Question - Wife's credit card continually compromised

[Aerkuld]

I'm looking for help or ideas here on why this is happening. First a little background;

Wife and I have several credit cards between us. Two of these are joint cards where both she and I have cards on the same account. She has accounts at various online businesses which are paid by her credit card.
The problem; She has her card (let's call it card 'A' on one of the joint accounts) compromised about every two months. Seriously, this has happened five or six times this year. I suspected one of the online business either had someone in the processing department stealing card details, or their database was hacked. After the last round I suggested she bills different things to different cards in an effort to help identify the culprit.
Well, this morning she discovered a different card (card 'B') has been compromised. Fortunately she only used that on one account and doesn't use it for over the counter transactions. Great we thought, we've found the problem. She called the credit card company, stopped the old card and ordered a new one. While online she checked her other accounts and all was well. This was around 10am.

At 2pm this afternoon she gets a notification that her joint card (Card 'A') has been compromised again. This happened between her checking at 10am and 2pm. I would assume if someone steals card numbers they don't use it immediately, so this could be complete coincidence, but what methods exist for BOTH card details to be known?

The most simple answers are, more than one online site has security issues, or cards were compromised in different ways and this is just a coincidence. How else would could someone obtain her card details? I know about skimmers on gas pumps or point-of-sale key pads, so that's a possibility for one of the cards. Someone suggested one of the credit reporting agencies, but surely they'd know account details, but not card numbers?

Any ideas as to how both cards could be used fraudulently both within 24 hours?

[RKDinOKC]

Changed my Mom's card that got frauded and the new one was not good until she used it at an ATM. The frauders charged the new card before it was even activated. Happened on the next new replacement card as well. Pulled all her money and changed banks. No more problems. Hint: it was Arvest bank.

I have two separate accounts for my cards. One card I use for things like bills ie. recurring payments. The other is not a credit card is is a debit card with no credit on the account or card. It will only charge what is in the account. I use it for both in-person and on-line purchases. My carry around card. Put money in the account for my weeks budget and add money if planning to purchase something out of budget. It it gets hacked they don't get any more than my weeks budget. (which I should get back).

The best part is I don't have to update my card on all my recurring bill acounts if the carry around/internet debit card/ budgeted account is hacked.

[stomachmonkey]

Originally Posted by Aerkuld

I'm looking for help or ideas here on why this is happening. First a little background;

Wife and I have several credit cards between us. Two of these are joint cards where both she and I have cards on the same account. She has accounts at various online businesses which are paid by her credit card.
The problem; She has her card (let's call it card 'A' on one of the joint accounts) compromised about every two months. Seriously, this has happened five or six times this year. I suspected one of the online business either had someone in the processing department stealing card details, or their database was hacked. After the last round I suggested she bills different things to different cards in an effort to help identify the culprit.
Well, this morning she discovered a different card (card 'B') has been compromised. Fortunately she only used that on one account and doesn't use it for over the counter transactions. Great we thought, we've found the problem. She called the credit card company, stopped the old card and ordered a new one. While online she checked her other accounts and all was well. This was around 10am.

At 2pm this afternoon she gets a notification that her joint card (Card 'A') has been compromised again. This happened between her checking at 10am and 2pm. I would assume if someone steals card numbers they don't use it immediately, so this could be complete coincidence, but what methods exist for BOTH card details to be known?

The most simple answers are, more than one online site has security issues, or cards were compromised in different ways and this is just a coincidence. How else would could someone obtain her card details? I know about skimmers on gas pumps or point-of-sale key pads, so that's a possibility for one of the cards. Someone suggested one of the credit reporting agencies, but surely they'd know account details, but not card numbers?

Any ideas as to how both cards could be used fraudulently both within 24 hours?

If this is only happening with online transactions / accounts I'd seriously be looking at wiping every PC I had.

Sounds suspiciously like a key logger or similar malware.

Is she an iPhone or Android user?

[wildthing]

Someone in your household taking it from her wallet and is using it on porn sites.

(Saying this half-jokingly. This has happened in one household I know wink wink.)

[masraum]

Does she have her own computer/iPad/whatever that she uses for almost everything? If so, then my guess is THAT is where the problem is. Some sort of trojan/keylogger type app that captures things when she uses them.

We get hit every once in a while, but for us, it's probably every couple of years. If it's happening that frequently, then either she's got a device that's compromised or someone in the household is suspect in my opinion. There aren't that many bad crooked things out there. Or maybe change where/how she does business.

[masraum]

Originally Posted by stomachmonkey

If this is only happening with online transactions / accounts I'd seriously be looking at wiping every PC I had.

Sounds suspiciously like a key logger or similar malware.

Is she an iPhone or Android user?

ding, ding, ding, that's my vote.

[cabmandone]

Originally Posted by stomachmonkey

Sounds suspiciously like a key logger or similar malware.

