Forum menu
CRC security issues...
 

[Closed] CRC security issues?

Posts: 177
Free Member
 

Bill

Not denying that using a debit card is a bad idea.

But the :FACT: that this has happened and CRC are denying all knowledge, and not listening and fixing the issue is what gets me.

Perhaps next time you and your credit card will not be so lucky, as the loop hole in there system grows....


 
Posted : 08/03/2011 10:17 am
 anc
Posts: 0
Free Member
 

I'm thinking the email with the voucher is the main suspect. If I remember you had to click the link on the email to register the voucher on your account, this may have done something which allowed the crims to log your card details.


 
Posted : 08/03/2011 10:23 am
Posts: 0
Free Member
 

You didn't have to click on the link did you? I don't think I did, just entered my email address in the 'do you have a voucher' field before paying... maybe that's why my card hasn't been pinged (yet)?


 
Posted : 08/03/2011 10:26 am
 Drac
Posts: 50620
 

So someone steals from you then you need your head examining even though you used a 'secure' process to get there. So if I chain my expensive bike up and it still gets stolen it's my fault, I should have left a cheap one there.


 
Posted : 08/03/2011 10:28 am
 Drac
Posts: 50620
 

If I remember you had to click the link on the email to register the voucher on your account,

No you just needed to use your account with that has email registered.


 
Posted : 08/03/2011 10:29 am
Posts: 0
Free Member
 

Unlike Wiggle CRC, don't store you CC details in your account - they must get an authorisation from the CC and then they are allowed to charge that card when the goods go out - like you do at a hotel when you book etc?


 
Posted : 08/03/2011 10:37 am
 anc
Posts: 0
Free Member
 

Nope just checked the email again and there is a link in green at the bottom which says "Click here to activate the voucher now!" Now I'm not saying there weren't other ways to activate it but thats what most people will have done and I reckon it could be a weakness.


 
Posted : 08/03/2011 10:39 am
Posts: 58
Free Member
 

I didn't click on, or use, the £10 voucher as I hadn't had it when I made my purchase 8 days ago, I did get the £10 later that same day though and was going to use it but items I wanted were not in stock - so you still might get fleeced?


 
Posted : 08/03/2011 10:40 am
Posts: 61
Full Member
 

I didn't use the voucher at all, my purchase was made after it had expired and was for a sum less than £10.


 
Posted : 08/03/2011 10:47 am
Posts: 24
Full Member
 

I didn't use the voucher. Still got done. 😥


 
Posted : 08/03/2011 10:48 am
 anc
Posts: 0
Free Member
 

Oh well I'll stick to the day job :mrgreen:


 
Posted : 08/03/2011 10:49 am
Posts: 0
Free Member
 

TBH the link doesn't do anything apart from telling CRC you clicked on the link in the email as you still have to login and put you email address in the voucher box?

[url= http://www.google.co.uk ]
***.chainreactioncycles.com/Information.aspx?TranslationLargeID=1011&PartnerID=6615[/url]

That link I assume tells you what the link is for and the method of origin i.e. the email - just a tracker?


 
Posted : 08/03/2011 10:52 am
Posts: 6253
Free Member
 

shocking, absolutly shocking.

if they saw this thread im sure they would agree its more than just coincedence!

i shall not be buying from there for a while, whilst it could be a computer hacker type, it could also be a member of staff that has done something similar there end! im not impressed, and to turn a blind eye and suggest your virus software isnt upto date is merely just passing the book! shocking!


 
Posted : 08/03/2011 10:54 am
Posts: 9
Free Member
 

More likely they're not admitting anything whilst there is an ongoing investigation into this.....


 
Posted : 08/03/2011 11:05 am
Posts: 919
Free Member
 

Email them this link. Good customer feedback.


 
Posted : 08/03/2011 11:13 am
Posts: 0
Free Member
 

I have complained to CRC about this issue. As yet I am awaiting a response.
I do not understand how this works? Can some explain how the criminal get money from buying lots of O2 prepay as per above replies?


