[Closed] CRC security issues?

The police wont look into CC fraud if its under £5K (from a copper) and similarly wont investigate a bike theft if it happens while a big footy match is on.

Be careful in gyms too for what its worth, had my CC nicked from my wallet twice in Virgin Gym, Leeds without my knowledge.

Its dead easy if you fancy getting into it, just lock the locker with dirty socks in, keep key, then when its been replaced go and help yourself to the contents, carkeys, dirty boxxers etc.

They didnt seem to care that they had such a lax system in place. I cancelled my membership soon after and never left anything in the locker again

I havent been very impressed with CRC over this but upon checking my bank tonight im beyond furious. Basically the other week i placed an order with CRC and shortly after i had a call from my bank to say there are some suspicious transactions. This was about a couple of weeks ago so new card and pin sent etc and money refunded. Obviously i didnt know how this had happened but i dont use my card in that many places so when i read all these stories this weekend and the past few days it got me thinking about my CRC purchase just before my details were taken. Over the past few days i have spoken to a senior member of the CRC customer service team just to let them know about this forum topic and other similar ones and about my experience the other week (which is probably linked). Despite all this she remainded adamant that there is no issue and the website is 100% secure etc. etc. but i informed her about the obvious link for so many people on here and the FB page. She said although there is no immediate issue they will investigate each case etc. but basically it aint them 😮

Now i was content with this as i resolved my problems in the last few weeks but unfortunately last week i placed an order (with my new card) to use the £10 voucher (before i knew all of this and the link to CRC) so i check my account tonight (after reading all these cases) and see that there are 2 new payments to O2 😯
I can assure you i will be speaking to them again tomorrow now that i have been stung possibly for the second time (because of them) which i wish could have been avoided but i guess we have all discovered this link to CRC too late.

Really all i can say now is what i said to customer services today, until they can confirm there are no more of these cases and all this dies down (and doesnt re-appear in the future) i will not have the confidence to order from them again and hope everyone else feels the same (as they should IMO).
I also congratulate you if you managed to read all of the above 🙂

Send this and other threads to a couple of newspapers and see who picks it up.
Sure they will.

Send this and other threads to a couple of newspapers and see who picks it up.
Sure they will

Good idea - CRC don't seem to be listening.

They'll start listening when the orders stop coming in. They're in the process of denial so to save the companies good reputation which let's not forget is beyond our shores. TBO I feel sorry for them at the moment because there between a rock and a hard place. Denial and hoping it blows over may work but it could also backfire as it breeds mistrust in there customer base. I for one won't use them again unless I believe the problem has been sorted like many thousands of others out there and that's gonna hurt.

they need to report it to remain compliant (I believe), if they dont then whos to say its not "officially" sanctioned theft (which I doubt) most likely they still need to establish the facts so arent admitting anything. 2 weeks is far too long though imo

Thanks for the heads up - I'm about to buy a new set of wheels, but I'll be avoiding CRC as an option.

Yet another potential victim! Bought some bits last week and the bank contacted me yesterday to say they had blocked O2 prepay and 2 other transactions.

Glad I read this. I used a CRC voucher last week.

Just checked bank and there are 2 £15 O2 pre payments taken from my account!!!

MM

Chatting to a friend last night he commented on how he'd had to cancel his card due to unauthorised transactions.

He's only used that card 4 times in the previous few weeks - guess who he'd used it with twice? CRC

I told him about this thread and he was less than impressed. He'd phoned CRC that day to ask about their security and they claimed no other customers had suffered similar problems.

I for one won't be using CRC for the foreseeable future.

Damn it, I've been done as well. Could be a coincidence, used CRC on the 2nd, two payments to 02 prepay on the 7th.

Does seem like a lot of coincidences. Where is my pitchfork?

lush cosmetics recently did the right thing by its customers and notified them after their web site was hacked, unfortunatley it still made headline news -

[url= http://www.bbc.co.uk/news/technology-12254282 ]bbc news[/url]

interesting to see how the story initially unfolded and the problem came to light by customers posting on their forum -

[url= http://forum.lush.co.uk/Forum/viewtopic.php?f=5&t=93172 ]lush forum[/url]

on a slightly different note, does anyone know of a bank offering a credit card that texts your mobile for authorisation for every transaction ?

cheers!

Perhaps we should revert back to paying for stuff with cheques, you could order it on CRC, they send you an invoice, you pay it with a cheque.

No security issues there - unless there is a postman who changes his name to CRC.

I used them the otherday - no fraud on my account so far though.

Last time I used chainreactioncycles was last year. Used paypal as it just seemed easier.

It appears it was more secure.

I have emailed 'singletrack' about this but one thing I do feel that magazines don't do is champion 'consumer rights' in any way.

They clearly have a difficult path to tread between keeping advertisers happy and their readership informed but I can't help thinking that there is enough anecdotal evidence here (I haven't checked any other forums) to at least contact CRC and ask them for a comment to appear somewhere on the site and also to talk to banks and acquirers to understand if there is a pattern in an increase in fraud and CRC purchases being made. The banks have enough info here to make the connection, even if CRC chose to deny it - the issue is that the banks have no financial gain to be made from doing the work - the loss is all CRC's/O2's etc.

CRC, as a web only business, have to understand that confidence in their processes is key and that by saying nothing the problem won't go away - just fester.

Tbh, I'm surprised they haven't gone down the Wiggle route of waving lawyers at stw and having this thread pulled - it must be embarassing, to say the least, to have this thread on a forum they sponsor.

