credit card fraud Q

Factual Questions
21

[QUOTE=Jurph]
In your professional capacity as a fraud investigator, have you ever seen the pattern I described? That is: tiny charge to verify the card, followed by several large charges to get maximum value off the card?
[/QUOTE]

I heard that thieves would use a stolen credit card or stolen credit card number first at a pay-at-the-pump gas station (a purchase made not face to face and with few cameras) to verify that it hadn’t been disabled before using it elsewhere. And that’s the reason that many of these pumps now require you to enter the billing zip code before they accept the transaction.

22

[QUOTE=Joey P]
The CVV is only used when the number is keyed in. It proves that you are holding the card in your hand (or that the person giving you the number is holding the card in their hand).
[/QUOTE]

As a slight nitpick, it really only proves that they have had the card in their hand or seen the back of it at some point. Those numbers are only 3 or 4 digits long and easy enough to memorize.

23

When my card was cloned, something very similar happenned: the fraudster used it to buy credit for their mobile phone. Not a large amount at all.

24

I think the zip code thing is a pretty lame verification method- I would think more often than not, the zip code the item is stolen in would be the zip code of the owner- especially in small towns with one zip code- why can’t they do the mothers birthday thing instead?

25

[QUOTE=Rick]
So you are telling me that either I have shit for brains or the Bank of America with its state of the fucking art computer system got the date, time, and location of when the card was swiped wrong. :rolleyes: Riiiiight. :dubious:
Mind you we are not talking about when the charge was posted, but rather when the card was swiped at point of sale. Furthermore when the bank read back to me all of the rest of my charges to verify if they were correct, all the dates, times and locations were correct.

No I don’t have any clue how they picked up the transaction was bogus*, apparently neither do you. :rolleyes:
*If you read the OP closely that is one of the two questions I am asking. I don’t ask questions I know the answer to.
[/QUOTE]

Due to various system problems, the time stamp can be off. And it could have been off for all transactions at that PO for that day.

I can only guess is that somehow the system burped and scrambled some transaction numbers, which caused them to verify all those transactions.

And, no your problem does not fit any fraud pattern I am aware of which is why I am so curious. And, if there was real fraud with your real number, the SOP for any amount of fraud is to cancel that account number immediately and send you another cards, which your OP does not indicate they did.

Yes, Jurph, sometimes they do run a small charge through to make sure everything is right. But they would (as Dewey Finn) said run it through some place where there are no cameras, no Face to Face, and especially no Federal investigators. The PO is the last place I would use as a trial run. Cameras, FtF, and Postal Inspectors, not to mention other Federal agencies. Bad.

If the Bank really thought that someone had made a real copy of your card with your number on it, they would have canceled your account, mailed you new cards (with a new number), and you’d have to sign an affidavit saying you had not authorized those charges. And, the pattern of activity by the “scamster” doesn’t make sense either. So, that is why I very very much doubt that someone has made a copy of your card wih your real number on it. Rick, I do not think that you have “shit for brains”, it is just that your " guess" just doesn’t make sense.

26

DrDeth, I assume you missed this bit of the OP:

[QUOTE=Rick]
Bottom line is they shut down the card, and I will have new ones on Wednesday.
[/QUOTE]

It sounds like Rick’s credit card company was confident enough that this was fraud to go to the trouble and expense of cancelling old cards and sending out new ones.

Also, FWIW, I had a fraudulant charge show up on one of my credit cards a few years ago for about $50 at Cotton Ginny. I can’t imagine that CG is a popular fraud target either, but there you go.

27

I have personally been on the phone with the cc compnay, bitching about an unauthorized charge, only to realize that I did in fact make it, so its not impossible. Although I DO have shit for brains :slight_smile:

28

[QUOTE=alice_in_wonderland]
DrDeth, I assume you missed this bit of the OP:

It sounds like Rick’s credit card company was confident enough that this was fraud to go to the trouble and expense of cancelling old cards and sending out new ones.
.
[/QUOTE]

Whoops! :smack: Sorry, apparently *my *cranium is stuffed with steer manure this morning. Not enough coffee? :smiley:
But still the pattern is strange, and I would like to know what alerted the Bank. :confused:

I did the same as Wee Bairn. To my defense- the company name for the charge born no relation to where I shopped, the time was impossible and the location appeared to be another state. This was just because the parent company for the store did their charges at a central clearinghouse. :eek:

29

[QUOTE=DrDeth]
But still the pattern is strange, and I would like to know what alerted the Bank. :confused:
[/QUOTE]

Speaking as someone in the bank security “backshop” but not as someone actively involved in retail card fraud detection, we have our ways, and some of them do need to be kept secret, otherwise fraudsters will know what’s being looked for.

