Curve card fraud

rachelism26

Hello,

I've been victim of someone using my details on my curve card to pay for Uber abroad.   Curve changed the card and it happened again.  They then mentioned that my billing postcode had been used and to take it up with Uber.  Trouble is, I have no Uber account and have never used them.    This was also used against another Estonian taxi provider, name escapes me.

This tells me there appears to be a vulnerability being exploited in Curve's software.    I also noted Uber has a form to report such fraudulent transactions with no mention of having an account with Uber, which also points to a fraud marriage made in heaven and maybe weaknesses being exploited in both

I wondered if this was more commonplace than just me, and what were people's experiences.

I've resolved these issues from a financial point of view, so not seeking resolution here, but wanted to understand if there is a common issue from virtual cards and  their payment systems

born_again

Curve should be stopping & replacing your card & Refunding you.

Uber fraud is very common. All they need is your card details to set up their account.

The issue here is that Uber are requesting the new card details via Visa Account Updater or mastercards version. So curve need to cancel this at their end.

It's either that or someone known to you or retailer you use (often local store) is passing the details on.

If they do not refund you, then raise a complaint. Given you can prove you are in the UK & not at the location where fraud is taking place.

rachelism26

Thank you for clarifying the technology behind this.  This is what I was intrigued about.

The fact that Uber has a web form dedicated to it gave me a clue this is common.

I will raise a complaint as a matter of principle, but have been refunded after moaning louder

dunstonh

I know this is a 2022 thread but I have just gone through the same.

5 transactions buying flights via my curve card that were not me.   Curve's initial response is that my postcode had been used and to take it up with the retailer as my account with them may have been compromised.  And like @rachelism26 I have no accounts with the retailers.

None of the 5 transactions asked for authorisation via the App or OTP and three were made in different countries (or at least the websites they were bought from are based in three different places.

It is a worrying time when you have money taken out of your account fraudulently only to find that you cannot speak to an individual to report it and have to use the Curve website and then you appear to get a copy-and-paste reply.   

[Deleted User]

dunstonh said:

I know this is a 2022 thread but I have just gone through the same.

5 transactions buying flights via my curve card that were not me.   Curve's initial response is that my postcode had been used and to take it up with the retailer as my account with them may have been compromised.  And like @rachelism26 I have no accounts with the retailers.

None of the 5 transactions asked for authorisation via the App or OTP and three were made in different countries (or at least the websites they were bought from are based in three different places.

It is a worrying time when you have money taken out of your account fraudulently only to find that you cannot speak to an individual to report it and have to use the Curve website and then you appear to get a copy-and-paste reply.   

It's not uncommon in the fintech world not to have telephone support. If this is important to you, a little more digging at the point of application might be warranted.

Sounds like your card & personal details have been compromised if they're able to quote them on their transactions.

I tried Curve but closed it as Google Wallet and PayPal took it's place for me.

dunstonh

Sounds like your card & personal details have been compromised if they're able to quote them on their transactions.

I suspect it is an online retailer who has had a staff member pinch details.  

It's not uncommon in the fintech world not to have telephone support. If this is important to you, a little more digging at the point of application might be warranted.Lack of telephone support is not a major issue for most support things.  However, when it comes to fraud, you would expect something better.

They are also refusing to refund me at the moment and sending me on a wide goose chase with the merchants involved.  All of which are overseas.