a flaw on the company side.

It's just not feasible to send out email warnings every time an account gets taken over unfortunately.

hjd

GreatBeyond wrote: »

That sounds to me like someone has gotten access to your emails and are trying to access everything that you have there, have you changed the password of your email address?

It's nothing to do with emails/other accounts as in no case are any other accounts targeted, only the Tesco clubcard.
Also, they are targeting those who have a decent size balance in their Tesco accounts, ignoring those with only small amounts.
You can use totally different logins for Tesco from any other accounts and they will still get hacked.

sheramber

hjd wrote: »

It's nothing to do with emails/other accounts as in no case are any other accounts targeted, only the Tesco clubcard.
Also, they are targeting those who have a decent size balance in their Tesco accounts, ignoring those with only small amounts.
You can use totally different logins for Tesco from any other accounts and they will still get hacked.

However MARTH433 states

but I've now had a few attempted breaches on various accounts [eg Paypal],

so it is more than her Tesco clubcard account.

GreatBeyond

hjd wrote: »

It's nothing to do with emails/other accounts as in no case are any other accounts targeted, only the Tesco clubcard.
Also, they are targeting those who have a decent size balance in their Tesco accounts, ignoring those with only small amounts.
You can use totally different logins for Tesco from any other accounts and they will still get hacked.

As above, the poster has actually stated that they have been targeted on various accounts.

This is actually one of the main issues I have found in trying to help people with this sort of thing. No one likes to have to say actually the security measures I put in place were not good enough and will look to pass the blame first. I was dealing with a complaint once where someone had accessed a customers account, they were going to go to watchdog and all the rest of it because I wouldn't give compensation.

The next time I spoke another account of theirs had been compromised, this lead to wanting more compensation from us as it must have been our breach in security which allowed access to their other accounts (totally separate companies).

It took 2 weeks of phone calls to get them to realise they had to change all of their passwords.

It is much more likely that any breach to the accounts has come from someone gaining access to your email/password combo than it is that there has been a breach on Tescos side and customers information has been stolen from their systems.

I know that this isn't what most people want to hear but you would be better asking Tesco how to re-secure your account than looking to blame them or get compensation.

hjd

GreatBeyond wrote: »

As above, the poster has actually stated that they have been targeted on various accounts.

This is actually one of the main issues I have found in trying to help people with this sort of thing. No one likes to have to say actually the security measures I put in place were not good enough and will look to pass the blame first. I was dealing with a complaint once where someone had accessed a customers account, they were going to go to watchdog and all the rest of it because I wouldn't give compensation.

The next time I spoke another account of theirs had been compromised, this lead to wanting more compensation from us as it must have been our breach in security which allowed access to their other accounts (totally separate companies).

It took 2 weeks of phone calls to get them to realise they had to change all of their passwords.

It is much more likely that any breach to the accounts has come from someone gaining access to your email/password combo than it is that there has been a breach on Tescos side and customers information has been stolen from their systems.

I know that this isn't what most people want to hear but you would be better asking Tesco how to re-secure your account than looking to blame them or get compensation.

Have you actually read through this thread and seen peoples' stories?
I personally have had my account hacked 3 times. After each time I changed all my log in details to a level of security in excess of that requested by Tesco, and it still happened again. My log in details are only used for Tesco, not anywhere else.
I have never been hacked/had my information compromised anywhere else.
The people doing this know exactly what they are doing; as soon as the quarterly statements are issued and more points/vouchers are available (and stolen ones reinstated) then they go in again and steal the new lot.
Initially Tesco accused me of lying and said I or one of my family must have spent the vouchers. Once I started emailing the ceo I finally was believed. The next 2 times Tesco just emailed me to say there has been a problem with your account and your vouchers have been cancelled and will be re-issued. They know all about the problem but are just resigned to it.

Unfortunately I can't find anything I want to get via Clubcard to use up my vouchers!