Fidgits
January 6, 2004, 10:03 am
And that number is from a largely tech savvy sample
Over 10 per cent of silicon.com readers either know or suspect they have been the victim of identity theft in their lives online, highlighting this increasingly common crime.
Results of a survey of 1,067 readers conducted in December revealed 114 - or 10.7 per cent, answering Yes to the question 'Do you believe your identity has ever been stolen online?'
ID theft commonly involves crooks finding personal data about individuals, for example from old receipts or discarded bank statements, using that to gain other personal credentials and then making transactions or buying goods in the unsuspecting person's name.
While details are by no means harvested solely online - bin raiding is a common starting point - illegal transactions are frequently facilitated by the internet.
However, 44 per cent of respondents also said they have received an email 'phishing' for personal information.
In recent months phishing scams - so called because they trawl for personal data such as bank accounts numbers, passwords, ATM PINs and more - have become common. Customers of mainstream banks have been targeted, as have users of services such as eBay and PayPal.
But while just two-thirds of survey respondents say they have been on the receiving end - the phishing emails are typically spam sent to millions of accounts - only 66 per cent said they had heard of the practice. 27.6 said they hadn't and a further 6.4 per cent said they weren't sure.
[url="http://www.silicon.com/software/security/0,39024655,39117606,00.htm?nl=d20040106"]full story here[/url]
Scorpion
January 6, 2004, 11:42 am
I am guilty of being paranoid on this subject,i never let my C/Card out of my sight
when paying for things especially at restaurants where the waiter goes off to
run the card through the machine,with me in hot pursuit behind him
I also adopt the same paranioa with junk mail,bank statements and the like that
floods through the letterbox,so i bought a shredding machine for piece of mind,and
the same with telephone calls from "the bank"selling insurances,mortgages and other
plans and services.......i just tell them to put it into a letter and send me the details,
only to be shredded.
Fidgits
January 6, 2004, 11:48 am
[quote name='Scorpion' date='Jan 6 2004, 12:42 PM']I also adopt the same paranioa with junk mail,bank statements and the like that
floods through the letterbox,so i bought a shredding machine for piece of mind,and
the same with telephone calls from "the bank"selling insurances,mortgages and other
plans and services.......i just tell them to put it into a letter and send me the details,
only to be shredded.