 
Posted : 08/03/2011 11:42 am
Posts: 18
Free Member
 

Well they get the O2 credit, but it's more likely that they're tester purchases prior to going and attempting to buy something much bigger, like furniture, TV etc. I think a few people up there ^^ have reported a couple of £1-10 purchases, followed by something more in the region of £1000-1500.


 
Posted : 08/03/2011 11:45 am
Posts: 0
Free Member
 

Not linked to CRC but I have had several fraudulent claims on my CC over the years - mostly apple online store as they do not require any security apart from the CVV 👿

As above they try the card for a small purchase under £10 to test the card, then they will slam if for as much as they chance - prob not over £1000 as that might get blocked my the CC company!

TBH if this is true (Big IF) then you and CRC are the victims - the people we should be castrating are the theives!


 
Posted : 08/03/2011 11:51 am
Posts: 1
Free Member
 

I've just taken a call from my bank, as two transactions have come off my credit card having used crc on sunday. Credit card stopped and got to cancel my switch card too 🙁


 
Posted : 08/03/2011 1:15 pm
 ART
Posts: 1073
Full Member
 

Arghhh this is turning me into a paranoid account checker... 😯 still OK so far.....


 
Posted : 08/03/2011 1:36 pm
Posts: 0
Free Member
 

Arghhh this is turning me into a paranoid account checker... still OK so far.....

+1

I tend to check my accounts on online banking daily anyway to see what is coming and going, but I'm now nervous to open the account I used to buy some bits from CRC with the other week.


 
Posted : 08/03/2011 1:40 pm
Posts: 58
Free Member
 

They do know about this thread, I spoke to them earlier, they assured me they are doing all they can.


 
Posted : 08/03/2011 1:42 pm
Posts: 251
Full Member
 

[i]they are doing all they can.[/i]

so they accept there's an issue?

I which case going public and emailing anyone who's placed an order telling them what to do/expect would be the least they could do.

Unless they know they've blocked whatever hole they've got then stopping taking card paymnets might be good?


 
Posted : 08/03/2011 1:44 pm
Posts: 20669
Full Member
 

Arghhh this is turning me into a paranoid account checker... still OK so far.....

Same here - normally I log on to my CC account about twice a month (once when I make a payment to it and then once to just check all is in order), now I'm checking it twice a day!


 
Posted : 08/03/2011 1:45 pm
 beej
Posts: 4216
Full Member
 

Using stolen card details for prepay credit is for call selling operations.

Buy/obtain prepay phone/SIM
Top up with stolen card numbers
Charge people 5p/min (or whatever) to use the phone - generally for international calls.

Alternative is to sell the SIM with £50 credit for £25.

O2 transactions will originate in Slough as that's where their head office is, and hence where their merchant account registered.

Same for Vodafone/Newbury.


 
Posted : 08/03/2011 1:53 pm
Posts: 0
Free Member
 

4 months ago I posted on the singletrack forum about CRC

I paid using a credit card that I very rarely use and have now found that some fraudulent transactions are appearing on my credit card

[url= http://www.singletrackworld.com/forum/topic/crc-account-history ]link[/url]

Of course this may have been circumstantial and it might have been my anti-virus security at fault but it is another event worth logging.


 
Posted : 08/03/2011 1:57 pm
Posts: 0
Free Member
 

Just had my card blocked ,turns out someone has been trying to buy air tickets ,last transaction was chainreaction ,last time i use them


 
Posted : 08/03/2011 2:19 pm
Posts: 84
Full Member
 

Yep just got a phone call from my bank a few minutes ago, someone had tried to buy a £30 O2 top up. The transaction was stopped & card cancelled etc.

The bank person said they were aware of a large amount of cards being cloned or something.

The last thing I bought on the card was something from CRC last night...


 
Posted : 08/03/2011 2:32 pm
Posts: 0
Free Member
 

Just happened to us too. Two £15 O2 vouchers. Bloody Sainsburys delivery is supposed to be coming tonight!

I cant believe CRC havn't realised a statement about it. I've not been done before and will be writing a strongly worded email to crc about it. I'm not a happy bunny and could do without this hassle this week.


 
Posted : 08/03/2011 3:14 pm
Posts: 1
Full Member
 

My last purchase was CRC last week and I have just been stung with £1900 worth of charges, the card is now cancelled!


