cancel
Showing results for 
Search instead for 
Did you mean: 

Credit card cloning.

salmo
Rising Star
Posts: 57
Thanks: 17
Registered: 07-04-2016

Credit card cloning.

Contacted by my bank today re a transaction on my credit card for £1800 at a casino in Detroit which they had stopped. (checked it was genuine by calling them back using number on card after phoning someone to check the line was not left open)  I have just returned from holiday and had spent a night at a hotel in Atlanta. The hotel used my card to put a block on some money as many hotels do against breakages etc. This was the only time that I used my card on the holiday and as it is a recently acquired card it has only been used 3 times before.

I can only guess my card was cloned at the hotel as it was only the only time that anyone else had handled the card as the three other transactions were several weeks ago and over the phone. The fraudulent transaction was a card swipe and PIN was not used.

Can a card be cloned by information given over the phone or does the card have to be physically copied? If it has to be physically copied then the hotel check in staff must be responsible.

 

 

7 REPLIES
Community Veteran
Posts: 7,149
Thanks: 51
Fixes: 2
Registered: 30-08-2007

Re: Credit card cloning.

Having been the victim of the same sort of thing recently, where my debit card was used by someone else the obtain £3500 of events tickets. Fortunately this was spotted (by chance) in the very early attempt of the fraud and everything was stopped and sorted out for me.

This resulted in a genuine payment for a very recent new central heating boiler installation being held up by my (real) bank whilst it was investigated by my banks fraud department. I was asked to confirm that I had actually made the payment, by text, returning certain information they sent me. I followed this up by calling the banks fraud department via a published switchboard number to confirm that I wasn't being a victim of a double fraud, I wasn't. Maybe a bit drastic, as only my bank and the payee's bank would have known about the transaction at that early stage. But at this time I'm in the mood to be ultra careful and have no problem with my bank's actions at all, even if it did delay the money transfer slightly to the heating company.

And, a further victim of identity theft (see thread "Free Money anybody") from a genuine bank. I have received from that bank information that a marker is to be added to my name and address by CIFAS the UK Fraud Prevention Service that will question any attempts to open accounts. This will delay slightly a genuine opening.

More information can be found at www.identityfraud.org.uk

Edit: the observant may notice I misspelt identity in the link. This has been corrected.

Experience; is something you gain, just after you needed it most.

When faced with two choices, simply toss a coin. It works not because it settles the question for you. But because in that brief moment while the coin is in the air. You suddenly know what you are hoping for.
Community Veteran
Posts: 6,580
Thanks: 201
Fixes: 14
Registered: 16-02-2009

Re: Credit card cloning.

If it was an over the phone then they would need all the details including the 3 digit code at the back (do they use that in the US?).

My CC bank has phoned me twice in the past month about possible fraudulent transactions, unfortunately this is automated and a PITA to navigate, having to listen to your last 6 payments and decide if you made them. Buying a game from the game changer charity seems to have triggered it for me the first time.
Community Veteran
Posts: 18,542
Thanks: 190
Registered: 12-08-2007

Re: Credit card cloning.

Yes they do use the security code in the US. Over the past  month I have used my cards numerous times over the phone here, both when talking to a human being and also on websites. They simply want the card number, expiry date and security code.

 

One of my cards that I use here is a BankAmerica Visa. The billing address is in the UK. Some websites ask for this billing address. If I give the correct (UK) address I can't proceed with my order. If I give my US residential address, which is not the billing address, I can complete my order. How is this secure I wonderRoll eyes

salmo
Rising Star
Posts: 57
Thanks: 17
Registered: 07-04-2016

Re: Credit card cloning.

I've been informed that the fraud was committed by someone swiping a card so I assume my card was copied at the hotel as I believe the magnetic stripe contains more information than is given over the phone.

Community Veteran
Posts: 18,542
Thanks: 190
Registered: 12-08-2007

Re: Credit card cloning.

What additional info would the strip contain? Surely your bank will be the one to query a payment that is attempted once a payment request is made.

Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Credit card cloning.

The mag stripe contains only the information which is printed on the front of the card. Nothing more.

--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed
MJN
Aspiring Pro
Posts: 1,067
Thanks: 32
Fixes: 2
Registered: 26-08-2010

Re: Credit card cloning.

That's not quite true - it can also contain other information to support 'card present' transactions to prove the merchant has the card (or, unfortunately, a direct copy!) in their hand and not just the information visibly obtained from the front.

 

What it doesn't do, however, is contain the code from the back (or front for Amex) that is used for 'card not present' transactions but this is easy for a skimmer to obtain if they are capable enough to the copy the mag stripe just by taking a sneaky look whilst doing it!