The latest credit card scam...

[Irene]

I recently received the following information from a reliable source. I have no reason to doubt the content. So take a moment or two to arm yourself, just in case you become the victim.

This one is pretty slick since they provide Y O U with all the information, except the one piece they want. Note, the callers do not ask for your card number; they already have it. This information is worth reading. By understanding how the VISA & MasterCard Telephone Credit Card Scam works, you'll be better prepared to protect yourself.

One of our employees was called on Wednesday from 'VISA', and I was called on Thursday from 'MasterCard'.

The scam works like this: Person calling says, 'This is (name), and I'm calling from the Security and Fraud Department at VISA. My badge number is 12460. Your card has been flagged for an unusual purchase pattern, and I'm calling to verify. This would be on your VISA card which was issued by (name of bank) did you purchase an Anti-Telemarketing Device for £497.99 from a Marketing company based in London?' When you say 'No', the caller continues with, 'Then we will be issuing a credit to your account. This is a company we have been watching and the charges range from £297 to £497, just under the £500 purchase pattern that flags most cards. Before your next statement, the credit will be sent to (gives you your address), is that correct?'

You say 'yes'. The caller continues - 'I will be starting a fraud investigation. If you have any questions, you should call the 0800 number listed on the back of your card (0800-VISA) and ask for Security.

You will need to refer to this Control Number. The caller then gives you a 6 digit number. 'Do you need me to read it again?'

Here's the IMPORTANT part on how the scam works the caller then says, 'I need to verify you are in possession of your card.' He'll ask you to 'turn your card over and look for some numbers.' There are 7 numbers; the first 4 are part of your card number, the next 3 are the security numbers that verify you are the possessor of the card. These are the numbers you sometimes use to make Internet purchases to prove you have the card. The caller will ask you to read the 3 numbers to him. After you tell the caller the 3 numbers, he'll say, 'That is correct, I just needed to verify that the card has not been lost or stolen, and that you still have your card. Do you have any other questions?' After you say, 'No,' the caller then thanks you and states, 'Don't hesitate to call back if you do', and hangs up.

You actually say very little, and they never ask for or tell you the Card number. But after we were called on Wednesday, we called back within 20 minutes to ask a question. Are we glad we did! The REAL VISA Security Department told us it was a scam and in the last 15 minutes a new purchase of £497.99 was charged to our card.

Long story - short - we made a real fraud report and closed the VISA account. VISA is reissuing us a new number. What the scammers want is the 3-digit PIN number on the back of the card. Don't give it to them. Instead, tell them you'll call VISA or MasterCard directly for verification of their conversation. The real VISA told us that they will never ask for anything on the card as they already know the information since they issued the card! If you give the scammers your 3 Digit PIN Number, you think you're receiving a credit. However, by the time you get your statement you'll see charges for purchases you didn't make, and by then it's almost too late and/or more difficult to actually file a fraud report.

What makes this more remarkable is that on Thursday, I got a call from a 'Jason Richardson of MasterCard' with a word-for-word repeat of the VISA scam. This time I didn't let him finish. I hung up! We filed a police report, as instructed by VISA. The police said they are taking several of these reports daily! They also urged us to tell everybody we know that this scam is happening .

What absolute rogues they are!!

[Alan2273]

How gullible people are.

It should be obvious that these companies have your details and would not be asking you for them.

But these clever fraudsters will no doubt make a fortune out of this scam.

[andsome]

I hope that this emphasises the fact that no credit card company or bank will call you and ask you for details. They may ask if you have made an unusually large purchase, but will never ask for any numbers . My card was compromised several months ago, and when a shop asked for verification for a purchase, the company asked to speak to me. They asked me to confirm several details which only they could do, and then told me that only this purchase would be allowed, and that I must on my return home, telephone them at the number on the back of my statement for a further discussion. They informed me during this discussion that the card should be destroyed safely and that they would send a replacement.

[AlanHo]

That exact same message has been doing the internet rounds for more than 2 years and was posted here before By andsome

Having said that - it is still worth repeating because the scam appears credible.

For several years now there have been oft repeated warnings in the press, on TV and radio, by letters and Emails from banks and other commercial organisations etc over and over again - and still people fall for it.

What a gullible lot we are.

[-pops-]

This scam is not new but it is real so it is good that people are reminded about it - and others.

I was talking to my bank manager the other day and he was saying that thousands and thousands of people every week are having their accounts emptied after completing the phishing questionnaires that they receive in their emails asking you to update your details.

There is one I've been getting a number of recently (one about six months ago and seven a couple of weekends ago) in which a recorded telephone message states: "This is an important call from Lloyds TSB Customer Services. Press any key to continue." The key I press is the one to end the call. If someone wants to speak to me whether from Lloyds or anywhere else they can at least have the courtesy to be alive at the other end and not be a recorded message.

These messages are NOT from Lloyds TSB. They are a scam in a similar way to the one described above, the difference being is that they do not have the same amount of details about your account.

The big problem with us discussing this is that we are likely to be more savvy about the dangers of revealing details over the phone or the Internet, the majority of Internet users wouldn't have a clue what this or any other computer forum is, or even that we exist. What's more they don't care because they are not interested - therein lies the danger.

[Irene]

I have received a number of emails recently, asking me to update my details, apparently from banks, e.g. HSBC, NatWest, Lloyds etc.

I have the emails on the server of my provider set to display all of the headers on incoming emails. In instances like the ones above, I just forward them to the PIRT section of CastleCops. They investigate and do whatever is necessary to reporting them to legal bodies.

Great service. :D