Chase CC #'s stolen,mailing address and phone # changed!

Wanted to give a heads up on what happened to me. I went to a fast food drive thru and paid with my Chase credit card on Sunday, the kid at the window took a few mins to process my payment and I kept my eye on my CC the whole time. Didn't think he was able to steal the numbers off my card, but logged on to Chase today and there is $10k charge and 2 $3k charges pending. Chase has always called me when there is suspicious activity on my account, I got no call for these transaction. Apparently the thieves were also able to change my mailing address and phone number just by calling Chase customer service!(According to the rep who looked at account history) I tried to ask the Chase rep how this is possible but got transferred to fraud department without an answer. Ridiculous that someone can change my account info like that! Charges are being reversed BUT Chase isn't going to go after the thieves, just the merchant who processed the charges over the phone. Is it really that easy? Call in with CC number and name and thats it?!

I think a fast food place would be somewhat difficult to set up a skimmer unless multiple employees were in on it (or maybe not if there is an android app). Maybe it was stolen elsewhere or en bloc from a database?

I rarely use that CC. The last place I used it was to rent a car in Maui from Enterprise in early May, same CC info was stolen last year via KFC drive thru. The drive thru is set up to where the employee is in a small room away from the others, easy for him to skim it or take a quick pic without his co workers seeing. Just mad/worried at Chase for allowing address and phone number change just by calling them in.

If they are not sending you an affidavit to sign and send back, I would send it in writting to them just to cover yourself in the event that 3 months later, they come back and say that it was determined (based on conversation with the merchant) that it was you who made the order.

Just think that if they were able to change the mailing address and phone number, they probably had access to your mail from where they stole the info and had secondary knowledge of you to be able to change stuff. I would venture to guess that both times it wasnt a drive thru, but someone in or near your neighborhood or in the mail sorting station.

Similar thing happened to me with Wamu, and even though they caught it and called me, they sent me an affidavit to sign because the amount was in the 7k range.

When you call, the CC company is supposed to ask for your address and secret word like mothers maiden name before accessing your account.

MilleniumBuc said:   If they are not sending you an affidavit to sign and send back, I would send it in writting to them just to cover yourself in the event that 3 months later, they come back and say that it was determined (based on conversation with the merchant) that it was you who made the order.

Just think that if they were able to change the mailing address and phone number, they probably had access to your mail from where they stole the info and had secondary knowledge of you to be able to change stuff. I would venture to guess that both times it wasnt a drive thru, but someone in or near your neighborhood or in the mail sorting station.

Similar thing happened to me with Wamu, and even though they caught it and called me, they sent me an affidavit to sign because the amount was in the 7k range.

I know from the cases where I was appointed to represent someone charged in federal court with wire fraud using stolen credit card numbers that the phone number and address are all too often available off the internet search engines and if you use Facebook or Twitter off your cell phone that number is readily available also. I have a personal war with Chase over their failure to execute a change of address on my Exxon/Mobil card and am very familiar with the security problems in their system, but you may have too much data available on the internet. Given that Carnegie Mellon published a paper about how easy it is to get the last four digits of your SSN, you are probably derelict in not changing your security id procedure at Chase to something else. Chase is incredibly stupid(and lazy) for using that. Drivers Licenses are also found on the net and your mother's maiden name from birth records from sources like Ancestry.com. I use my first dog's name. Fortunately it isn't Spot or something else obvious.

I learned what NOT to use from representing credit card thieves.

I did get a new card with a new account number after KFC last year, meant to say the same Chase Visa card, sorry about that.
I called Chase again and they told me how the crooks changed my mailing address and phone number. They pretended to be one of those credit repair/bankruptcy companies , saying that I am having a hard time making the payments due on the card, and I hired them to help me, so I'll be making payments thru them at the address and phone number they provided, no personal information/security question like my mom's maiden name or anything was asked of them by Chase(at least that's what the fraud department rep told me). Mailing address is in Maryland and the phone number is from New York. Haven't gone back to fast food joint to complain yet(spend a few hrs installing dual flush system in my toilets) but will try the online police report!

Since the fraudulent charges were made over the phone, its likely they just quickly photographed it or obtained the number from a merchant receipt printout. (Customer receipts usually only show the last four account digits). The only way to get the information needed for a swiped transaction is by reading the magnetic stripe, meaning that there was a card skimmer/reader used. Conversely, the 3 digit number (4 digit for Amx) is *not* on the magnetic stripe, so it would have to be copied down manually (or photographed etc.)