It’s sort of like Coke. You can go out and buy a bottle of Coke and drink it. Nestled in among the “natural and artificial flavors” is the secret stuff. If Coca-Cola divulged the ingredients, they’d be out of business soon, even though it’s right there in your hand. Same goes for fraud detection. Your card is right there in your hand (or in a crook’s hand) and there’s secret stuff that we’re watching as the transactions come in. If we tell you what we’re watching, the crooks will know what to do differently and they’ll adjust their methods to compensate.

Just be glad your bank is actively monitoring things and could be bothered to trap a measly $20 transaction before someone rang up thousands of dollars and either drained the checking account (for a debit card) or put you over limit. (for a regular credit card)

30

[QUOTE=DrDeth]
…Yes, Jurph, sometimes they do run a small charge through to make sure everything is right. But they would (as Dewey Finn) said run it through some place where there are no cameras, no Face to Face, and especially no Federal investigators. The PO is the last place I would use as a trial run. Cameras, FtF, and Postal Inspectors, not to mention other Federal agencies. …
[/QUOTE]

Many (most? all?) post offices now have self-serve kiosks, where you get nowhere near a human postal worker. I can’t comment on whether there’s camera surveillance of those kiosks; I imagine so but since there’s no cash involved, perhaps not (then again, one could presumably use one of those kiosks to get postage to mail something unsavory / illegal / dangerous, so perhaps there is… there, did I qualify that enough? :)). It would seem to be a non-mainstream choice for testing a card but not an impossible one.

I don’t know enough about credit card fraud detection to comment on how they made the determination in the OP’s case. The handful of times I’ve had an account flagged for fraud turned out to be quite incorrect (I was making legitimate purchases each time, and they got declined :mad: ), and the one time I was a victim of credit card fraud, the bank didn’t flag anything at all (a phone-in order at Nordstrom, caught when I reviewed my credit card bill that month).

Those of you who mention having to key in ZIP code, or last 4 digits - how common is that? The gas pumps hereabouts have stickers saying to do so, but it’s never been required - there’s no flashing thing that says “enter ZIP now”. And I’ve never been asked to input the last 4 digits, that’s a new one on me.

31

[QUOTE=gotpasswords]
Speaking as someone in the bank security “backshop” but not as someone actively involved in retail card fraud detection, we have our ways, and some of them do need to be kept secret, otherwise fraudsters will know what’s being looked for.
[/QUOTE]

Man…now I want to know what secret methods the credit card companies use!

Bank: “It looks like someone just swiped Rick’s card with his left hand, and Rick is right handed! Cancel it.”

or…“That swipe had an acceleration of 2.8m/s/s, 0.5m/s/s greater than Rick’s normal swipe. Call him to confirm whether or not he has been to the gym lately.”

or…“Rick just bought a whole new book of $0.41 Star Wars stamps, and he has only posted five of the $0.39 Judy Garland stamps he bought last week. Send in the Feds.”

32

[QUOTE=DrDeth]

Yes, Jurph, sometimes they do run a small charge through to make sure everything is right. But they would (as Dewey Finn) said run it through some place where there are no cameras, no Face to Face, and especially no Federal investigators. The PO is the last place I would use as a trial run. Cameras, FtF, and Postal Inspectors, not to mention other Federal agencies. Bad.
[/QUOTE]

I have no comment about the details of what was done, where it was done, whether it was fraud or a mistake, etc. HOWEVER, I am a fan of mailing lists like This Is True (well worth paying for the “Premium” version) and similar lists and web sites, and have long ago come to the conclusion that a great many criminals out there have IQs substantially less than their shoe size. Just because you (and I) wouldn’t use a place with cameras and security as a trial run does not mean that a brain-dead crook wouldn’t.

33

[QUOTE=tofergregg]
Man…now I want to know what secret methods the credit card companies use!

