Card fraud using Verified by Visa details

Pixie_Cosmo

Hello,
Not sure if this is a warning to others, or if it's happened to anyone else?
I noticed fraudulent activity on my CC so obvs contacted the fraud line. They did say that two large fraudulent transactions had been made, but the fraudsters had used my verified by visa details. I have no idea how someone could find my credit card details and VbV password out but obviously they had somehow! I have virus protection and safe browser protection on my devices. I also don't use 'free wifi' on trains or wherevever for financial transactions. All I can think of was my details were stolen when I signed up to a new train ticket website, or I when I bought something online before Christmas. My credit card company could have refused to refund me the fraud as the payments looked like I had authorised them with VbV. They can check where the payments were made and thankfully no-where near where I live, and I can prove I wasn't there at the time if needed.
Has anyone else had this problem before? Or thoughts on how my details had been aquired?
Thanks :-)

born_again

Card fraud where VbV has been used is pretty common. In fact it is a pretty pointless system.

When it was brought in we were told that it linked your device (PC, laptop, phone. Each of which has its own unique id). Only to find out through the amount of fraud. That it is actually a cookie based system. As we all know cookies can be deleted.
This came out when one of our staff rang up to check the VbV details (they did not believe what we were told) and they had used the same device 4 times using different browsers and connections. Turns out the device had 4 different id's.
So everything we were told about the system was rubbish. No one at Visa will confirm just how it works.
We are still trying to get to the bottom of the issue. As no matter how high we go, no one seems to be able to tell us.

[Deleted User]

Yes, others had had their card fraudulently used.

There's a whole range of ways as to how your data could have been leaked. All you can do is take sensible precautions with technology, friends and retailers.

Retired_Mortgage_Adviser

Well, unfortunately, these measures are often less secure than we assume they might be!

See below for an example of a loophole from a few years ago which was being exploited for fraud. Doubtless more still remain.

https://krebsonsecurity.com/2011/12/loopholes-in-verified-by-visa-securecode/

Pixie_Cosmo

Thank you for the link RMA, wow, that's a worrying thing. Seems like it's a massively flawed system :-(
zx81 & born again, thanks for confirming it's not just me. I'll review what I can do to be more cyber secure. I guess my cc company know it's a problem otherwise they would have been more problematic about refunding me!

2e0arr

did they appear on your statement ? paper/online ?

born_again

2e0arr wrote: »

did they appear on your statement ? paper/online ?

Does that make any difference?

Fact is OP noticed and has been dealt with.

Pixie_Cosmo

Yes, the fraudulent stuff appeared on my online statement and I rang them immediately to query. I did wonder why my cc company hadn't queried them but as it appears the VbV was ok, they didn't. Looks like it will all get sorted for me, but worth warning people that VbV can be 'hacked'.

2e0arr

Pixie_Cosmo wrote: »

Yes, the fraudulent stuff appeared on my online statement and I rang them immediately to query. I did wonder why my cc company hadn't queried them but as it appears the VbV was ok, they didn't. Looks like it will all get sorted for me, but worth warning people that VbV can be 'hacked'.

What was bought and who from please ?

Pixie_Cosmo

Had an email from one of the new sites used before Christmas saying they've had problems with fraud. So guess that's where my details were stolen from. Also, using VbV with my new credit card - I wasn't asked to put the password in, it went straight through to approved. Grr.