Be glad it was Chase. This is a bank that:

• was bailed out
  
• makes more political contributions than any other bank in the U.S. (thus diluting and countering political influence of natural people, the people the government was intended to serve)
  
• used taxpayer money to make the political contributions (in effect)
  
• supports CISPA, a back-stab to the same people who helped prop Chase up
  
• recently lost $2bn on a foolish high-risk gamble

It's actually tempting to find your ID thief to be more worthy of the money than Chase.

I wish all these crooks get caught and placed in front of a firing squad because they are having an affect on the sign up bonuses being giving out!

It is now Citi but it was Chase at the time I had my problems which was quite a number of years ago. Still shows on my credit report as Chase and it was Chase that was dinged $875,000 by the post office for improper use of Presorted First Class postage rates.

Pending charges huh, yeah call the fraud department and hopefully they get the police to show up at the delivery address.

Some similar happen like this with my boss who went to purchase something from the Apple Store, and then he started getting weird charges from itunes and itunes card showing up on his bill. You should always (monthly) watch the changes on your credit card statement. If you find something, alert them immediately and ask for a new card. My citibank card always warns me of suspicious activity and denied the charge unless I call back.

Revike said:   bonghead said:   Be glad it was Chase. This is a bank that:
was bailed out
...
Chase did not request or need to be bailed out, the others (such as BOA, Citi, etc.) did. Chase was included for the sake of appearances.

Are you serious?!

You actually expect us to believe that Chase accepted $94.7 billion in bailout money as a gesture of good will, so their competition doesn't look as bad? You seem to work for Chase. Convince us otherwise.

Federal taxpayer bailout received: $94.7 billion ($69.7 billion of which was from taxpayers)
Lobbying fees paid 9 months after bailout: $4.2 million

Revike said:   
Chase (and all other big banks) are evil, but it's annoying that this bit of misinformation gets repeated so often.

Chase is the highest evil - not a single bank in the country exceeds Chase in political contributions.

Chase is among to top 5 highest recipients of bailout money.

Revike said:   bonghead said:   Be glad it was Chase. This is a bank that:
was bailed out
...
Chase did not request or need to be bailed out, the others (such as BOA, Citi, etc.) did. Chase was included for the sake of appearances. Chase (and all other big banks) are evil, but it's annoying that this bit of misinformation gets repeated so often.

The fraud detection by most card issuers is spotty, so it's best to review accounts online frequently yourself, both active and inactive, instead of depending on the issuer. Another card issuer called DW when she used her card at a couple of markets 100 miles away (weekend trip), yet failed to warn her when her card was used 400 miles away. (Her original card never left her possession, the card had been cloned). I think nearly all issuers will send a fraud form to be completed ...

sorry for the dupes - fw scripts are doing strange things.

I know it was mentioned, but double check the card was frozen and a new card with a new CC number is on it's way. Still IF you can do not use either card for a month or two to insure all is well.

Tell them to add a mandatory additional password in the remarks section of your account. IF we failed to look for such a remark, we got dinged on our evaluations. Just don't forget what it is or it will be like wrestling a mad bear to get anything done.

(Former third party servicer CC security agent)

Thanks JW, Chase was really quick with freezing the card and Chase changed my security question to a pin number. I already had my credit lines frozen 5 years ago too, so no worries about the thieves opening up lines of credit. Thanks again!

fattywallace said:   Their loss not yours. Thanks goodness for the protections embedded on CC, another prime sample of why to use a CC as opposed to a DC. Your account will be changed, your money credited back to you, no harm, no foul.....let it rest.That's true ... for now. As much as the CC companies and the banks say things like "for your own security please tell me ...." and blahblahblah, fraud is the industry's problem; not the consumer's. It's been that way since the credit card industry came about, and it's specifically designed that way to convince people to use credit cards.

And it's working. Pure cash transactions were less than 30% of all POS transactions in 2011. Once the industry believes we are at (or past) a critical mass such that the public can't do without credit cards, they will lobby Congress to change laws and make fraud the consumer's problem. It will happen over time, but it *will* happen, and prolly in our lifetime.