I’ve posted on this thread twice explaining / ranting about this but I believe there’s something significant about the way it happened to me.
I initiated the card transaction by email. It was a refund that I had requested from an order that was never delivered.
That to me rules out any Keylogger / Trojan concerns.
If someone had intercepted my details a month previous to my refund, why would you wait till after the refund was issued ? It must be pointed out that no other purchases were made in the meantime.
I use Bluepoint A/V btw, which Is only one of a handful of A/V programs that picked up the banking Trojans.
If my card details were held on file for a month, where could they be accessed at ?
How are the refunds performed? Does CRC do the refund transaction onsite or is it done by a third party off site ie an ecommerce company.
I have no idea I’m just a raggy arsed engineer & biker but it would be interesting to know.