Debit Card Fraud

p00hsticks

RG2015 said:

born_again said:

Qyburn said:

I can understand the general view that it must have been something that we did to cause this, but I don't have a clue what that could have been. If I knew then at least I could make sure we don't do it again.

Believe me the vast majority of fraud has nothing to do with the person using the card. It is simply details being compromised at some point.
If as you say, it has never been used, then that only leaves brut force attack. Where fraudster have a known working number than keep targeting other card numbers from the working card number.
End of the day. nothing you can do.

Just Amazon Prime is not something that has any benefit to a fraudster. Unless it is just a test on the card.

Just forget about it & get on with life as normal. 👍

It also appears to me that Amazon is culpable for not having better security measures such as cvv, name and address validation.

As I said in your other thread, that's a marketing decision by Amazon.

Not checking the CVV pushes the liability for fraudulent transactions from the card issuer to the retailer, as does sending items ordered online to destinations other than the billing address of the card.

But retailers aren't allowed to store the CVV, and not asking for it means that customers can save debit or credit card details with Amazon once and from then on simply pay for items with one click without having to get their cards out (or even have them with them). Amazon have obviously decided that the extra spur of the moment impulse buys that this ability generates financially outweigh the impact of fraudulent transactions.

k_man

p00hsticks said:

RG2015 said:

born_again said:

Qyburn said:

I can understand the general view that it must have been something that we did to cause this, but I don't have a clue what that could have been. If I knew then at least I could make sure we don't do it again.

Believe me the vast majority of fraud has nothing to do with the person using the card. It is simply details being compromised at some point.
If as you say, it has never been used, then that only leaves brut force attack. Where fraudster have a known working number than keep targeting other card numbers from the working card number.
End of the day. nothing you can do.

Just Amazon Prime is not something that has any benefit to a fraudster. Unless it is just a test on the card.

Just forget about it & get on with life as normal. 👍

It also appears to me that Amazon is culpable for not having better security measures such as cvv, name and address validation.

As I said in your other thread, that's a marketing decision by Amazon.

Not checking the CVV pushes the liability for fraudulent transactions from the card issuer to the retailer, as does sending items ordered online to destinations other than the billing address of the card.

But retailers aren't allowed to store the CVV, and not asking for it means that customers can save debit or credit card details with Amazon once and from then on simply pay for items with one click without having to get their cards out (or even have them with them). Amazon have obviously decided that the extra spur of the moment impulse buys that this ability generates financially outweigh the impact of fraudulent transactions.

Amazon could still ask for the CVV the first time the card is used, which would eliminate this issue, and cause minimal friction to users.
This would have no impact on future purchases, as the card has already been validated.

I can't see a good reason for not checking for billing address or CVV at least once

Qyburn

born_again said:

Just Amazon Prime is not something that has any benefit to a fraudster.

The other fraudulent transactions was buying tickets for a Dundee United match.  Whether that has any benefit to the fraudster is a another question.

More seriously, I've never used Amazon Prime, but isn't it some sort of subscription TV service among other things.  So wouldn't they be able to use that?

born_again

Qyburn said:

born_again said:

Just Amazon Prime is not something that has any benefit to a fraudster.

The other fraudulent transactions was buying tickets for a Dundee United match.  Whether that has any benefit to the fraudster is a another question.

More seriously, I've never used Amazon Prime, but isn't it some sort of subscription TV service among other things.  So wouldn't they be able to use that?

Buying the tickets would have something of a return. Prime, while yes they could watch TV, listen to music or get free delivery. It is one of the products that has no resale value. Which is what most fraudster are looking for.
Was it the annual or monthly charge?

Qyburn

The Prime subscription was a series of monthly charges.  Can't remember off the top of my head how many before we noticed. Which is a lapse on our part, and I guess it's the danger of having these bank accounts opened when there are special offers to be had and not for normal regular use.

born_again

Qyburn said:

The Prime subscription was a series of monthly charges.  Can't remember off the top of my head how many before we noticed. Which is a lapse on our part, and I guess it's the danger of having these bank accounts opened when there are special offers to be had and not for normal regular use.

Happens all the time. Dormant or unused accounts are good targets for fraudsters, as they tend not to be checked that often, especially if opting for online statements. Which given they do not get used tend not to be checked.

Best bet if opening a account purely for switch payout. Is to block card in app or online. That way it can not be used at all. 

Main thing, is it is sorted. But check the next statement or 2 as prime subscriptions & others can be transferred to new card by account updater that both Visa & Mastercard have. Which allows retailer to request new card details👍 

phillw

RG2015 said:
Yes I have opened a bank account, but there is nothing connecting the account number and sort code with the debit card number.

 
RBS don't even put the bank account number on the debit card.

Amazon don't want bank account and sort codes, just the debit card number.

Potentially it could have been read using contactless. Maybe it's someone from royal mail?