PSA: new credit card fraud

posted by robert - May 23rd, 2005 at 5:36 PM

Went by Publix Saturday afternoon to pick up a few items …and at the checkout, the cashier informed me, somewhat sheepishly, that my Discover card was rejected. Hmm. “Well,” I think, “I did make a somewhat-out-of-the-ordinary purchase from Dell on Friday… but not cool.” Resolving to check into it upon arriving back home, I whip out the Visa and all is made right.

Of course, I promptly got distracted when I got home (Nichole and I parked it in front of a movie), so I had completely forgotten about it when we left to meet Preble for some grub at the ever-delicious Folks. Dinner was fine, simply fine, and when the bill arrived I pulled out my favorite star-spangled plastic to even up my debt with the house. This time, the cashier/waitress not only returns with a sheepish look on her face, but she brings me a slip of paper from the card-receipt machine: “Transaction rejected”, or something similar. Very not cool — although it is abstractly entertaining how the cashiers always seem embarrassed by some clod’s card getting rejected. Now doubly embarrassed (once over just for it having happened at all, twice over for realizing that I forgot to check on it earlier in the day), we beeline straight home to talk to the friendly people at 1-800-DISCOVER and find out “WTF”, as the kids say. I had some theories about what was up, chief among them that the aforementioned Dell purchase had flagged the Discover account monitors that something was amiss in my charge habits and to put things on immediate hold (I have notified them of an identity theft attempt in the past, so they’re pretty quick on the trigger with my account now). Thing is, had that been the case, the standard protocol — as has happened previously — is for them to call me and verify that the offending transaction is indeed legit …and of course there had been no such phone call. Other than that possibility, I had no idea what might be going down.

Talking to a friendly “account executive” cleared things up, and the truth was something I hadn’t heard of before. Apparently, a “verification request” was made on my card number, most likely over the Internet. This sort of thing is no big deal, as it’s the first half of every transaction that I use my card for. In this case though, the second half — the charge amount — never came through. This, as the fellow explained, is a relatively new tactic that credit card scammers have developed. It would seem that there are readily available ways to somewhat anonymously make these verification requests, and either tag on a $0.01 amount (if the system being used requires both at once) or just never send the second-half amount follow-up. The whole point, of course, is to identify valid accounts — so that they can be filed away and used down the road for something “for real”. Discover, being the sharp tacks that they are, is up on the game and now uses such events as reasons for freezing/deactivating accounts.

I found this all very interesting because at dinner that very night, Preble was relating to us a story about how someone he knows was out a not-inconsequential amount of money because of some credit card scammers — and they used a valid account number. As it turns out, the rest of the info they supplied didn’t check out, and the account only worked one time (for one charge attempt), but that was enough unfortunately.

All in all, I was fortunate: the old account was closed, Discover is shipping me a new card in 3-7 days, and no unauthorized transactions were posted.

3 Responses to “PSA: new credit card fraud”

  1. Adam Says:

    It’s good that Discover is on the ball, but in my mind something fairly fundamental needs to change here. That’s a pretty significant inconvenience to you, their customer, for a fraud attempt. Imagine if that were your only credit card, as was the case when my number was compromised three years ago (right before I went on vacation).

    I’d like to see more things along the lines of what American Express’ “Blue” card can do along with a smart card reader — generate a unique number for every transaction. If the physical card is compromised, you’re still in trouble, but I would venture that the vast majority of these cases don’t involve physical card theft.

  2. ur'dad Says:

    Sorry to hear of your problems, but glad it wasn’t any worse.

    For info, I am now using the Discover Deskshop feature for online shopping. It’s not a smart card, but it works well for online stuff…

    http://www2.discovercard.com/deskshop/

    “Discover Deskshop® is a free shopping tool that substitutes a secure number for your real Account number. Feel confident your real Account number is never given to merchants.”

    So far it has worked fine for me.

  3. ur Mom Says:

    I have a credit card that I use only for internet purchases.

Leave a Reply