Credit Card Fraud

brianposter

Is there something about Netflix that makes them particularly vulnerable to fraud ?

born_again

brianposter wrote: »

Is there something about Netflix that makes them particularly vulnerable to fraud ?

Not any more than any other company.
They are a well used company by normal people, so unless netflix comes up with other known fraud spending it is going to get passed security systems.
Have seen them register card at netflix and nothing else for a month. Then they hit the card. So they are used as a check site to see if card is still valid.
Only thing is they are very hot to check that they have the latest card details to keep taking payments. Which a lot of other companies do not do.

Ergates

brianposter wrote: »

Is there something about Netflix that makes them particularly vulnerable to fraud ?

The nature of being an online digital content provider. If you use stolen card details to register with Netflix and watch some movies* then you have the "goods" immediately. Even if the fraudulent transaction was detected and the account closed very quickly - that would still be a couple of days you could have access to the content, and once you've got it there is no way they can take it back. And in the real world it would take much longer than that. Also, there is no physical address to pass on to the authorities.

yksi

Lorian wrote: »

Change the password on your paypal account and turn on 2FA.

Change your password on your email account.

If you use outlook check for mail rules in outlook that you didn't put there. if you use o365 check for unknown mail rules in o365 webmail.

born_again wrote: »

Confused as to just what this has to do with a card compromise.

Really? Just imagine the thief has access to your email and/or your PayPal, and all the things they can get into with that.

I'd be running another scan of the PC and changing both those passwords. Create a new password using the first letter of the first ten words in your fave songs, and shove a few numbers in the middle, and a symbol. Write it on paper somewhere instead of saving it.

born_again

yksi wrote: »

Really? Just imagine the thief has access to your email and/or your PayPal, and all the things they can get into with that.

I'd be running another scan of the PC and changing both those passwords. Create a new password using the first letter of the first ten words in your fave songs, and shove a few numbers in the middle, and a symbol. Write it on paper somewhere instead of saving it.

We are talking a card compromise here. Not in anyway related to a personal computer. So changing passwords will make no difference.

A card is more likely to be compromised at a physical store where you use the card.

Personally prefer a random word out of a dictionary and number/symbol.

Always good security to regularly scan your PC. :T

brianposter

born_again wrote: »

Odds on that it was also had a transaction to Netflix when compromised 1st time.
Netflix use Visa Account Updater on a weekly basis. Gets them new card no's on stopped cards.
Thus they transfer to the new card.
So in effect the new card has not been compromised as such and card provider do not need to stop it.
All they need to do is put a block on netflix

Happens on such a regular basis that it actually part of our process when there is fraud on a card and there are processed or declined transactions to netflix.
Saves a lot of pain for customers :T

Do I understand from this that a card provider may discover that a card has been compromised, send out a new card, and then promptly provide the new card data to places where the compromised card has been used ?

Ergates

brianposter wrote: »

Do I understand from this that a card provider may discover that a card has been compromised, send out a new card, and then promptly provide the new card data to places where the compromised card has been used ?

Yes, if they're not informed that the places in question weren't provided the data by the fraudsters. How could the bank know that, for instance, the Netflix account doesn't belong to the customer?

How annoying would it be if, as a result of your card being compromised, you had to go back and manually change the card details with *all* the places it's used?

born_again

brianposter wrote: »

Do I understand from this that a card provider may discover that a card has been compromised, send out a new card, and then promptly provide the new card data to places where the compromised card has been used ?

No your bank does not pass the details over. That is down to the retailer to request from Visa or I take it Mastercard have a similar system.
Retailers pay extra for this service. And it is looked at as good customer service by them. Would you want you netflix service to be stopped because your card was stopped or expired?

We know from experiance that netflix run a update every week. Hence if we know a card has been used fraudulently there, then it is added to VAU to block them from getting the new card details.
Seems not all card providers do this.

brianposter

Ergates wrote: »

Yes, if they're not informed that the places in question weren't provided the data by the fraudsters. How could the bank know that, for instance, the Netflix account doesn't belong to the customer?

How annoying would it be if, as a result of your card being compromised, you had to go back and manually change the card details with *all* the places it's used?

However it might be sensible to inform the customer to look out for problems with the new card rather than simply say "We have sent you a new card for your security."

brianposter

Ergates wrote: »

The nature of being an online digital content provider. If you use stolen card details to register with Netflix and watch some movies* then you have the "goods" immediately. Even if the fraudulent transaction was detected and the account closed very quickly - that would still be a couple of days you could have access to the content, and once you've got it there is no way they can take it back. And in the real world it would take much longer than that. Also, there is no physical address to pass on to the authorities.

A quick attempt to report fraud to Netflix indicates that their fraud reporting is actually pretty inadequate, at least internationally. It is not possible to get through to the correct country website.