FF Account just hacked and almost 300,000 points taken

[blackcat20]

There's probably better even better odds than that. Start with the last 4 digits of the QF # on the boarding pass, then try 1234 if that doesn't work.

Birth dates and post codes are also fairly common.

 

[TheBOSman]

Birth dates and post codes are also fairly common.

Some Ford vehicles have number pads on the driver's side door, 5 digits needed. In the US, postal codes are 5 digits. Guess what a lot of people pick, despite it applying to everywhere in the nearby area? My 4 digit PIN on QFF has nothing to do with anything, all of my computer passwords also have nothing to do with anything anyone would really know about me It also doesn't start with 19 . I've thought about changing security questions to nonsensical things (such as making my listed mother's maiden name that of a dog or something) as well. Some banks have gone to a "based on publicly available data" set of questions. One is my "publicly listed" height, however for some reason they are off by several inches from my actual height, which I have been at for 12 years or so now and has always been the height listed on my driver's license. Had to call the bank three times and basically guess (they gave a multiple choice option for the answer to this question) until I got the "correct" height, and now I have to remember that. So, be careful what you wish for with more phone security. I've also had a credit card in my name get used fraudulently before, despite that I had shredded the physical card nearly 18 months before and not used it since.

 

[Happy Trails]

I was once unable to convince a telco of my bona fides as they had the wrong date of birth stored in their system and no amount amount of pleading would get them to budge.
I called back a few minutes later, claiming to be my teenage daughter (who shared the account) and problem solved.

 

[anat0l]

I called back a few minutes later, claiming to be my teenage daughter (who shared the account) and problem solved.

I assume you must be female, otherwise either you do a decent faux falsetto or that's just weird.....

 

[feezable]

Thank you so much for this thread as it prompted me to act on something. About a week ago I noticed a deposit of USD1.50 from a company I didn't recognise into my debit mastercard account. A quick google search this morning and I discovered that they are responsible for many fraudulent transactions. They deposit the funds, confirm the account is active and then wait, sometimes months, before making multiple transactions in one day. A call the the Comm bank and they cancelled my card. This thread saved me a lot of heartache down the track.

 

[Deleted User]

Was thinking this morning that anyone using the qantas toolbar might want to reconsider since all user details are stored within the browser which I suspect could be hacked by a third party...

 

[Pushka]

I was once unable to convince a telco of my bona fides as they had the wrong date of birth stored in their system and no amount amount of pleading would get them to budge.
I called back a few minutes later, claiming to be my teenage daughter (who shared the account) and problem solved.

Vero (credit check people) had my date of birth incorrect. Do you reckon that caused some issues!

 

[will2rob]

Thank you so much for this thread as it prompted me to act on something. About a week ago I noticed a deposit of USD1.50 from a company I didn't recognise into my debit mastercard account. A quick google search this morning and I discovered that they are responsible for many fraudulent transactions. They deposit the funds, confirm the account is active and then wait, sometimes months, before making multiple transactions in one day. A call the the Comm bank and they cancelled my card. This thread saved me a lot of heartache down the track.

Can you tell us who the company is?

 

[will2rob]

Seems to me that Qantascould just adopt a similar system for QFF login as for Qantas Cash, PITA as that is, at least it would be more secure.

 

[feezable]

Can you tell us who the company is?

16 Jan 2014
Return COACH USA INC 201-225-7580 NJ USA
Card xx2260 USD 1.50
Value Date: 08/01/2014
+$1.66

 

[Happy Trails]

I assume you must be female, otherwise either you do a decent faux falsetto or that's just weird.....

Actually, despite my taste in underwear, I am all man.
No vocal tricks were needed, but I was ready to play the outraged victim had they queried my basso profondo.

 

[JohnK]

About a week ago I noticed a deposit of USD1.50 from a company I didn't recognise into my debit mastercard account. A quick google search this morning and I discovered that they are responsible for many fraudulent transactions. They deposit the funds, confirm the account is active and then wait, sometimes months, before making multiple transactions in one day.

So Google reveals they are responsible for fraudulent transactions and the authorities are sitting back doing nothing?

What a horrible society we have created....

 

[Pushka]

So Google reveals they are responsible for fraudulent transactions and the authorities are sitting back doing nothing?

What a horrible society we have created....

No, it's just the criminals of cyber space are always one step ahead. Which isn't surprising. The police will always be playing catchup with the clever ones.

 

[feezable]

So Google reveals they are responsible for fraudulent transactions and the authorities are sitting back doing nothing?

What a horrible society we have created....

They appear to be a legit company, but someone is using their account to verify credit card numbers?? It's a bit confusing really. They are also linked to fraudulent transactions. Someone else on here may understand better why they aren't being stopped. They seem to be a bus company in NJ, but their name pops up repeatedly with fraudulent transactions. Comm bank didn't seem at all concerned. The CS rep just said " yes, that's happening quite a bit a the moment, good thing you were on the ball so no harm has been done"

 

[opusman]

What the banks don't want you to know is that they actually don't really care about credit card fraud. At the end of the day it's the merchants who lose out, as the banks simply take the money back off them.

 

[medhead]

Thank you so much for this thread as it prompted me to act on something. About a week ago I noticed a deposit of USD1.50 from a company I didn't recognise into my debit mastercard account. A quick google search this morning and I discovered that they are responsible for many fraudulent transactions. They deposit the funds, confirm the account is active and then wait, sometimes months, before making multiple transactions in one day. A call the the Comm bank and they cancelled my card. This thread saved me a lot of heartache down the track.

This was precisely the MO when my credit card got hit a few years ago. Small transaction listed as a donation that was reversed the following day on one statement. The next statement $3000 charge. Being a credit card I guess they don't need to wait.

Hope you got to keep the $1.50.

 

[Danger]

Noreen, have you done an AFF deed poll and changed your name to DontGetMeStarted?

 

[DontGetMeStarted]

Noreen, have you done an AFF deed poll and changed your name to DontGetMeStarted?

I did realising I have been pretty naive in the past and lax in security

 

[will2rob]

No, it's just the criminals of cyber space are always one step ahead. Which isn't surprising. The police will always be playing catchup with the clever ones.

It's the nature of policing. State police aren't equipped to investigate transnational crime, the AFP is too small to be effective. Police forces around the world tend to operate on small budgets and are flat out dealing with the crime in their own jurisdictions. Interpol really just coordinates requests for assistance between member nations. You are talking about countries who have very different justice systems and laws in some cases; what is considered a crime in Australia May not be a crime in another jurisdiction. Sure there has been increased cooperation between forces internationally in recent years, particularly regarding terrorism, cyber paedophile and child cough rings, but it is really just a drop in the bucket compared to the volume of transnational crime that is occurring.

 

[Tassey69]

Around three - four weeks ago had a call from the Qantas Store confirming the purchase of a Laptop Computer for around 290,000 points, I said that I did not order a laptop etc, they asked for details which I initially declined to give over the phone, checked my FF account and discovered that 290,000 had been removed for a laptop. I phoned the Qantas Store who confirmed that they had called me earlier to confirm the order. Order was cancelled and another 50K points were also recredited for a gift voucher that was taken around the same time. After providing details of a Police Report regarding the theft and a Statutory Declaration that I had not ordered the Laptop and gift voucher all of the points were recredited, thanks to the staff at the Qantas Store I retained my points, I also now change my pin number regularly