MBNA - How did the fraudster get my card details

born_again

brianposter said:

brianposter said:

in particular how is the random IP address converted to an appropriate destination for the response.

as previously suggested.

Think of it like this.
When a scammer spoofs a phone number, how does it connect to them?

brianposter

As far as I know, when a scammer spoofs a phone number, the message still contains the genuine originating phone number and the spoofed number has nothing to do with the message routing.

Obviously that does not work when you are dealing with an entity such as a bank which is likely to be interested in the genuine number.

HeinzVarieties

brianposter said:

As far as I know, when a scammer spoofs a phone number, the message still contains the genuine originating phone number and the spoofed number has nothing to do with the message routing.

Obviously that does not work when you are dealing with an entity such as a bank which is likely to be interested in the genuine number.

There are massive botnets that exist with compromised devices that traffic can be routed through on a whim.  Essentially a VPN for criminals.

The bank has no idea of your IP address if you route your traffic through a VPN, just like they don't if you spoof your telephone number.

denow

This happened to me a couple of years ago. Since then I freeze all my cards in the respective apps and unfreeze them just before i need to use them. Only one I don’t freeze is my day to day AMEX as that would be an inconvenience. 

A few months ago I had a notification that a card I hadn’t used for over a year had been used to make 2 payments which didn’t go through because the card was frozen.