 
Posted : 08/03/2011 3:28 pm
Posts: 0
Free Member
 

Oh and just in case it is a virus can anybody recommend any anti key logging software?


 
Posted : 08/03/2011 3:31 pm
Posts: 0
Free Member
 

Chain reaction have just called me and assured me there web service is secure.
This may be true but they would not rule out an employee taking card details.

So basically sorry but tough!

Won't be shopping with them again unless they send another voucher and then I will use pay pal.


 
Posted : 08/03/2011 5:25 pm
Posts: 19
Free Member
 

My card was done also. Ordered last week.

This morning 3 purchases for 02 mobile top ups tried to be put through on my card for different amounts!


 
Posted : 08/03/2011 5:26 pm
Posts: 0
Free Member
 

I expect they can't say anything ATM even if they are or wanted to (which like Wiggle they are unlikely to) if the police are involved?


 
Posted : 08/03/2011 5:30 pm
Posts: 0
Free Member
 

You can put lots of Security in place , but most of the time it will be an insider. Last company I worked at sacked a total of 4 people over 12 month period despite constant IT security updates and procedures.


 
Posted : 08/03/2011 5:31 pm
Posts: 251
Full Member
 

most likely scenario is that there's code been 'introduced' to their servers that trapped card details before they were passed through to the card auth company - they won't store them locally but they will be in memory briefly.


 
Posted : 08/03/2011 5:32 pm
Posts: 0
Free Member
 

And you will find the police won't have much to do with it. It's the CC company's problem.


 
Posted : 08/03/2011 5:33 pm
Posts: 0
Free Member
 

Everyone except disgruntled cardholders seem to be waiting for someone else to do something.

Most of the fraud on my card was online orders we must have an address?

I know the police have allot to do, they must have the overtime they claim, but come on!


 
Posted : 08/03/2011 5:35 pm
Posts: 1012
Free Member
 

Why would the police not be interested? It is fraud and theft.


 
Posted : 08/03/2011 5:58 pm
Posts: 251
Full Member
 

in my case because tyhe card company refunded when I was victim of this I hadn't suffered a loss and therefore wasn't the victim of a crime.

CRC are unlikely to want to involve police due to adverse publicity

Card company have suffered no loss as they pass the chargeback onto CRC who take on the chin and hope everyone keeps spending money with them.

so the 'victim' - CRC - just writes off the cash and puts some better security in.


 
Posted : 08/03/2011 6:00 pm
Posts: 919
Free Member
 

Its not likey to feature in crime report / statistic, unless CRC ring the police - you wont as you will be refunded by the card company, who in turn will get the money from CRC.

CRC in turn will incure a cost which they then pass on to customers in the end.

The amount lost due to card fraud is massive, it ultimatly gets passed back to the retailer who passes it on to us in the end.


 
Posted : 08/03/2011 6:16 pm
Posts: 0
Free Member
 

Bollox! used them this morning before reading this, not had a problem before [crosses fingers]

Cheers for the heads up


 
Posted : 08/03/2011 6:46 pm
Posts: 0
Free Member
 

I was buying new frame today (not crc) and my card was turned down ,so had to pay with another card ,phoned credit card company they said someone has been trying to order expensive flight,s and stopped it,and where was my last purchase ? crc nuff said


 
Posted : 08/03/2011 7:33 pm
Posts: 77
Free Member
 

Yep, another here. Only just opened the thread and checked the account - sure enough £15 O2 prepay (Slough) 🙁 . Cards being cancelled as I type 👿

Hey, look on the bright side - at least I can't buy any more frames.


 
Posted : 08/03/2011 7:37 pm
Posts: 0
Full Member
 

This happens every day to hundreds of people - the cops aren't going to drop their donuts to investigate and the banks just take the hit. The Shell garages around Edinburgh had the same thing a few years back, resulting in all my money being drained from my account on a fake card in the US, but Shell just issued the usual statement.

Won't be shopping with them again unless they send another voucher

Love that 😆


 
Posted : 08/03/2011 7:41 pm
Page 3 / 22