Thief ordered a takeaway using my current account details, card kept in a safe since it was issued.

eskbanker

coffeehound said:

Is the upshot here that the bank's data has been compromised?

If fraudsters really did manage to get into bank systems, I strongly suspect that they'd find more productive uses of that data than spending £37 at Deliveroo....

robatwork

coffeehound said:

Is the upshot here that the bank's data has been compromised?

It's possible, not that any bank will ever admit it, that someone working for the bank has provided your details to some nefarious person.

I'm sure this happens a lot more than ever gets publicised - if it has indeed ever been publicised. Would call for too much openness. 

born_again

coffeehound said:

Is the upshot here that the bank's data has been compromised?

So someone hacks a bank and just takes card no's? Not very bright are they....

Even if a rogue employee did this, they would soon get caught out by the checking of account access. 

keiran

Twice in recent weeks it's happened to me.

Firstly with Capitalone credit card.
There were 3 tranx for about £25, £30 and £85 pounds to Justeat in one evening. (but not from my justeat account)
The Capitalone fraud algorithms hadn't picked it up, but I noticed the next day when the amounts were in "pending"
I alerted them, and they quickly blocked the card, I got a new one in 2 days, and they refunded the amounts 

Secondly, with an Amex credit card.
There was a single tranx to an amazon marketplace seller for £15 (but not from my amazon acc)
Upon alerting Amex, they, too, quickly blocked the card , refunded, and I got a new one in 2 days.

I'm aware of security issues and follow all good practice and so cannot work out what happened.
I did, however, have these cards "pre-populated" on my chrome browser, and I can only conclude that could have been the source

Of course, there's no pre-populated details on the browser now

colsten

keiran said:

Of course, there's no pre-populated details on the browser now

But you can only use those with the CVV, which you have to type in every time you want to use the card. So if the browser was the source, you might have a keylogger on your PC. Have you scanned for Malware and viruses?

keiran

colsten said:

keiran said:

Of course, there's no pre-populated details on the browser now

But you can only use those with the CVV, which you have to type in every time you want to use the card. So if the browser was the source, you might have a keylogger on your PC. Have you scanned for Malware and viruses?

I'm not a techie, but I do have an iMac, and I imagine/hope that Apple is doing all this in the background...?

Armorica

You should scan for malware and viruses....
To be fair, not sure that's the most likely route. The CVV is printed on the card - so if you've used in shops / let card out of your sight - it's possible the details have been captured that way. Or if you've ever provided (hopefully not) via email for example.
Your case isn't the same puzzle though - you've been actively using your card. The OP hasn't. 

colsten

keiran said:

colsten said:

keiran said:

Of course, there's no pre-populated details on the browser now

But you can only use those with the CVV, which you have to type in every time you want to use the card. So if the browser was the source, you might have a keylogger on your PC. Have you scanned for Malware and viruses?

I'm not a techie, but I do have an iMac, and I imagine/hope that Apple is doing all this in the background...?

I am not a techie either, and no Mac expert. Your iMac is probably a lot less susceptible to Malware and stuff - -  but not entirely immune. I think it would be worth your while to investigate further as you think the fraudsters might have got your card details from your browser activities.

Here's an example of an article about malware on Macs - I am sure there are some others.
https://www.macworld.co.uk/how-to/remove-mac-virus-3594625/

Yorkshire_Pud

During my searching for facts it’s surprising how many just eat and deliveroo fraud orders are made! Alan Davies the Jonathan Creek actor was scammed about a week ago firstly the Royal Mail pay £2.99 type delivery scam where he gave his card details to pay the ‘fee’ and then a further scam on the back of the first scam where an order to just eat was made for circa £30. Story in the express. 

Presumably the fraudsters are in the UK if they are noshing the profits must be hungry work.
So if the Royal Mail scam is a gateway to further fraud because the cvs number was given to a fraudster they are then set up for scams of any amount the account allows. Lower amounts first then scale up if they get away with it. Hence buying food which they don’t want to pay for whilst having other card frauds on the go. But in the UK?
In my own case the CVV number has never been asked for because I haven’t bought ANYTHING, the card locked away, no details  saved on any purchasing site like eBay, PayPal etc. 

So Lloyds were on the fraud of my card within two minutes of the transaction as the text told me the time of transaction. What triggered it?! And rather than the usual cliche of ‘foreigner’ scam centres these seem to be UK based crooks who exist on deliveroo and just eat lunches whilst going about their ‘activities’.
So the Royal Mail and deliveroo scams are just the graded springboard to fraud of higher amounts, hence saying why do they bother with a deliveroo fraud of £35 is failing to see the sequence of how the scammers operate. £2.99, £35, £empty your account.

Still nonplussed how I got defrauded and how Lloyds were on it within two minutes, their systems know it was dodgy.

born_again

keiran said:

Twice in recent weeks it's happened to me.

Firstly with Capitalone credit card.
There were 3 tranx for about £25, £30 and £85 pounds to Justeat in one evening. (but not from my justeat account)
The Capitalone fraud algorithms hadn't picked it up, but I noticed the next day when the amounts were in "pending"
I alerted them, and they quickly blocked the card, I got a new one in 2 days, and they refunded the amounts 

Secondly, with an Amex credit card.
There was a single tranx to an amazon marketplace seller for £15 (but not from my amazon acc)
Upon alerting Amex, they, too, quickly blocked the card , refunded, and I got a new one in 2 days.

I'm aware of security issues and follow all good practice and so cannot work out what happened.
I did, however, have these cards "pre-populated" on my chrome browser, and I can only conclude that could have been the source

Of course, there's no pre-populated details on the browser now

And think.... Who do you give your card details too? Yep every time you shop, either online in in store the retailer has your 16 digit (15 for amex) card no & exp on their rill roll....

Unless someone has access to your computer and ordering it is very unlikely that the source is the browser.