CC hacked. Should I send this post?

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
FYI:

Either you have a criminal in your organization or someone has hacked your system. My credit card company emailed me today asking if a charge was legitimate. It was not. I called them and there have been several fraudulent charges made on my card since my initial interaction with your site. My card number is now canceled and I will get a replacement. It is quite clear that the irregularities with my purchase of a bicycle chain tool at your website resulted in this fraudulent activity.

<my name>

- - - -
The interaction with the company, who may be in the UK, based on some of the language, was on Apr. 13
 

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
I should have maybe called my CC company earlier because I was aware of a problem. The company's website indicated I had made no transaction, the item was there in my cart. But I saw the charge on my CC at the CC's website. So, I contacted the seller, they had an automatic response saying they'd respond within 48 hours. About 40 hours later (this morning) I got an email asking me for more info, my exact name at their website, my exact billing address. I sent them that, got another automated response and a few hours later I get the inquiry from my CC company if a certain charge was legit. I see that a few hours later and immediately call them and have a 20 minute conversation about fraudulent charges, getting a new card, etc. Now I'm wondering if I should send the post above or should I just let the CC company deal with it all.

Looks like somebody had made about 1/2 dozen fraudulent charges with my card. Things like this are why I prefer that a seller supports Paypal. I figure that's gonna be a lot more secure and nobody can skim my name, CC number, billing address, expiry date and CVC.
 
Last edited:

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
This is not a fly by night company, they are one of the biggest online retailers of sporting goods equipment. They are out of Portsmouth, England.

Wiggle

The merger of Wiggle and Chain Reaction Cycles was announced in 2016: by this time No1 and No2 largest global online players in the cycle and tri sports product categories.[14][15][16]
 
Last edited:

allisolm

Elite Member
Administrator
Jan 2, 2001
24,838
3,964
136
A few years ago I had someone try to wire money using my CC #. I had used the CC only once in the 3 months preceding the attempt. I called the establishment (a local restaurant) and gave them the facts. What they did with that information, if anything, I don't know, as I never heard anything more about it, but I felt better for having told them.
 

Torn Mind

Lifer
Nov 25, 2012
10,935
2,451
136
I had a debit card stored in the McDonald's app a couple years back and someone was either able to use the card or the account to make an order at a Bronx McDonald's...I was hundreds of miles away....


1682170668821.png
 

IronWing

No Lifer
Jul 20, 2001
67,450
23,986
136
The CC companies have mountains of data to analyze to show where fraud is occurring. If they think a particular merchant is a problem, they should be the ones handling the issue.
 
  • Like
Reactions: Captante
Dec 10, 2005
22,900
5,522
136
Sometimes, numbers just get compromised. Just contact the CC and call it a day. No need to be their investigative arm.
 
  • Like
Reactions: nakedfrog

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
Coincidence. It may or may not have originated from their site. You can send a message, but I'd remove all accusations, and just tell them to look their stuff over and see if there's a problem.
No, I think the odds that this is coincidence are well under 1%. I will explain...

On April 13 I shopped bicycle chain tools, both the ones I'd had for a number of years had broken in use the previous week due to an incident on the road and subsequent need the next day to change my back tire and clean the chain.

I ordered 2 different brands (of far better chain tools) at two different sites online the evening of April 13. One purchase (from an American company) was perfectly kosher, I got the item a few days ago. The other purchase, from wiggle.com (English) was anything but kosher. What slipped my mind in all this is that I didn't get a confirmation email but this only came into focus yesterday. I didn't think much about it until I began to wonder when the item would come and checked at their website on the morning of April 19. In order to make the purchase I had to register at their website (i.e. on April 13). I got an email from them immediately after I registered welcoming me. It looks fine and dandy. BUT one minute later I got a 2nd email, which, if I'd been paying closer attention was the first sign that something squirrely might be going on:

Hi <my name>,

A new delivery address has been added to your account.

You can make changes to your account settings here https://www.wiggle.com/secure/myaccount

If you did not make these changes, please contact us at AccountSecurity@wiggle.com immediately

Thanks
Wiggle

- - - -
I start wondering what's up with my order on Apr. 19, Wednesday, when I'm going to get it, and go to their site and see it says I have made no order (!). I also notice that squirrely email I got 1 minute after the Welcome email and I send them an email quoting what I saw when I made the order, which included a transaction ID number (I often copy/paste that kind of info and store in my personal data just in case). I also quoted the squirrely email. In reply I get an autoreply saying they'd reply within 48 hours and like I say in the OP, they requested more info, and I haven't been able to get anything like personal service from them yet. The item I thought I'd ordered sits in my cart there and my CC company's records for my CC indicate the charge had gone through. On top of this, what I saw when I made the purchase was quizzical in that the entity that made the charge was odd. It was not Wiggle, it looked like the name of a fraternity. Next I know, while I waiting for meaningful contact by Wiggle is notification from my CC company that some charges are appearing on my card that look suspicious and they want verification from me that they are not fraudulent. Then I sprang into action last evening, called CC, got the card cancelled, inspected (via phone) all the charges on my CC since Apr. 13, determined what was OK and what was fraudulent. It's pretty clear to me that my CC info was skimmed when I made the online purchase at Wiggle.
 
Last edited:

pete6032

Diamond Member
Dec 3, 2010
7,128
2,731
136
I wouldn't do anything with the merchant. Let the card company figure it out. That's what they are there for.
 
  • Like
Reactions: nakedfrog

Torn Mind

Lifer
Nov 25, 2012
10,935
2,451
136
Google Reviews of wiggle indcate...a dumpster fire operation.

