How have our credit cards been compromised

[Ilovemycatsanddogs]

2-3 weeks ago we were contacted by our credit card provider about a suspect transaction. Joint account with 2 cards. It was a text message that had specific transaction details, we called back via a number from our statement to say one transaction - £80.00 to Uber - was fraudulent so they cancelled our cards and sent new ones out. Today we’ve checked the credit card statement and there are 2 new fraudulent Uber transactions on one of our new cards with the transactions taking place before we had received/activated the cards. The envelope containing the card was not opened/damaged so unless the card was compromised but someone at the credit card company, we don’t know that has happened, or how.

Cards cancelled again but how can we work out what has happened to prevent it happening again? Our credit card company are now involving the police, the cards have never been out of our possession, but what has happened? All Uber transactions. Nothing else (so far!).

Any help/insight will be very useful thank you.

Have either of you previously used the card with Uber?

Sometimes when you get a new card, the details with some companies update automatically.

So perhaps if someone at Uber is fraudulently using the card, they can use the updated details- ghost transactions perhaps?

Or is it your account and your partner is using Uber and not admitting to it?

my husbands previous card was linked to Uber and still is. That card is deactivated as are our new cards.The new card isn’t and hasn’t been updated on the app but still used. My husband has no need to lie about the transactions. It’s less than £30 this time. If he wants to use an Uber he can. It’s his Uber account, he pays the credit card bill and he hasn’t taken an Uber for ages. The transactions aren’t in his Uber app but have been billed using his card number/expiry date and ccv number. We just don’t know how as he was at home with me both days the transactions were made. Before we had actually received and activated the cards. I was with him when the post arrived with the new cards.

Could it be somebody that works for the Credit Card company? Could they have cloned your card in someway?

Don’t know if this is helpful to you for the future but I link my uber account to my Monzo account which only has enough to cover the fare.

I don't know if it's this and I don't know what it's called... helpful start, eh?!

But my bank were telling me the other day that if you have a card stored with a company that if you have a subscription set up with them and you cancel the card but don't cancel the subscription, then they are actually allowed to (which I think is fairly terrible, but still) use your new card to attempt the charge - even if you have not given them the number of the new charge. Sounds outrageous right? But it happens! I didn't know this until Friday last week.

Has your husband ever used Uber on a subscription basis? E.g. for premium services, food delivery, etc?

Our credit card company are looking internally given we hadn’t activated the second card before it was used. We have one account with two card numbers so we definitely know it’s his card that was compromised. I get woosh orders from Tesco that are delivered by Uber but that’s via my card. I know Uber are targeted for criminal offences/drug running but I just can’t see how someone has got our details twice in less than 3 weeks. It can’t be a breach with us as how would they have our ccv number?

I honestly have no idea how it works - not my wheelhouse of expertise - but I think it's not a coincidence that it's Uber repeatedly. Also weird that it's the same amount each time?

It’s Uber repeatedly but not the same amount. 3 times now - £80, £25 and £2.50. Each time they must have all the relevant info to pay via Uber. The transactions have been when we are both working at home. Definitely not us. Our credit card company have accepted this and are investigating. We hadn’t even activated the card for the latest transactions.

Most likely that the breach has come from inside the credit card company. If happened to me some years ago with a new card that was still unopened in the envelope when they contacted me to confirm a transaction

Oh sorry, I thought it was £80 each time for some reason, I am juggling too many things tonight! Maybe someone within the credit card company then. Hope you get it all sorted before too long.

i think it is someone at our credit card company. Purely as the last 2 transactions happened before the cards became our responsibility. They are investigating and it’s now been reported to the police and IFB. I can’t seen any other explanation for this to happen. It’s just so bizarre.