+1. I was thinking the same when I read the OP.
And if you suspect a key logger, I'd wipe and then change passwords for every site I have a login for just to be safe.

[flatbutt]

Is the card number changed after every hit? If so then it sure sounds like tracking.

[Aerkuld]

That's helpful. She has her own computer which only she uses, but we've replaced her PC recently with a laptop. It's possible that's the problem, so I'll give it a check-over. My thoughts were, unless this is a coincidence, that there's a common point, be it item or location. My other thought was where she leaves her bag at work.

I don't remember using her card on porn sites, and I'm the only other person in the house.

[stomachmonkey]

Originally Posted by Aerkuld

That's helpful. She has her own computer which only she uses, but we've replaced her PC recently with a laptop. It's possible that's the problem, so I'll give it a check-over. My thoughts were, unless this is a coincidence, that there's a common point, be it item or location. My other thought was where she leaves her bag at work.

I don't remember using her card on porn sites, and I'm the only other person in the house.

If you backed up the old PC and migrated her stuff to the new laptop then......

How about the phone?

iOS or Android?

[Bill Douglas]

I used to work for a credit card company. 19 out of 20 frauds were by Chinese Restaurants. Ah, the price of good dumplings.

[GH85Carrera]

The last time my card was compromised it was a local very popular Mexican restaurant employee. He went after just cards from one bank. The police led him away in handcuffs. When I went to get another car at the bank, they had used a stack of blanks cars they had in stock replacing cards from that one thief's actions. I did not loose one cent, just the time to go get another debit card.

[PetrolBlueSC]

Are the unknown users spending more or less than you wife?

[URY914]

My wife saw a pattern of our cards getting hacked after she you'd use them on groupon purchases.

[pwd72s]

Originally Posted by Bill Douglas

I used to work for a credit card company. 19 out of 20 frauds were by Chinese Restaurants. Ah, the price of good dumplings.

I use cash only at restaurants...geeze, how tough is it to pick up cash at your bank?

[Oracle]

I would think that one of the places she's shopping at is either hacked or they're cloning her card.

[svandamme]

Cleary wife is the weakest link.
Replace wife.

[SCadaddle]

My sister used her tablet doo dad to pay several of her bills online through her checking account. I stopped by her house the other day to retrieve her mail. Amongst the items in the mail box was her bank statement. I opened it up and was quite surprised to see that she made a phone payment to the electric company in the amount of $700 on the 20th of last month, and a day later on the 21st another phone payment for about $250 to the cable TV company.

Seeing as how my sister passed away on the 14th of last month, and her funeral was on the 20th of last month, I found these charges a little odd. So did the bank. The bank replaced the money in her account and now they are investigating the
culprit(s). I so hope it is the part time caretaker that forged $3500 worth of checks while she was "taking care" of my sister because she had a very flexible real job, working from home as tech support for account problems with Ebay via phone, or so she said.

That being said, has it ever occurred to you guys that anytime you hand someone a paper check drawn on your account, you are also handing them not only your bank account number but the routing number as well? What more do you need to make payments to vendors via automated telephone?

[GH85Carrera]

Originally Posted by SCadaddle

My sister used her tablet doo dad to pay several of her bills online through her checking account. I stopped by her house the other day to retrieve her mail. Amongst the items in the mail box was her bank statement. I opened it up and was quite surprised to see that she made a phone payment to the electric company in the amount of $700 on the 20th of last month, and a day later on the 21st another phone payment for about $250 to the cable TV company.

Seeing as how my sister passed away on the 14th of last month, and her funeral was on the 20th of last month, I found these charges a little odd. So did the bank. The bank replaced the money in her account and now they are investigating the
culprit(s). I so hope it is the part time caretaker that forged $3500 worth of checks while she was "taking care" of my sister because she had a very flexible real job, working from home as tech support for account problems with Ebay via phone, or so she said.

That being said, has it ever occurred to you guys that anytime you hand someone a paper check drawn on your account, you are also handing them not only your bank account number but the routing number as well? What more do you need to make payments to vendors via automated telephone?

One of my wife's friends was paranoid about shredding all he junk mail if it had her name and address on it. I pointed out he name and address are listed in the phone book. And she wrote check for everything because she did not trust credit cards. I pointed her checking and routing number on a check and she almost when into meltdown.

I use my credit card at restaurants mostly because I want the wait staff to pay their fair share of taxes on the tips. 99% of cash tips are never reported. I pay a ton of taxes, everyone else needs to pay their fair share.

[T77911S]

my wifes has been stolen several times also.
she narrowed it down to one business she was ordering from (for her business).
she has stopped doing business with them and no more problems.

CC security is joke. even putting the extra 3 digits on the back does no good when you give all that info to a stranger in another state.

the ones that sell the numbers don't use them right away. you will get "test" chargers on it.