Two bogus charges on two different cards

[montanagirl]

Last Friday I ordered a new spin bike online and when I checked my card to see if it had posted, I saw another charge for $807 from an HVAC place in Honolulu (and I'm in Montana). I disputed it immediately and the card was canceled. I called the merchant and their controller said he couldn't find such a charge in their Quickbooks.

Today I noticed my Amazon Prime card bill seemed high and found another bogus charge for $259 for some sort of vanity desk set. Disputed that right away. It doesn't show in my recent orders, but it does appear in Amazon's list of charges.

I don't know how this could happen. My Amazon card doesn't go anywhere or get used for anything but Amazon. My Citi card stays in my wallet and I buy just about everything with it. I did foolishly use it at a McDonald's once but why the weird HVAC charge in Hawaii? How would that work for a fraudster?

There is no one in my house but me and my disabled husband so how could this have happened? I even have a brand new router with the latest encryption. My main PC is straight ethernet.

I'm wracking my brain. Anyone have any idea how something like this could happen?

[munemaker]

I don't know the answer to your question. I have had a few strange bogus charges over the years. The most interesting one was on a new card that had not even been activated, but somehow the charge went through. Bank could or would not provide an explanation.\

MUN

[retired@50]

...
I'm wracking my brain.

If it were me, I'd be requesting new cards to replace both of the affected cards.

No telling how someone got hold of your CC number.

Regards,

[montanagirl]

...
I'm wracking my brain.

If it were me, I'd be requesting new cards to replace both of the affected cards.

No telling how someone got hold of your CC number.

Regards,

Yes they do it automatically now. But twice now I've gone to the store with no means of payment and had to come home to get my old debit card.

[montanagirl]

delete

[ResearchMed]

If it were me, I'd be requesting new cards to replace both of the affected cards.

No telling how someone got hold of your CC number.

Regards,

Yes they do it automatically now. But twice now I've gone to the store with no means of payment and had to come home to get my old debit card.

Given the difficulties you've been having with unauthorized use of assorted card numbers, I'd suggest that you NOT use a debit card, full stop. That will be more annoying to recover from if someone drains the account, or charges a *lot*, compared with misuse of *charge* cards.

So I'd recommend getting another charge card (or 2?) for backup, and using an ATM-only card for times that you might be needing some cash.

RM

[LittleMaggieMae]

I'm wracking my brain. Anyone have any idea how something like this could happen?

HOw could it happen? Think about the never ending breaches of databases with credit card into in them over the last 10 years?

Think about how cool it is that computers can generate "random credit card numbers" and the ccv numbers that go with them by the zillions in an eye blink of time.

At least with a credit card you won't pay the fraudulent charge as long as you report it as fraud in a timely manner.

Think about all the people who don't ever look at their CC statement and just pay some dollar amount every month (maybe the bill in full maybe just the minimum balance). They have no idea what charges are on their account. It's kind of sad. And that's what the thieves who hit on your credit card info where hoping you would do - not notice.


ADDED: I like the idea of disconnecting your checking account from your debit card (do no allow debit card transactions) and then not using your debit card.

Can you check with the credit cards you do have - can you "lock" and "unlock" the cards easily? If the cards you have do not offer this feature/service perhaps getting some new cards that have this service will give you some piece of mind. I get it that it adds a layer of thought to using your cards - you may have to change some of your spending habits (like not making daily charges or planning your spending).

[enad]

Some credit cards let you generate a virtual number whereby you can specify the maximum amount available and the expiration date of that card. Once the transaction goes through and the merchant was paid, you can delete the virtual card number(s). If anyone got a hold of your number they'd be rejected by your credit card company

[gotoparks]

I had two cards that had bogus charges at the same time. I've read before about people scanning wallets and purses and getting numbers. I don't know anything other than reading about this, so I purchased a RFID blocking wallet. I needed a new wallet anyway.

[Billionaire]

Who knows how this stuff happens, but I'd guess unscrupulous staff. I went to a popular restaurant a few years ago and paid by credit card. The person waiting on us took the card to a station, within eye shot, but away from our table. Within a couple of days several bogus charges appeared on my card. Disputed charges were removed, but I had to cancel the card and get a new one issued. PIA.

[montanagirl]

Yes they do it automatically now. But twice now I've gone to the store with no means of payment and had to come home to get my old debit card.

Given the difficulties you've been having with unauthorized use of assorted card numbers, I'd suggest that you NOT use a debit card, full stop. That will be more annoying to recover from if someone drains the account, or charges a *lot*, compared with misuse of *charge* cards.

So I'd recommend getting another charge card (or 2?) for backup, and using an ATM-only card for times that you might be needing some cash.

RM

I don't have any other kind of physical card at this point. The new Citi card should be here tomorrow, then the debit card goes back in the file.

[capran]

Given the difficulties you've been having with unauthorized use of assorted card numbers, I'd suggest that you NOT use a debit card, full stop. That will be more annoying to recover from if someone drains the account, or charges a *lot*, compared with misuse of *charge* cards.

So I'd recommend getting another charge card (or 2?) for backup, and using an ATM-only card for times that you might be needing some cash.

RM

I don't have any other kind of physical card at this point. The new Citi card should be here tomorrow, then the debit card goes back in the file.

Have had 3 different debit cards hacked. Now, we learned you can lock the card except when you use it, nearly instantly. the bank said it's all random AI generated, so keep it locked.

[tomd37]

"Who knows how this stuff happens?"

Sixteen months ago I opened a checking account at a local bank. Part of their offer was a credit card which I discovered upon receipt was actually a debit card. The day it arrived I did not activate it and shredded it. Just last month a charge for $27+ appeared on my monthly bank statement. I went to the bank to challenge it and the first thing the manager looked at was where the purchase was made. It was a Walmart.com online charge. She said they see that quite often and she immediately credited my account saying these people have equipment/programs they run until they hit on the right combination.

[bogles the mind]

I feel that some of these breaches are from the card issuer's end.

[Mr. Buzzkill]

I use my debit card only for withdrawal of cash at my own banks ATMs and I set my debit and credit card accounts to notify me with a text message to my mobile phone for every single transaction with the cards.

I’ve never had a fraudulent charge but I’m confident that I’d be aware of such an event instantly.

[BrooklynInvest]

Think it's either the card issuer itself or, more likely, a legitimate vendor you used got breached. I've been on the receiving end of both.

Was part of a nationwide breach about 10 years ago. Found out rather awkwardly as I was trying to buy my wife a nice gift at Bergdorfs. Also got hit from Uber about 8 years ago. I was charged nearly $800 for a $30 ride to Miami airport. According to Uber it was because I went via South Carolina. Thankfully Amex cleared it. I'm still waiting for a response from Uber. They did, however, send me a $5 off coupon for my next ride.

[bberris]

Symptoms of a remote access trojan. I had one that was undetected by MS defender and malwarebytes. If so you are still vulnerable. I wiped the entire disk.