My Santander debit card was cloned and an attempt was made by the scammer to purchase goods on line

MikeJXE

SiliconChip said:

MikeJXE said:

My granddaughter had her card cloned, someone payed 4 x £5 to a bookmaker in Gibraltar, 

She lives in Leicestershire.

Good thing she had set up alerts

She is with NatWest who refunded her and stopped the debit card 

It's happening all the time 

You seem to be implying that because she lives in Leicestershire a gambling transaction in Gibraltar is automatically suspect. That fails to recognise that many gambling firms operate their online businesses offshore, with Gibraltar (along with Malta) being one of the main locations, so anyone placing a bet online in the UK could well be making that transaction in Gibraltar.

Well not everyone knows that, me included, however she received an immediate refund from her bank so obviously something was suspect 

Mr.Generous

A lot of online orders ask for your phone number, quite a few parcel deliveries have your number printed on the label for the driver now.

phillw

Slinky said:

Surely the Santander system just sends the verification code to the phone number they have on file for you. Isn't that one of the points of 2 factor authentication?

I've seen authentication requests where you are asked for your phone number, but that is to confirm it matches what is in their records and not to allow the number to be changed. That would make it pointless.

The card details could have been hacked from a web site that it's been used with, skimmed in a shop, leaked by an employee or agent of the bank or discovered with an enumeration attack.

fast forward to 46 mins for visa europe head of risk interview where they discuss enumeration attacks.

https://www.bbc.co.uk/iplayer/episode/m001f1td/the-secret-genius-of-modern-life-series-1-1-bank-card