Credit card # hacked

[Muse]

I get an email yesterday (notice today), that 2 charges on my CC were "declined." They were made on the other side of the country, one for $500 at BJ Wholesale, the other for ~$27 at a pizza place, both in MA. I call the number provided and talk to representatives.

Sorted out it seems that someone has my CC number (now cancelled), but not my expiration date (don't know how that's possible, but I was told that they put in a wrong expiration date for at least one attempted transaction), don't know my correct address. However, they made a $500 transaction at BJ Wholesale that DID go through, then tried another 2 minutes later that was declined.

I won't be charged, will get a new CC tomorrow. My guess is that the restaurant (or affiliated chain) I went to on Father's Day had their data hacked. Meantime, after I get my new CC, I'm going to have to contact a bunch of companies, etc. and change my autopays.

I asked about investigations, thinking that the $500 purchase that did go through could be traced to someone. They said it was up to me to contact police to initiate any investigation. I have heard about this sort of thing, that it generally goes nowhere. I figure they mean my local police. Would you contact your local police? I figure they aren't going to do anything other than maybe take a bunch of info from me and keep it for their records and do nothing. :\

 

[rsutoratosu]

yeah , you should at least report it in case they have all your account.. you can start a paper trail on this..

 

[Cerpin Taxt]

I get an email yesterday (notice today), that 2 charges on my CC were "declined." They were made on the other side of the country, one for $500 at BJ Wholesale, the other for ~$27 at a pizza place, both in MA. I call the number provided and talk to representatives.

Sorted out it seems that someone has my CC number (now cancelled), but not my expiration date (don't know how that's possible, but I was told that they put in a wrong expiration date for at least one attempted transaction), don't know my correct address. However, they made a $500 transaction at BJ Wholesale that DID go through, then tried another 2 minutes later that was declined.

I won't be charged, will get a new CC tomorrow. I asked about investigations, thinking that the $500 purchase that did go through could be traced to someone. They said it was up to me to contact police to initiate any investigation. I have heard about this sort of thing, that it generally goes nowhere. I figure they mean my local police. Would you contact your local police? I figure they aren't going to do anything other than maybe take a bunch of info from me and keep it for their records and do nothing. :\

The police are not going to do anything for $500 that really only came out of the pockets of the credit card companies.

I had my identity stolen and had credit extended in my name to the tune of nearly $10,000. I also had compelling evidence of the individual responsible, including his exact location at the time I presented it (he was a tenant of mine). I presented it to the police and they did exactly nothing but file a report.

One officer candidly admitted nothing would be done. He said the fraud department was the single most over-worked department on the police force.

 

[Brainonska511]

At least it was your CC# and not a debit/credit number. I'd rather be out the bank's money than be out my money (and not to mention the legal protections that CCs have over debit cards).

 

[corwin]

Nothing is ever done...I get notices from my bank about every six months that my credit card "may" have been compromised and they are sending me a new card...just got one yesterday:\

This time I am going to finally just make a list of all the places I need to update since I have so many things set with it to autopay:hmm:

 

[dud]

The police are not going to do anything for $500 that really only came out of the pockets of the credit card companies.

I had my identity stolen and had credit extended in my name to the tune of nearly $10,000. I also had compelling evidence of the individual responsible, including his exact location at the time I presented it (he was a tenant of mine). I presented it to the police and they did exactly nothing but file a report.

One officer candidly admitted nothing would be done. He said the fraud department was the single most over-worked department on the police force.

Both the charges (including the $500 one) were declined. The perp failed to get any goods with the CC.

OP, had a similar thing happen to ne last year. Went on a business trip to SoCal. On the way home had to fill up before returning the rental so stopped at a Valera gas station in Ontario. A few months later I got a bill for about $400 in charges in LA. I reported the fraudulent charges to the CC company. They eventually cleared things up after having to eat the charges.

 

[SunnyD]

At least it was your CC# and not a debit/credit number. I'd rather be out the bank's money than be out my money (and not to mention the legal protections that CCs have over debit cards).

