.

Fraudulent activity on my checking Acct

<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 16, 2010 2:52 pm

Fraudulent activity on my checking Acct

So I have been a member on here for a few months now.  Soon to be graduate with a Computer Forensics & Network Security degree....

Anyways.... my checking acct debit card was used for a few purchases overseas last week.  Places like Germany, The UK etc...  The things that were purchased were a train ticket to Berlin and someone tried paying their water utility bill in the UK as welll as smaller withdrawls to check to see if the acct was active I assume.

I know the train ticket one is a waste of time, meaning it's pointless trying to track this down cause it would be untrackable.

But the Water bill interested me.  The amount charged was $320.99 ( very large water bill)  The company was Angelian Water Services, (see links)
http://www.anglianwater.co.uk/
http://en.wikipedia.org/wiki/Anglian_Water


Now one could assume that with any utility payment there has to be an associated account number.  So I am wondering if I should pursue this and see what information I can gather about the person that used my card#.  What are the likely hood that the Water company gives me their info?  Unlikely I'm sure.

Even though my bank gave me the money back that was charged and has since cancelled the card I would like to know what you guys think I should do, if anything at all.  Maybe our UK friends on the site would lend a hand to a brother.
Security+, Network+, C|EH, CHFI, CPT
<<

Grendel

User avatar

Full Member
Full Member

Posts: 246

Joined: Thu Aug 28, 2008 8:48 am

Location: Colorado Springs, CO

Post Tue Nov 16, 2010 2:56 pm

Re: Fraudulent activity on my checking Acct

I would admit I would have the same curiosity and want to know the who/why, but it would eventually be tempered with the question "to what end?" Even if you were able to get the utility company to illegally give you PII, then what? Have a chat?

I read about this one girl in NY who came across someone who stole her account info and chased her down throughout the subways, bus system and all the time called the cops who eventually caught her. Fun (risky) stuff, but not sure I have the energy to do a follow-through.
- Thomas Wilhelm, MSCS MSM
ISSMP CISSP SCSECA SCNA IEM

Web Site:
  • http://HackingDojo.com
Author:
  • Professional Penetration Testing
  • Ninja Hacking
  • Penetration Tester's Open Source Toolkit
  • Metasploit Toolkit for Penetration Testing
  • Netcat Power Tools
<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 570

Joined: Sat Apr 17, 2010 12:12 pm

Post Tue Nov 16, 2010 9:29 pm

Re: Fraudulent activity on my checking Acct

I would get as much info as possible, and pass it on to Law Enforcement. Make sure any credit accounts are good as well, any evidence you obtain (legally) can assist in making repairs.
sectestanalysis.blogspot.com/‎
<<

Data_Raid

User avatar

Full Member
Full Member

Posts: 165

Joined: Fri Nov 09, 2007 5:55 am

Post Wed Nov 17, 2010 3:35 pm

Re: Fraudulent activity on my checking Acct

I don't think that it's worth your time and energy pursuing this, especially since the card has been cancelled and you have received a refund. Hopefully your bank has tracked down the criminals.
I also doubt that Anglian Water will tell you the name or account number of the criminal that used your card to pay for the bill. They would most probably require an account number or an address to reference the bill but using just your card details I doubt it.

It sounds like your card may have been cloned, did you use your card in an ATM recently or shop online or use it anywhere else that could be suspicious?
All men by nature desire knowledge.

Aristotle
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Thu Nov 18, 2010 2:28 pm

Re: Fraudulent activity on my checking Acct

Nope nothing.  Don't go out to eat anywhere, have no money in general.  Kinda broke.  I have not bought anything overseas or paid for any porn susbcriptions that they could have gotten it off of. 

I think that a shady individual at some place that I used my card for copied it down.  I doubt it's cloned.  Just stole my info off a bill I paid and sold it to an online forum.

Sucks but I am interested in where this can go.  If nothing comes of it then oh well.  Angelian water service sent a reply saying they will take 10 days to get back to my response.

10 days? Nice customer service!
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 30, 2010 11:53 pm

Re: Fraudulent activity on my checking Acct

So here is the repsonse from the UK water company

Dear Mr. Xxxxxx



Thank you for your email.



