Google Pay fraudulent activity

odalay

Hello,


Not sure if this is the correct forum but it relates to Google Pay and debit card fraud.



I recently discovered a fraudulent purchase from my Google Pay account and thought I would share to see if helpful to anyone and maybe someone out there has some advice?



It would appear that someone has been able to access my Google Pay UK account (which is linked to my Barclays debit card. I have never actually used Google pay, I may have installed the App briefly a few years ago and as I have a Google Play store account I'm assuming they automatically take your card details from there). The person who accessed my account added an additional delivery address and ordered a Google Pixel 4 mobile phone for about 700€. My account shows as being accessed from three locations in northern France in the past few days and the phone was posted to a Carrefour supermarket in Italy in my name. I discovered this after logging into my Barclays account and seeing the amount in my list of transactions. Barclays have immediately refunded the amount fortunately, and replaced the card. I have also contacted Google and had little feedback as yet, but they did recommend I enable 2 step verification on my account and change the password which I have done, and have now disabled my Google Pay account.



Has anyone heard of this before? Maybe this is very common? Normally any purchases require the CVV code to be entered at purchase, any suggestions as to how they would have carried out this purchase?



And any suggestions as to how I can prevent the person collecting the phone, it's in my name but being sent to supermarket in Italy? Will they just walk in with a fake ID and walk off with a free phone?



Thanks for any info you might have.

Zanderman

odalay wrote: »

......
And any suggestions as to how I can prevent the person collecting the phone, it's in my name but being sent to supermarket in Italy? Will they just walk in with a fake ID and walk off with a free phone?
...........

If you had the refund the phone is not your problem. Don't get involved.

born_again

Pretty common.

Most likely you have responded to a email that has given away your details. As clearly the compromise is your google play account.

odalay

Yeh ok thanks both for taking the time to read and reply

sausage_time

Don't reuse passwords between accounts, and set up 2 step verification on all accounts that support it.

PRAISETHESUN

sausage_time wrote: »

Don't reuse passwords between accounts, and set up 2 step verification on all accounts that support it.

I'd also recommend not saving card details on any website/payment service. It only takes a few seconds to type it in fresh when you actually want to make a purchase, and should save you the hassle of having your details getting compromised if the website/your accounts(s) get compromised.

glennevis

For a belt and braces approach, you can set up 2SV and add a google PIN as well.


https://support.google.com/pay/answer/7643912