Question: IPhone & Credit Card Info

[Tidybuoy]

I have never used my phone to pay bills and do not keep any banking information on my phone.

I recently called someone so that they would have my contact information and when they added me to their contacts, they showed me how my contact information included 3 credit cards; the card number, expiration date, and 3 digit code.

How did this happen and how do I prevent this? I have an iPhone 11 Pro. I have to wonder how many other times it has done this and do I need to get new credit card numbers.

[masraum]

Wow, holy carp! I'd never heard of or seen that.

I'm assuming that in your own phone, under your contact, you've got all of that info listed under notes or something.
https://www.lifewire.com/manage-contacts-iphone-address-book-2000570

Partial excerpt from the page above.

Information About the Contacts Fields

Some of the various fields you can choose to use on a contact's entry screen are familiar, which some may surprise you:

Add Phone: When you tap Add Phone, you are not only able to add a phone number, but you can also indicate whether the number is a mobile phone, fax, pager, extension, or another type of number, such as a work or home number. This is helpful for contacts for whom you have multiple numbers.
Add Email: As with phone numbers, you can store multiple email address for each contact and designate them as home, work, iCloud, or other. You can also apply a custom label to the email field.
Ringtone: Assign a specific ringtone to a person's communications, so you know when they're calling.
Text Tone: Assign a specific alert tone to a person's communications, so you know when they're texting you.
Add URL: Enter a URL for the contact's home page, home, work, or another website.
Add Address: Enter the contact's home, work, or other address here.
Add Birthday: Add the contact's birth date here. The familiar default calendar is most likely the best choice, but you can opt for Chinese, Hebrew, or Islamic calendars.
Add Date: Tap the Add Date field to add the date of an anniversary or another important date related to the contact that you don't want to forget.
Add Related Name: If the contact is related to you, such as your sister or your cousin, tap Add Related Name and choose the relationship. This allows you to tell Siri to call your mom or your manager, and Siri knows precisely who to call.
Social Profile: To include your contact's Twitter name, Facebook account, or details from other social media sites, fill out this section to make contacting and sharing via social media easier.
Add Instant Message: This field covers your Skype, Facebook Messenger, and other popular messaging apps.
Notes: Just as it sounds, this is the place to make notes regarding the contact.
Add Field: This field gives you a chance to add a customized field from a long list of suggestions including pronunciation, maiden name, nickname, job title, and others.

[john70t]

Do you pay the bills using an Apple computer?
Perhaps user account info is automatically transferred to all other devices? IDK.

I once opened a bulk email, and somehow got user access to a guy's Facebook page. I let him know.

Having separate accounts (business/personal/autopay bills) seems like the safer way to go.
I don't do online banking either.
That is a bit odd and scary.

[mepstein]

One of the reasons I have credit cars is because if someone gets the number and charges stuff, I'm protected. I've had it happen a couple times because places that were storing my info have gotten hacked and one time where a waiter stole the card and rang up $5.700 in an hour. Another time someone stole my briefcase out of my car when I was inside at the gym(very common the cop told me) The card companies alway took care of it after a 5 minute phone call. So while I'm careful, I'm not worried.

[Tidybuoy]

Someone here at work showed me how to turn certain settings off in I Cloud. Hopefully, this solves the issue but Apple really has an issue if they are passing personal credit card info around and it's behind the scenes. The only thing I have ever done is pay something over the phone and had to give out credit card info. I've never stored any info like that on my phone or computer and I always decline when my computer prompts me to store information. I prefer to handle that manually but this clearly shows that that method doesn't work.

[A930Rocket]

Isn’t there something called airpass or similar? It allows your iPhone to transfer info to another iPhone who’s in your contacts. Go to settings and turn it off.

[wdfifteen]

I don't know if there is any way to defend yourself except to just shut it all down. If I search for something on line in Firefox the next day my wife gets ads for the product on her facebook page. How? Why?
For her birthday I'm going to search "Dead Hooker Trunk Stain Removal." She'll appreciate the laugh.
Privacy is a thing of the past.

[rusnak]

Don't enter your banking info into your phone. NFC card readers are not secure enough. Sure, they are supposed to be double encrypted, but they can sure steal your information off of the hardware. I don't use cash apps or snapchat to send money either. I use Paypal which so far has been secure, or credit cards. Even then I end up burning probably one credit card every few years due to fraud.

[rattlsnak]

I'd like to know what setting you "turned off" on iCloud. Something is not right here. If you put the CC info in your notes on your contact page, then yes it would send over but no other way as far as I know/heard. (not saying there isn't, but first time I've ever heard of this!

[masraum]

Originally Posted by rattlsnak

I'd like to know what setting you "turned off" on iCloud. Something is not right here. If you put the CC info in your notes on your contact page, then yes it would send over but no other way as far as I know/heard. (not saying there isn't, but first time I've ever heard of this!

That's my thought as well.

[stomachmonkey]

This really sounds like end user error.

If you have no CC stored on the device how would that info get added to your contact info other than manually?

The device can’t automagically Devine correct CC info on its own.