Why do people get all uptight about this all the time? Nearly all banks these days limit your liability on debit card fraud in exactly the same manner as credit cards.

 

[Jimzz]

Why do people get all uptight about this all the time? Nearly all banks these days limit your liability on debit card fraud in exactly the same manner as credit cards.

Because legally they don't have to and there is nothing stopping them from saying it was your fault and not getting any of your money back.

A CC is protected by law.

 

[Jeffg010]

PNC Bank will do all the work for you no need to go to the police. They will investigate on how it is done and they got a bunch of lawyers and a beefy cyber team just for this very thing. You have live with this in today's world because at some point you will get hit.

 

[highland145]

Because legally they don't have to and there is nothing stopping them from saying it was your fault and not getting any of your money back.

And you'll be out your $$ for 10 working days while they investigate. When the daycare got hacked, it was for $4K.

 

[DesiPower]

IIRc as per PCI compliance CC#, Exp date, address and CID are stored in different places, maybe even on different databases or servers. So its quiet possible that some hacker hacked something and got just the numbers. Since you cannot do anything much with just the numbers that didn't report the "breach".

Warehouse stores are retards when it comes to letting anyone use anything to make a purchase, they think that since only "members" can buy stuff AND they have members actual picture and address and DL# and everything, its OK to give anyway stuff without due diligence.

 

[KeithP]

This time I am going to finally just make a list of all the places I need to update since I have so many things set with it to autopay:hmm:

Why not get two credit cards? Use one for autoplay and the other for day-to-day stuff (assuming it would be the latter that would be mostly likely breached).

-KeithP

 

[DesiPower]

The police are not going to do anything for $500 that really only came out of the pockets of the credit card companies.

I had my identity stolen and had credit extended in my name to the tune of nearly $10,000. I also had compelling evidence of the individual responsible, including his exact location at the time I presented it (he was a tenant of mine). I presented it to the police and they did exactly nothing but file a report.

One officer candidly admitted nothing would be done. He said the fraud department was the single most over-worked department on the police force.

In my case, dude even opened an account at San Diego Costco store and so they had his picture. He made purchase upwards of $5000, its been 1.5 years and still nothing

 

[SunnyD]

Because legally they don't have to and there is nothing stopping them from saying it was your fault and not getting any of your money back.

A CC is protected by law.

Legally, if it's spelled out in the Terms & Conditions in your account benefits, they do have to.

 

[Fritzo]

My PayPal debit card got hacked last year. They charged $1200 in Brazil at their "Walmart" equivalent before I caught it. I have to say Paypal was top notch in resolving the issue. They returned my money within 3 days and got me a new card the next day.

 

[cubby1223]

At least it was your CC# and not a debit/credit number. I'd rather be out the bank's money than be out my money (and not to mention the legal protections that CCs have over debit cards).

That's why I refuse to get a debit card. Plenty of people have argued with me telling me how easy their life is using their debit card, but I just don't care. I don't need it, and it's one less thing to worry about getting stolen.

 

[T9D]

About once a year or two my credit card get's fraud charges. USAA is super quick to call every time though. And reissue me a new one. Some probably were from some shady stores. But I think the last one was probably from the huge breaches we've been having with all the major websites. They didn't seem surprised at all when I was talking to them about it.

Also you have no idea when they got the info. They can hold onto it as long as they like before using to throw off the track.

Sometimes things get done. I figured out that one of my fraud charges came from a store in New York. After doing research I found that other people had the same problem. I gathered all the info and links, emailed the DA of New York with all the info. Eventually within months the store was closed down and website gone (they had a real physical location too). I'm pretty sure they got busted, they seem to have these fraud rings like that all over New York that use real stores. before I turned that one in they had been around for quite a while. Then suddenly gone after I turned them in.

They have no way of knowing about it if you don't say anything. They may see a pattern and get the big ones. Or if you have plenty of info, you did all the investigating, and know for sure who it is, they will pursue it. But yeah some joe smoe who only bought your info or is the small last man in line, they probably aren't going to do much. Even if you get a photo, they don't know who that random guy really is.