Bank: “It looks like someone just swiped Rick’s card with his left hand, and Rick is right handed! Cancel it.”

or…“That swipe had an acceleration of 2.8m/s/s, 0.5m/s/s greater than Rick’s normal swipe. Call him to confirm whether or not he has been to the gym lately.”

or…“Rick just bought a whole new book of $0.41 Star Wars stamps, and he has only posted five of the $0.39 Judy Garland stamps he bought last week. Send in the Feds.”
[/QUOTE]

Yeah, me too. :slight_smile: Actually I was talking with my wife, and we think our dog has seen too many TV ads for Bush’s Baked Beans (check out the 4th video down) and is trying to sell my credit card numbers.

DrDeth I don’t know what to tell you, but I can assure you that the charge was not mine. As far as the pattern goes, the only other time I have been a victim of CC fraud was about 10 years ago, a gas station attendant took my CC number and started using it. (pay at the pump was down, and he made an imprint of my card.) He (or his friends) made about 4 purchases in a week, all for less than $20. American Express caught it, and called me. This was on a corporate card that went to a zillion dollars. Beats me why they didn’t try to buy big screen, but they did not.

gotpasswords I’m very glad, and impressed. Whatever voodoo you do, you do well.

34

[QUOTE=Rick]
He (or his friends) made about 4 purchases in a week, all for less than $20. American Express caught it, and called me. This was on a corporate card that went to a zillion dollars. Beats me why they didn’t try to buy big screen, but they did not.
[/QUOTE]

See the comment above about crooks’ IQs being less than their shoe size. :cool:

As for the dog - check your phone bill carefully. There’s probably some calls to 976-WOOF…

35

[QUOTE=gotpasswords]
See the comment above about crooks’ IQs being less than their shoe size. :cool:
[/QUOTE]

At a previous job of mine, someone in a neighboring office was fired for stealing credit card info from a customer. They caught her because she used the credit card to pay for her own utility bills. :smack:

I was wondering if the credit card was getting renewed soon and someone had stolen a new card in the mail, but most of the time cards seem to come with stickers all over them requiring activation from the account holder’s phone number, or answering security questions.

36

[QUOTE=Ferret Herder]
I was wondering if the credit card was getting renewed soon and someone had stolen a new card in the mail, but most of the time cards seem to come with stickers all over them requiring activation from the account holder’s phone number, or answering security questions.
[/QUOTE]

Ohh, you might have just nailed it. A few months ago I was running a credit card for a customer (it was a telephone order) and I get a message to call for a phone authorization. I called my CC processor, they set up a confernce call with the issuing bank and the bank told me that the card was declined becuase it wasn’t activated yet. So it was no big deal in my case, I called the customer, he activated the card and all was well. I wonder, however, if the issuing bank called him later to confirm it.

37

[QUOTE=Ferret Herder]
At a previous job of mine, someone in a neighboring office was fired for stealing credit card info from a customer. They caught her because she used the credit card to pay for her own utility bills. :smack:

[/QUOTE]
Someone in my previous neighborhood stole a credit card and used it to buy things online to be delivered to their home address.

38

[QUOTE=gotpasswords]
See the comment above about crooks’ IQs being less than their shoe size. :cool:
[/quote]
NO argument with this.

:smack: That’s what those calls are. :smiley:

39

[QUOTE=Canadjun]
I have no comment about the details of what was done, where it was done, whether it was fraud or a mistake, etc. HOWEVER, I am a fan of mailing lists like This Is True (well worth paying for the “Premium” version) and similar lists and web sites, and have long ago come to the conclusion that a great many criminals out there have IQs substantially less than their shoe size. Just because you (and I) wouldn’t use a place with cameras and security as a trial run does not mean that a brain-dead crook wouldn’t.
[/QUOTE]

Yes, that is true. Criminals are not only cowardly and superstitious, but dumb too. :smiley: But it is the mix of smart (got CC numbers, made a fake card with electronic info, and smart enough to give it a trial run) combined with the stupid of trying it at the PO? :confused:

But Ferret Herder asks an excellent question- Rick- was it about time for a new card? If s dumbass fuckwit just stole the card from the mail, and just tried it forst place he went to- and the CC company knew that particular C had not been activated- that woudl explain a lot.

40

Possibly, the exp date on my cards was 07/07.
I had not considered this. I was not expecting my new cards for a bit yet, but you might have hit on the answer.
[Guinness guys]Brilliant![/GG]