[/quote]
I'm the same with the Shredder (well, i needed one for corporate documents etc), but any old statements, junk mail, goes through it before being thrown away...
Zee007
January 6, 2004, 12:09 pm
Couple of points (being that I work in the Financial industry - for a Credit Card Company)....
A fact that most people are unaware of is: It is SAFER to use your card on a Secure site online than to give it out over the telephone....
Secondly, we (the Credit Card industry) are working hard to test and prove the new chip technology that should reduce fraudulant use of cards by encypting data (as proven in continental Europe)..... This will dramatically reduce the fraud by statements/old reciepts etc......
On a final note - remember that you are covered by fraudulant use on your Credit Card under the Banking Code (Ombudsmen) so in theory, you shouldn't be too worried......
Scorpion
January 6, 2004, 12:13 pm
I hardly ever check my statement.....i just pay it!
Fidgits
January 6, 2004, 12:36 pm
[quote name='Zee007' date='Jan 6 2004, 01:09 PM']A fact that most people are unaware of is: It is SAFER to use your card on a Secure site online than to give it out over the telephone....[/quote]
I would just like to add the following additions to this point:
1. Where Zee says 'Secure site' online, this is easily recognised. If a web page is asking for personel details/credit card details, look on the bottom right corner (next to the globe/internet logo), there should be a padlock (depending on browser- padlock refers to IE)
2. Assuming the site itself is genuine.
But as Zee said, as long as its a reputable company, and it is offering a 'secure connection' then it should be okay. The transaction uses Public Key technology, and generally uses 1024-bit keys (this means a unique number 1024 numbers long).
However, if you have the option NOT to store your credit card for future use, i would reccomend selecting this option, as the weakest link in the e-commerce system is the database..
GRiM
January 6, 2004, 12:52 pm
[quote name='Scorpion' date='Jan 6 2004, 12:13 PM']I hardly ever check my statement.....i just pay it![/quote]
Pete,
Based on my experience, I would suggest that you should...
That's how I discovered that £125 had been stolen from my credit card. Someone has used my details online, on some US internet gambling site. What initially drew my attention was the transactions appeared in $dollars on my statement.
When I contacted the credit card company about it, they first suspected someone in my family. I then went on to the internet site in question to find out the IP address used when the transactions went through. But I had to eventually call the company in the US to get the IP address.
When I told the credit card company that the IP address was not mine, and appeared to be based in the US, they quickly became my best friend, offered to immediately cancel the dodgy transactions and sent me a new credit card.
Since then I check my statement every month. Very thoroughly.
Can I also suggest for Interent Explorer users:-
From the menu.
Go into Tools/Internet Options
Select the Advanced tab
Scroll down until under Security, you find and option called
Do not save encrypted pages to disk
and put a tick in the box against it.
Then click OK
That way any transaction you process on IE will not keep a copy locally on your PC, that could potentially be hacked.
Zee007
January 6, 2004, 1:05 pm
[quote name='GRiM' date='Jan 6 2004, 12:52 PM']Can I also suggest for Interent Explorer users:-
From the menu.
Go into Tools/Internet Options
Select the Advanced tab
Scroll down until under Security, you find and option called
Do not save encrypted pages to disk
and put a tick in the box against it.
The click OK
That way any transaction you process on IE will not keep a copy locally on your PC, that could potentially be hacked. [/quote]
Excellent piece of advice..........
Scorpion
January 6, 2004, 1:18 pm
Grim,i know i should!! [img]http://smilies.sofrayt.com/^/b0/togo.gif[/img]
Thanks for the tip on the tool bar as well.......just done it. [img]http://smilies.sofrayt.com/^/9/biggthum.gif[/img]
tdiplc
January 6, 2004, 1:34 pm
What I think stinks is that the banks hardly ever have to cough up for card fraud, it is normally the already hard pressed merchant/shop that gets a charge back.
Add that to the reams of additional taxes, charges and administration that small business's have to cope with, and you can see why less and less people want to get involved.
Zee007
January 6, 2004, 1:45 pm
[quote name='tdiplc' date='Jan 6 2004, 01:34 PM']What I think stinks is that the banks hardly ever have to cough up for card fraud, it is normally the already hard pressed merchant/shop that gets a charge back.
Add that to the reams of additional taxes, charges and administration that small business's have to cope with, and you can see why less and less people want to get involved.[/quote]
Very surprised to hear that the merchants get stung so badly - I understand the chargeback process, but my understanding of Banking regulations and Chargeback Rules was such that the transaction would be investigated by Visa/Europay ALONG WITH the Merchant for it to be resolved......
tdiplc
January 6, 2004, 4:32 pm
[quote name='Zee007' date='Jan 6 2004, 01:45 PM'][quote name='tdiplc' date='Jan 6 2004, 01:34 PM'] What I think stinks is that the banks hardly ever have to cough up for card fraud, it is normally the already hard pressed merchant/shop that gets a charge back.
Add that to the reams of additional taxes, charges and administration that small business's have to cope with, and you can see why less and less people want to get involved.[/quote]
Very surprised to hear that the merchants get stung so badly - I understand the chargeback process, but my understanding of Banking regulations and Chargeback Rules was such that the transaction would be investigated by Visa/Europay ALONG WITH the Merchant for it to be resolved...... [/quote]
Take a look at a contract Zee.
The banks have the vendors by the short and curlies
The contract is a prime contender for the new "Unfair Contracts" legislation
Zee007
January 6, 2004, 5:06 pm
[quote name='tdiplc' date='Jan 6 2004, 04:32 PM']Take a look at a contract Zee.
The banks have the vendors by the short and curlies
The contract is a prime contender for the new "Unfair Contracts" legislation

[/quote]
A contract between whom Mark?
Is this between a merchant and a bank (ie HSBC, NatWest, Barclays etc) or Visa/Europay?
Steve
January 6, 2004, 5:47 pm
i recently had a merchants account and had a chargeback... i had to pay the 1.8% fee from a £1000 transaction... plus additional fees
tdiplc
January 6, 2004, 6:02 pm
[quote name='Steve' date='Jan 6 2004, 05:47 PM']i recently had a merchants account and had a chargeback... i had to pay the 1.8% fee from a £1000 transaction... plus additional fees[/quote]
I'd say you were lucky mate
If they were written in plain English, the contracts would say something like:
1) You are liable for any fraudulent use of the card.
2) Even if we give you a "code 10" authorisation, we reserve the right to change our mind.
3) We will charge back to you via direct debit any claims from the card holder.
4) We don't care if you use another bank because we are all the same.
5) You need us - we don't need you.
Zee007
January 6, 2004, 7:09 pm
[quote name='tdiplc' date='Jan 6 2004, 06:02 PM']4) We don't care if you use another bank because we are all the same.[/quote]
Sorry Mark - have to disagree....... There is no way whatsoever that banks associate themselves with one another.....
DaveEllen
January 6, 2004, 8:11 pm
cheers Grim
just done it
tdiplc
January 7, 2004, 12:01 pm
[quote name='Zee007' date='Jan 6 2004, 07:09 PM'][quote name='tdiplc' date='Jan 6 2004, 06:02 PM'] 4) We don't care if you use another bank because we are all the same.[/quote]
Sorry Mark - have to disagree....... There is no way whatsoever that banks associate themselves with one another..... [/quote]
I know what you are trying to say Zee, but funny how the Merchant Agreements are all the same (the parts that are of interest to the Merchant) from bank to bank
GRiM
January 7, 2004, 12:09 pm
[quote name='DaveEllen' date='Jan 6 2004, 08:11 PM']cheers Grim
just done it