 

[unokitty]

...I won't be charged, will get a new CC tomorrow. My guess is that the restaurant (or affiliated chain) I went to on Father's Day had their data hacked. Meantime, after I get my new CC, I'm going to have to contact a bunch of companies, etc. and change my autopays.

I asked about investigations, thinking that the $500 purchase that did go through could be traced to someone. They said it was up to me to contact police to initiate any investigation. I have heard about this sort of thing, that it generally goes nowhere. I figure they mean my local police. Would you contact your local police? I figure they aren't going to do anything other than maybe take a bunch of info from me and keep it for their records and do nothing. :\

Its up to you, but I would do a police report. Where I live, I can do that online.

The purpose of the police report isn't to catch the thief but to protect you in the event of future problems.

You will need information from the police report when you fill out your Identity Theft Affidavit.

Lead Federal Identity Theft Agency is the FTC. You can get more info at their Identity Theft Site.

Since different states have different laws regarding identity theft, you may also want to check your state's Attorney General's web site. For example, Texas has a site here. If you're interested at all, you can download their Identity Theft Victim's kit. (pdf format)

Best of luck,
Uno

 

[Jimzz]

Legally, if it's spelled out in the Terms & Conditions in your account benefits, they do have to.

And how many Banks/Debit Cards is it spelled out in? Have you read it fully? Might want to check again.

 

[corwin]

Why not get two credit cards? Use one for autoplay and the other for day-to-day stuff (assuming it would be the latter that would be mostly likely breached).

-KeithP

Haven't found a better rewards program than the one I have...sad thing is I've never had a fraudulent charge show up, they just swap my cards every couple of months

 

[T9D]

Haven't found a better rewards program than the one I have...sad thing is I've never had a fraudulent charge show up, they just swap my cards every couple of months

Your CC company probably had a breach and doesn't want to tell you. They probably did that for all their customers.

 

[SunnyD]

And how many Banks/Debit Cards is it spelled out in? Have you read it fully? Might want to check again.

Every bank and credit union I've banked with in the last probably 20 years. Why is this even an issue to discuss? Do you just like being wrong or something?

 

[Capt Caveman]

And how many Banks/Debit Cards is it spelled out in? Have you read it fully? Might want to check again.

Times have changed, I know all of my my debit cards are VISA affiliated and provide me with zero liability. Mastercard debit cards also have the same protections.

http://usa.visa.com/personal/get-help/financial-skills/debit-cards.jsp

Debit cards have the same security protections like as credit cards.Just like credit card cards, debit cards have Zero Liability* fraud protection and dispute resolution options.

One of my debit cards:

https://www.bankofamerica.com/privacy/accounts-cards/credit-debit-card-security.go

Zero Liability Protection. If your card is lost or stolen, Bank of America credits you back for any fraudulent card transactions up to the period of loss.

 

[corwin]

Your CC company probably had a breach and doesn't want to tell you. They probably did that for all their customers.

They always say it was Visa notifying them that my card number was "compromised" somewhere and to issue me a new one...and I can damn near set my clock by it happening every six months over the past 2-3 years

 

[Jimzz]

Times have changed, I know all of my my debit cards are VISA affiliated and provide me with zero liability. Mastercard debit cards also have the same protections.

http://usa.visa.com/personal/get-help/financial-skills/debit-cards.jsp



One of my debit cards:

https://www.bankofamerica.com/privacy/accounts-cards/credit-debit-card-security.go

Did you intestinally leave off this part...

"for signature-based transactions, provided cardholders promptly notify their issuer of such fraud, theft, or unauthorized purchase."

That is only for when people use a debit card like a credit card. If a PIN number is used then the "*" part comes in.
Now lets see what the * says...
"Does not apply to ATM transactions, certain commercial card transactions, PIN or other transactions not processed by Visa. "

So there ya go, no coverage in many cases.

Every bank and credit union I've banked with in the last probably 20 years. Why is this even an issue to discuss? Do you just like being wrong or something?

Actually you made the claim, and as you can see Debit Cards do not have the same protection as Credit Cards.