OT: Credit card hacked.

The charges go to the *account* not the card. This is why a lot of companies would only allow you to sign up with a credit card. Even if you cancelled the card they could continue milking you.

It's always a good idea to look at how much work companies put into evading statutory protection. Whether that is by not being in the UK, or other such ploys.

I understand what you are saying, and I am certainly not an expert in this, but the charge was explicitly charged to the card, not the account. The bank added its fee to the account. This is what the listings show.

I don't understand how cancelling a card does not stop further charges being made to the account unless re-authorised for the new card.

The bank says it has blocked any future charges for that merchant.

Just be aware that prime is a country specific benefit. So if the charge was actually for Prime from the USA it would not show on amazon.co.uk, only on amazon.com.

I have Prime in the UK but also shop on amazon.es where I don't get Prime benefits, and if I go to my account on there it tries to sell me Prime

No, it never does. In the past I have been given a new account but again the charges were transferred.

Dave

Interesting. I will follow up on that. I have certainly not knowingly had any interaction with Amazon US.

I just checked Amazon.com, and it tried to sell me a Prime membership, so I don't have Prime there either. I'm not surprised, the mysterious charge came from somebody impersonating Amazon.

It was just a thought. You never know...somebody might goof...

In message <10rde2s$1pqca$ snipped-for-privacy@dont-email.me, Davey snipped-for-privacy@example.invalid writes

I got one of these the other day, I don't have Prime:-

Hi snipped-for-privacy@b-howie.co.uk,

Your Amazon Prime Membership is set to renew on Sun, April 12, 2026 2:29 AM. However, we've noticed that the payment method associated with your Prime membership is no longer valid. To update the default payment method or choose a new one for your membership, please click on the button below and follow the on-screen instructions.

The header says "Your Prime membership is Renewing on Sun, April 12,

Some one who views their e-mail in HTML won't see that.

Brian

On the few occasions when I take up the offer of free Prime membership, I know exactly when it expires, so that I can cancel it before I start to pay for it. So I never owe Prime any money at all. They are out to get you....

But everyone should be looking at the From address: mine about two weeks ago came from @ba15.argentina4.biz.id which is certainly nobody I'd ever want email from.

What I get, almost every day, is at least one message telling me that my mailbox is full/needs authentication/needs renewal/etc/.

It comes from the "Eager Mail Administrator".

The mail server is two metres to my right.

I have just had this one:

There is no link to click, merely "For more information, visit GOV.UK."

Just in case, I did check, and the vehicle is, as I knew, fully taxed.

What is the point?

Chris

Does your mail client render HTML? Malicious links are often embedded in HTML but not repeated in plain text where the real URL cannot be hidden.

I can see the HTML, but I thought that no links were present. Peering closer, there was faint text against a green stripe inviting me to renew at the URL below.

"

Chris

I am getting a message from Windows like this -

"Updated Secure boot certificates on this device have not yet been applied to the firmware.Review the published guidnace to complete the update and maintain full protection. This device signature info is included here. deviceAttributes: Blah blah Gigabyte GA-880GM-UDH etc BucketConfidenceLwevel: No Data Observed - Action Required."

This is a 2011 M/B without TPMS, so what is it telling me (apart from get a new PC) ?.

PS. Is there *any* way of cutting and pasting windows error logs ?. The text can be selected with the left button but the right button does nothing. The only option seems to be to send it online to microsoft. It's a pain having to retype it.

Good spot, but it depends on the client. Thunderbird in plain text shows that there is a link (usually coloured font), but the actual URL linked to is only visible in the status bar. Don't know about Forte Agent which CJD uses.

Be careful, though, to look at the URL correctly. A few years ago I nearly got caught by a

Double click on the entry, there is a copy button...

Dave

I do have a webmail server which displays HTML when I really need it {e.g. to print a ticket or barcode) but normally use a client which doesn't have its optional HTML viewer installed, so everything appears as plain text or not at all. Harder to hide things when there aren't fancy fonts or colours available.

If I must see something suspicious which contains HTML, I'll look at the message source and search for http first. But in most cases, the From: or most recent Received: header will show if it's likely to be malware. Or the subject is written in Spanish..

Today, I received a message from Amazon Prime (referred to in the headers as amazon.com and snipped-for-privacy@amazones.com) saying that it was sorry that I had left Prime. Amazon UK has no knowledge of any of this.

Curiouser and curiouser.

Presumably you meant amazonses.com? Which is the Amazon Simple Email Service ...