Lloyds will text on every non uk transaction.
They also called shortly after they blocked 3 payments on my account to check for fraud. Answered, called them back as requested for security and they cancelled the card.

Just checked my credit card, 4 fraudulent transactions after using it with CRC and the £10 voucher!!!

Its strange how CRC have still not issued a statment and are still saying that there system is secure...

I only used CRC on this occasion as they offered the voucher, and I needed just over £50 worth of stuff

I switched to ukbikestore after CRC messed me about re some bars, a few months ago. Prices are similar and service equaly as good. I will be staying with them for future bike parts.

Did everyone who has been scammed click through the link on the email?

no, some people just went to the site as normal they said.

I do actually want to buy something from CRC but am too hesitant now! Anyone else know of AM41's going for a comparable price...

I went in normally (I think).

I have rung MBNA and informed their frued department that I believe this is the the source of the fraud and they are looking into. This will be my second card that needs replacing this year!

jim what size you after? we got a random set in...

psychle....

no some people just used CRC last week

I shopped direct of the site, no link or voucher used and I got stung,
PJ.

coolio... I also shopped at CRC last week and used the £10 voucher, but no fraud on my account (yet... touch wood!), been keeping a close eye on it though!

i went in normally too as my voucher had expired by the time i made up my mind about my wheels 🙄 Am glad the bank picked up the transactions on my cc and called me, but i have now have no debit or credit cards and won't have for a week.

I'd like to be smug here and say I only ever use Paypal and have no problems, however the gits still haven't processed my order from Sunday yet 😀

My Paypal is linked by DD to my bank account, which I assume is more secure anyway, harder to set up fraudulent DDs than use a card number I guess?

One downside, it does make it very easy to spend money 😀

Same here...

I ordered on the 26th Feb and sure enough 2 O2 vouchers totalling £30 have been paid for using my card.

My bank card has been cancelled and new ones are in the post. I've also got a fraud claim form to fill in too.

jim what size you after? we got a random set in...

😀 I'm after a size 46 - I was in yer shop last week actually buying women's shorts and grease (don't ask) but didn't think to check. I bought a pair of Am40's in size 47 from the coop sale but they are too big in use, they do have a 46 in but they now want £80 for them and I'm too tight, my mistake buying the wrong size obviously but hey I only have so much money to spend on fugly shoes 😆

ah i think we got some 44's.

yeah i did get a report from the team about a tall guy buying ladies clothes and lube etc. It's not something we like to encourage...

I have emailed 'singletrack' about this but one thing I do feel that magazines don't do is champion 'consumer rights' in any way.

I will bet you 2 O2 cards they will mention nothing in anyway detrimental to CRC!

Why i use a pay as you go credit card. It's an arse sometimes when you need to buy something straight away but you have to pop into a shop to load it up first. But rather have that tiny bit of hastle over having to wait on the bank to sort out a refund and wait for a new card

I used the voucher.

My money has been refunded by the bank. Didn't seem interested when I told them where the security floor was (HSBC).

MM

ah i think we got some 44's.

yeah i did get a report from the team about a tall guy buying ladies clothes and lube etc. It's not something we like to encourage...

doh. It's the 21st century and I'll wear what I want :o)

Ordered some bits from CRC last week not using a voucher and had £100 taken from my account yesterday by lbb parking. Amount has been refunded by the bank and card cancelled.

heres a hypothetical question for you, if I now used CRC, knowing about this risk and having contributed to this thread and I suffered fraud on the card as a result, when Im speaking with my bank to sort it and if I mention this thread could there then be an issue because technically I knew about it before placing the order so put the card at risk myself?

I need some XTR compatable Middleburn chainrings and CRC is by far the cheapest but I don't fancy risking them at the moment

I use crc on a regular basis, done the only sensible thing and cancelled credit card, yea it's a pain in the arse but it is a NECESSARY SAFE GUARD until this is resolved.

heres a hypothetical question for you, if I now used CRC, knowing about this risk and having contributed to this thread and I suffered fraud on the card as a result, when Im speaking with my bank to sort it and if I mention this thread could there then be an issue because technically I knew about it before placing the order so put the card at risk myself?

I need some XTR compatable Middleburn chainrings and CRC is by far the cheapest but I don't fancy risking them at the moment

I'd say no, you would not have any problems claiming against your CC company. You might want to use paypal instead though?

FWIW, I bought some bits at the end of February when I got the email voucher, and so far the bank account is okay.

Balls.

Used CRC last week and just checked my account.

Two £15 payments to o2 been put through today.

Card cancelled and money refunded.

Very interesting thread. I used CRC for the first time ever around 18 months ago and within a week or two, my credit card company called me up to ask if I'd bought Orange topup £10. I said "no" and they said that they'd suspected fraud (but not on my behalf, incidentally), cancelled the cards and sent new ones. They didn't give any details and I was left impressed - and mystified - that they'd managed to pick it up. I didn't link it with CRC at the time, but looking back and reading some of the posts here, it's one heck of a coincidence......

I have rung MBNA and informed their frued department that I believe this is the the source of the fraud and they are looking into.

Card company have suffered no loss as they pass the chargeback onto CRC who take on the chin and hope everyone keeps spending money with them.

so the 'victim' - CRC - just writes off the cash and puts some better security in.

It'll be O2 etc that'll be taking the hit, not CRC AFAIK

02 would be able to cancel the top-ups wouldn't they?

02 would be able to cancel the top-ups wouldn't they?

I would have thought so but there's the John Lewis & other stuff too

although I suspect the top up is sold & used rather quickly