Someone entered it, maybe unintentionally not being aware it would get shared but somehow somewhere human interaction occurred

[masraum]

Originally Posted by stomachmonkey

This really sounds like end user error.

If you have no CC stored on the device how would that info get added to your contact info other than manually?

The device can’t automagically Devine correct CC info on its own.

Someone entered it, maybe unintentionally not being aware it would get shared but somehow somewhere human interaction occurred

^^^^

Even doing online banking and letting your phone use keychain to remember your credentials shouldn't in any way, as far as I know, allow that info to be shared to someone else in a convenient way.

[Tidybuoy]

Originally Posted by stomachmonkey

This really sounds like end user error.

If you have no CC stored on the device how would that info get added to your contact info other than manually?

The device can’t automagically Devine correct CC info on its own.

Someone entered it, maybe unintentionally not being aware it would get shared but somehow somewhere human interaction occurred

This is the conundrum, I don't keep any banking info of any kind in my computer or phone. The only thing that I can think of is I have occasionally purchased something over the phone and had to enter credit card info (like paying a water bill over the phone). In no way have I ever stored any financial information on any device.

Saying this is end user error is really not accurate. I should be able to use my phone as a phone and not have to worry that my phone is listening to me and then sharing my information as it pleases. This is an Apple invasion of my privacy.

Even after this incident occurred, at least 3 or 4 friends of mine tried to find the stored info on my phone and we could not find it. We could only find it in my other friends contacts list; their phone but not mine.

[stomachmonkey]

Originally Posted by Tidybuoy

This is the conundrum, I don't keep any banking info of any kind in my computer or phone. The only thing that I can think of is I have occasionally purchased something over the phone and had to enter credit card info (like paying a water bill over the phone). In no way have I ever stored any financial information on any device.

Saying this is end user error is really not accurate. I should be able to use my phone as a phone and not have to worry that my phone is listening to me and then sharing my information as it pleases. This is an Apple invasion of my privacy.

Even after this incident occurred, at least 3 or 4 friends of mine tried to find the stored info on my phone and we could not find it. We could only find it in my other friends contacts list; their phone but not mine.

Define "listening to me".

Are you saying you never typed any credit card info and only verbally spoke it into the phone?

On you phone go to Settings/Safari/Autofill . Tap AutoFill then Saved Credit Cards.

Even there it, by design, will not store CCV.

[pwd72s]

I'm a computer ignorant old fart...but this scares the krap out of me. Glad I have a "dumb phone"...a flip phone I buy minutes for and use only for calls.

[911_Dude]

I have two credit cards entered on my iPhone for apple pay, which I use somewhat regularly. I've never had a issue. But, I've had credit card fraud and a new card issued many times from what I'm sure was a restaurant of gas station where it was last used. It is in business best interest to make eCommerce and cashless transactions work. Ive never had any problem getting credit for the fraudulent purchases. There are more important things to worry about.

[GH85Carrera]

I have just one credit card in my Apply pay app. I have used it just a few times. I too never worry a second about fraud. My credit card company has my interests (and theirs) in mind. We recently purchased what looked like a good deal. Two 2-Tb USB 3 based external drives for a just under 200 bucks. When it arrived it was 4 counterfeit Apple AirPod earpieces, and not pairs, just a single unit per box and 4 32 gig USB 2.0 thumb drives. Just total crap. The credit card company refunded the money and if the seller sends us a postage paid way to return the crap we will send it back. If not, trash.

[stomachmonkey]

FWIW, the Apple credit card is the ****.

Besides the physical card being a hunk of metal that you can decapitate someone with it has no visible numbers.

The only thing etched is your name.

You access the cards info in your phones wallet.

You pay the balance straight from your phone.

You have all of your transactions listed for you right there and you get that receipt nearly instantaneously.

I'm literally never even out the door of the establishment when it arrives.

Fraud alerts show up right on the phone and you can access customer support immediately through your phone.

Everything about it is near real time and all in one place.

It's an awesome product.

[masraum]

Originally Posted by stomachmonkey

FWIW, the Apple credit card is the ****.

Besides the physical card being a hunk of metal that you can decapitate someone with it has no visible numbers.

The only thing etched is your name.

You access the cards info in your phones wallet.

You pay the balance straight from your phone.

You have all of your transactions listed for you right there and you get that receipt nearly instantaneously.

I'm literally never even out the door of the establishment when it arrives.

Fraud alerts show up right on the phone and you can access customer support immediately through your phone.

Everything about it is near real time and all in one place.

It's an awesome product.

what about a CVV2 code on the back?

[gacook]

Originally Posted by stomachmonkey

This really sounds like end user error.

If you have no CC stored on the device how would that info get added to your contact info other than manually?

The device can’t automagically Devine correct CC info on its own.

Someone entered it, maybe unintentionally not being aware it would get shared but somehow somewhere human interaction occurred

Wouldn't be so sure about that...

I use an android device, and Google has recently started sending me reminders about when bills are due and how much is due. I've never input any of that info, don't use a calendar reminder, and don't pay the bills through my phone. They're obviously mining the data from somewhere, as I did not "give" it to them.