TWO credit cards hacked!

[YoSof]

I checked my credit card transactions this morning and noticed 3 transactions I didn’t recognise totalling just under £500 - one to a builders merchant 300 miles away, one a takeaway also miles away and the third a ticket website called TicketSource.

Called the card company, card cancelled and fraud team will call me back, just thought to check my other card (with a completely different company!) and almost £1000 of fraudulent transactions today. Called the company, card cancelled, fraud team will be in contact etc etc but how the fuck have they cloned both?! Any online transactions have to be approved in the app so assume they’re in person?

I have only used these cards once this year to pay for a holiday with TUI - the first card didn’t work (stopped by bank as possible fraud, ha!) so I used the other card. Is it possible that it’s a security breach with TUI or their systems could have been hacked?

I’m going to contact my bank too and change my debit cards, do I need to contact the police? I can’t believe this!

[Dedodee]

Did you pay Tui online?
10 years ago someone paid for a lorry part on my card, it was delivered 150 miles away.
When I rang the police with the address they weren't interested.
I'm convinced mine was online theatre ticket sales.
If it helps I was reimbursed.
Amusingly the bank asked me if I knew anyone that lived in the city and I told them yes, my 75 year old dm who can't even drive.

[YoSof]

The first time we tried to pay over the phone, gave the card details, transaction was processed and then declined - when we rang the bank they had stopped the transaction for fraud checks.

For ease we just used the second card to pay via the app and that all went through fine.

I’m wracking my brains but we haven’t used them anywhere else - we paid for the holiday because of the added protection with credit cards then paid the card off in full.

The builders merchant transaction was for decking, we called them and they had a name and address that we will pass to the police but even if it turns out not to be a fake address I doubt they’ll be interested 😔

[Dedodee]

It's strange.
I think I'd be giving Tui a call to chk their security if they're the common denominator.

[Quveas]

If you used two different payment routes, it seems unlikely it is a hack at Tui. Do you by any chance carry your credit cards around with you? The RFID chips can be read by someone standing within 10 feet of you with a scanner. You should always have an RFID blocking wallet or purse, or line it with aluminimum foil. If two cards have both been scammed, and both on the same day, it's likley that the information was stolen within the last week, possibly even days. Scammers like to hit hard and fast and sell on the information or clone within hours. Some years ago I had a card cloned, and it first used in Bournemouth - within 24 hours it was tracked as an attempted use in Africa! I was lucky - my bank detected the very first illegitimate use of it and I lost nothing, as they spooted I wasn't likely to be in Bournemouth when I had just used it two hours before in Yorkshire.

[YoSof]

@Quveas

If you used two different payment routes, it seems unlikely it is a hack at Tui. Do you by any chance carry your credit cards around with you? The RFID chips can be read by someone standing within 10 feet of you with a scanner. You should always have an RFID blocking wallet or purse, or line it with aluminimum foil. If two cards have both been scammed, and both on the same day, it's likley that the information was stolen within the last week, possibly even days. Scammers like to hit hard and fast and sell on the information or clone within hours. Some years ago I had a card cloned, and it first used in Bournemouth - within 24 hours it was tracked as an attempted use in Africa! I was lucky - my bank detected the very first illegitimate use of it and I lost nothing, as they spooted I wasn't likely to be in Bournemouth when I had just used it two hours before in Yorkshire.

We do carry all our cards together, but in a RFID blocking wallet, this is why I just can’t get my head around it!