Merchant Wiggle might have indeed stole it themselves.
 
  • Like
Reactions: Muse

MtnMan

Diamond Member
Jul 27, 2004
8,493
7,431
136
The moment that a charge hits either of my CCs, or debit card, I get an SMS text, with details. Makes it easy to alert the bank very quickly if anything is fraudulent.

These happen quick enough that if I'm at a point of sale, I receive the text before they have time to hand me my receipt.
 
  • Wow
  • Like
Reactions: Captante and Muse

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
More like THEY ARE THE PROBLEM.

View attachment 79814
Where did you find that stuff?

Hmm. A review from 4 days ago:

Paid extra for early delivery in time…


Paid extra for early delivery in time for sons birthday. Delivery stuck with courier. No chat system working. No replies to emails. No customer service. No follow up. No idea how these guys will ever compete with Amazon if they can’t respond and react. Very worrying if you work there. I certainly won’t use them again.

Date of experience: April 18, 2023


:oops:

Their website looked perfectly fine. I used to check up on merchants with some frequency probably in the early 2000's. Recently, no. If I were nervous about them I probably would have. It was only $25. Not a big risk but the thought that my CC would be skimmed and I'd get fraudulent charges hadn't entered my head until it happened. However, something like this did happen to me a few years back and I had no idea how someone got my CC info. Eerily similar stuff happened, including someone ordering pizza! BTW, looks like whoever was using my CC is in the USA.
 
Last edited:

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
Crazy thing is the _transaction_ on Apr. 13 evidently WAS PAYPAL. I had the weird idea that I hadn't initiated Paypal when it happened, a head scratcher. But Paypal seemed to definitely be the mechanism. Still, my card info was skimmed even though the intermediary was Paypal. And as I say, the merchant showed no order having transpired but my CC company registered a transaction. The agent shown was not Wiggle, it said:

Spend Category
Civic, Social / Fraternal Associations
Merchant Details
Phi Delta Theta
 

Captante

Lifer
Oct 20, 2003
29,872
10,410
136
Where did you find that stuff?

Seriously? :p

You've never heard of Google Reviews, Yelp, ResellerRatings etc etc etc?

Chargeback, get a new cc from your bank and move along. Nothing to see here. (next time be more careful and read reviews)
 

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
Seriously? :p

You've never heard of Google Reviews, Yelp, ResellerRatings etc etc etc?

Chargeback, get a new cc from your bank and move along. Nothing to see here. (next time be more careful and read reviews)
F-You, man. Don't be such a fuckin' prick. :(
 
  • Haha
Reactions: Captante

Torn Mind

Lifer
Nov 25, 2012
10,935
2,451
136
Coincidence. It may or may not have originated from their site. You can send a message, but I'd remove all accusations, and just tell them to look their stuff over and see if there's a problem.

^Yeah what he said

Sometimes, numbers just get compromised. Just contact the CC and call it a day. No need to be their investigative arm.
There is a history going back to at least 2006 of credit card fuckups is bare minimum negligence....about 17 years of "failing" to secure their platform. I haven't heard Home Depot having issues after their 2013(or so) breach.

Given they haven't fixed it up, it's "probative evidence" the breaches are actually being done in-house and not some outsider doing the skimming. Or in the alternative, the outsider knows the company insiders. And said outsider has the green light to thieve.

And these are print articles. Message board posts are also just as legitimate testimony and can be found.

---------------------------
So Muse, I don't think it's a problem to send your OP email.
 
  • Like
Reactions: Muse
Dec 10, 2005
22,900
5,522
136
There is a history going back to at least 2006 of credit card fuckups is bare minimum negligence....about 17 years of "failing" to secure their platform. I haven't heard Home Depot having issues after their 2013(or so) breach.

Given they haven't fixed it up, it's "probative evidence" the breaches are actually being done in-house and not some outsider doing the skimming. Or in the alternative, the outsider knows the company insiders. And said outsider has the green light to thieve.

And these are print articles. Message board posts are also just as legitimate testimony and can be found.

---------------------------
So Muse, I don't think it's a problem to send your OP email.
My point still stands. You're not the CC private investigator or getting paid a bounty. Just report it, don't use that sketchy website again, and move on. It's kind of pointless to waste more time on this.
 
  • Like
Reactions: Muse and Captante

Muse

Lifer
Jul 11, 2001
36,625
7,660
136
My point still stands. You're not the CC private investigator or getting paid a bounty. Just report it, don't use that sketchy website again, and move on. It's kind of pointless to waste more time on this.
I thoroughly agree. I did sent the OP message to them today and I actually got something like a personal reply from them for the first time asking me for a screen shot of the transaction involving Wiggle. I couldn't find it just now at my CC website, apparently because that CC has been canceled. I did see the fraudulent charges 2 days ago. I have been issued a new number on the same account but the fraudulent and legit transactions I can't see, don't know why. I suppose they're there, I just can't find them. Anyway, I don't know why (or actually how) I could help Wiggle figure out what's wrong there. I again provided them with the copy/paste of what I saw immediately after confirming purchase. I don't want to waste any more time dealing with Wiggle. I have to change some auto-pay stuff now, big fun.

You paid $24.35 USD
to Phi Delta Theta MO AlphaDetails
Paid with
Citi Mastercard DBL CASH-XXXX
$24.35 USD
This transaction will appear on your statement as PAYPAL *PHIDELTATHE
Shipped to
<my name>
<my address>
Purchase details
Receipt number: xxxxxxxx09552146
We’ll send confirmation to: <my email address>
Merchant details
Phi Delta Theta MO Alpha
 

ASK THE COMMUNITY