Unfortunately we cannot locate the property with the details mentioned in the letter.  To ensure that our records are updated, could you please provide us with the complete details of the property and the serial number of the meter serving the property.



If we can be of further assistance, please email or telephone on 08457 91 91 55 where our customer services staff will be pleased to help.



Yours sincerely

Customer Services
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 30, 2010 11:54 pm

Re: Fraudulent activity on my checking Acct

Then I go this a few days later also.  Seems whoever wrote the first one said the wrong stuff.


Dear Mr Xxxxxxxx



Thank you for your email of 16th November and please accept my sincere apologies that our response dated the 22nd November in no way addressed your query or concerns.



I regret that from the information that is contained within your email we would not be able to trace the payment within our billing systems.  I regret that I must also advise that even if we were to trace the payment we would be unable to confirm who used the card with any degree of certainty as this may not be the account holder named on the account to which the credit/money was allocated.  With this in mind, and due to UK Data Protection Laws, I regret that we would be unable to provide any information that would be of help to you in this matter.



As you have confirmed that this matter has already been reported to your bank, who in turn have stopped the payment, I trust that the money has now been credited back to your bank account.  I also trust that the bank have reported the matter to the relevant authorities who will be able to trace the fraudulent transactions that have been made and hopefully identify who used your card.  I also trust that the bank issued you with a new card to avoid any further fraudulent transactions from being carried out against your bank account.



I apologise that we are unable to assist you in this matter and that our first response was in no way adequate to address and answer your email.



Yours sincerely





Customer Services
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Wed Dec 01, 2010 12:17 am

Re: Fraudulent activity on my checking Acct

I just replied to their email with this.  Sorry had too, just felt in the mood to get a final stab at them.  call me a jerk or something.

Dear Customer Service,

I understand the privacy of your customers and I was kinda surprised to get the response that I got on first response.  So it came at no surprise to me that a follow up email correcting what was said before came into my inbox.

I am rather concerned though about how your company conducts business and could allow a active customer of yours to pay for their $3XX.XX or any amount water bill with someone else's debit card.  Do you have a verification process?  If not I suggest implementing one to prevent these kinds of transactions from happening.  These would be like asking for the billing address of the card which then would have shown up as being registered in the United States and that should have raised a few red flags.  Seeing as I don't buy anything from overseas or even Canada for that matter I feel my card # was compromised by a less than honest person that had access to my card for a recent purchase that I made and then was sold online on a stolen credit card forum which is common in Europe.

We both know that the relevant authorities are not about to waste their time on a small incident like this.  I hope that you would have been able to find information about this and make a note about it on the users acct that he used a stolen debit card #.  This would help the both of us and possibly stem this criminal from doing it again and could help your company become a leader in the UK in preventing ID theft.

Another thing that interested me and made me wonder how customer service is handled in the UK.  A 10 day response to a query seems to an awful lot?  Is this normal?  Why does it take your company 10 days to respond to a billing question?  Once again I urge you to review your customer service standards and try to improve on them as a 10 day waiting period for your customers is personally, horrible customer service and if you did that in the USA you would not be in business very long.  But maybe you guys run differently over there.
Security+, Network+, C|EH, CHFI, CPT
<<

SephStorm

User avatar

Hero Member
Hero Member

Posts: 570

Joined: Sat Apr 17, 2010 12:12 pm

Post Wed Dec 01, 2010 9:17 am

Re: Fraudulent activity on my checking Acct

you should have added: "respect my authoritah!"
sectestanalysis.blogspot.com/‎
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Wed Dec 01, 2010 2:53 pm

Re: Fraudulent activity on my checking Acct

Do they have South Park over there or they just have Mr.Bean?  LOL. 

I was gonna throw in I am a Computer Forensics & Network Security analyst but since that is embleishing the truth by a few months, even though I do have a Forensics job but no certs I decided to leave it out.
Security+, Network+, C|EH, CHFI, CPT

Return to CEH - Certified Ethical Hacker

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software