AIBU to ask how someone managed to clone my card and make a contactless payment for £2,000

[MumofTeenDespair]

Just that really. Used my card in an ATM (first time for months). Couple of hours later it was refused when I tried to use it and then retained by an ATM. Rang bank the next morning to find that it had already been reported as stolen by 'me' (= not me), and mobile app (which I don't have) signed up for and used to change the email address on my account. Thought I'd sorted it all out then but 24 hours later someone made 2 purchases with contactless app for £500 online and £2000 in person (contactless!!!) at an Apple store. My questions are a) how do they do this? and b) shouldn't the bank have had better security systems in place in both those situations?

Contactless doesn't have a limit on apple/android pay

how stressful! Hope you get it all back

Yeah, it looks like someone used the card to set up Apple/Android Pay on their phone.

Sorry this happened to you, the bank should be able to sort it for you and you’ll get your money back.

If it had already been reported as stolen, surely it shouldn't have been possible to use it, contactless or otherwise?

Sounds weird to me. Hope you get your money back, OP.

There’s a possibility the first ATM you went to was tampered with and when you used the ATM your card was skimmed.

Have you informed the bank? They might want you to notify the police too.

Quite surprised they managed to change you email address, when I make any personal changes the old details are alerted and it takes two working days before he changes are actioned and I can make use of the new details.

But surely if it was stolen, those card details would be null and void so you'd receive another in the post? And even the app takes a while to set up, doesn't it? (Ages since I did mine.)

I got the money back ok. It must have been the new card they cloned which is really weird. But you’d think it’d raise an alert wouldn’t you. All these things within 48 hours. And it shouldn’t be possible to change my
email address that easily surely. Maybe the next step was to hack into my online account and clear that. Luckily I caught it early and it didn’t cause any problems other than a couple of long phone calls to the bank. Also never using an ATM again unless it’s inside a bank.

Was Applepay. And it was the new card that they ordered and cloned, which them ended up being posted to me but I’ve cancelled it. Might well just move everything to a different account as I’m unimpressed with the security of this bank