Debit card fraud (OT, a bit long)

newshound · 2015-06-29T15:27:45+00:00

OT but so much experience here! Wife noticed this morning that her Barclays current account was £400 down from yesterday, with no transaction listed. She went into the branch and they said "You bought a Dyson". She bought one three months ago and thought she used the Barclaycard credit card, so came home to check. Confirmed she did bought it from Amazon on Barclaycard. Both Dyson and Amazon deny making the second transaction. Phoned bank fraud department and failed the initial security check, her DOB and/or mothers maiden name have been changed. But after authenticating with the Pin Sentry they were happy to talk to her, said "Card must have been cloned, we'll cancel it and send you another". The original order was actually for three items, but the value of the new transaction is *exactly* the same as the total, five digits so unlikely to be chance (and the bank knew it was for a Dyson). She only uses the card in ATMs or for online transactions, so I don't *think* someone has literally cloned the card. Amazon may have her debit card details as well as credit card. Question. What's leaked is the value of a specific transaction between Barclays and Amazon (rather than Dyson, I assume) plus details of a card other than the one used. Doesn't this imply that the leak must have come from the systems of one of these two organisations? Data snatched from the ether at the time of the original transaction wouldn't have been associated with the debit card details. By some miracle, she spotted this before the transaction had actually gone through, so it may well have been stopped already. But I am wondering what else we might be vulnerable from. TIA!

Jun 29, 2015 21 Replies

Rate this thread:

Vir Campestris 11 years ago

Today he was looking for 'phone numbers for the internal credit card people. They've ignored his emails, but the automated system has noticed that he hasn't submitted an expense claim for all the fraudulent items and has sent him a "strike 1" email.

Andy

Vote

Martin Brown 11 years ago

Ho hum. Dumb as a rock accounting department with automated software.

It is time to take the complaint directly to the head of department. Provide a succinct summary of events so far, emails ignored, timeline and most recent development - then sit back and watch the fireworks.

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required