[/quote]
Of course Dave, to keep you totally secure, just send me a PM with your details and I keep them safe for you.
Honest
Zee007
January 7, 2004, 12:53 pm
[quote name='tdiplc' date='Jan 7 2004, 12:01 PM'][quote name='Zee007' date='Jan 6 2004, 07:09 PM'] [quote name='tdiplc' date='Jan 6 2004, 06:02 PM'] 4) We don't care if you use another bank because we are all the same.[/quote]
Sorry Mark - have to disagree....... There is no way whatsoever that banks associate themselves with one another..... [/quote]
I know what you are trying to say Zee, but funny how the Merchant Agreements are all the same (the parts that are of interest to the Merchant) from bank to bank

[/quote]
Fair comment - why re-invent the wheel........
tdiplc
January 7, 2004, 2:28 pm
[quote name='Zee007' date='Jan 7 2004, 12:53 PM'][quote name='tdiplc' date='Jan 7 2004, 12:01 PM'] [quote name='Zee007' date='Jan 6 2004, 07:09 PM'] [quote name='tdiplc' date='Jan 6 2004, 06:02 PM'] 4) We don't care if you use another bank because we are all the same.[/quote]
Sorry Mark - have to disagree....... There is no way whatsoever that banks associate themselves with one another..... [/quote]
I know what you are trying to say Zee, but funny how the Merchant Agreements are all the same (the parts that are of interest to the Merchant) from bank to bank

[/quote]
Fair comment - why re-invent the wheel........

[/quote]
The bits that are the same are the ones that make the poor battered Merchant cough up for any fraudulent card use etc - you won't see any banks paying for that
To be fair though and for parity of the subject, the banks do have to pay when they are jointly liable for a Merchant's debt who has gone bust, even if the card holder only paid £300 on their card for a £10,000 purchase the bank is liable for the full £10,000. That doesn't seem fair to me either.
Don't worry Zee I still love ya - even if you do work for a bank
jac114
January 7, 2004, 8:07 pm
Last year I had my card used online to buy underwear from figleaf.com They had the womans (supposed name) and delivery address in london .. My bank called them and confirmed all of this and I got my money back. 2 transactions..£140.00 when I rang back figleaf.com to asked what would happen now I.e would they get the police involved and try to get there money back , they just said " No its o.k we are covered by our insurance who will pay us out" I ask you what sort of detterent is this .. so up go our premiums again because even when companys have details about this sort of fraud they cannot be ****d to sort it out they would rather claim off there insurance...
craig
tdiplc
January 8, 2004, 3:02 pm
[quote name='jac114' date='Jan 7 2004, 08:07 PM']Last year I had my card used online to buy underwear from figleaf.com They had the womans (supposed name) and delivery address in london .. My bank called them and confirmed all of this and I got my money back. 2 transactions..£140.00 when I rang back figleaf.com to asked what would happen now I.e would they get the police involved and try to get there money back , they just said " No its o.k we are covered by our insurance who will pay us out" I ask you what sort of detterent is this .. so up go our premiums again because even when companys have details about this sort of fraud they cannot be ****d to sort it out they would rather claim off there insurance...
craig[/quote]
You'll probably find that what they mean is "it's ok well get repaid by the Merchant".
The Police don't care either. Several times a month we get attempts at people using stolen card details to buy things by mail order. Normally the addresses are in Birmingham, Leicester or Bradford, we phone the police with the address details etc but they couldn't be less interested
Zee007
January 8, 2004, 3:47 pm
[quote name='tdiplc' date='Jan 8 2004, 03:02 PM']The Police don't care either. Several times a month we get attempts at people using stolen card details to buy things by mail order. Normally the addresses are in Birmingham, Leicester or Bradford, we phone the police with the address details etc but they couldn't be less interested

[/quote]
I think you'll find that the adresses are fake too Mark - that's usually why the Police don't bother...... It's a known fact that fraudulant CC users will not disclose their real address!
tony_hetherington
January 8, 2004, 5:10 pm
I am very naive in this subject, so please excuse me if I'm asking a dumb question......
but how would the fraudulent users gain anything if they don't reveal their real address? Do they get stuff sent to a fake address and then go pick it up? Or is it all just "virtual" money, i.e. nothing physical ever gets exchanged ?
Just curious to know.....
ta
Zee007
January 8, 2004, 5:46 pm
[quote name='tony_hetherington' date='Jan 8 2004, 05:10 PM']I am very naive in this subject, so please excuse me if I'm asking a dumb question......
but how would the fraudulent users gain anything if they don't reveal their real address? Do they get stuff sent to a fake address and then go pick it up? Or is it all just "virtual" money, i.e. nothing physical ever gets exchanged ?
Just curious to know.....
ta[/quote]
Correct - sent to an address of a "mate", empty house, etc etc. The majority of goods ordered will then be sold on as they would rather have the cash......
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.