Had online internet credit card fraud

[tartempion]

Not sure where to post it, thus General to start with.

03 and 04 feb I buy each time a one way airline ticket on Thai Smile website.

In fact you are directed to https:wftc3.e-travel.com which stands for Amadeus Global Travel Distribution System

By the time you need to input credit card details you get at https://e-payment.thaiairways.com/IP_EPAY/PaymentAction.do, which seamingly is a specific Thai airways webpage, I hope exclusively controlled by Thai airways?

On that page you enter credit card number, name on card and that 3 digit code on the reverse side of your card.

My credit card is highly secured, I then am transferred to my bank where I need to use a special calculation machine, input the credit card chip code and some more figures as directed by the banks software. If all that is correct I get redirected to Thai's web site to get confirmation and within a minute I get booking confirmation email in my mailbox.

I buy at least 10 airline tickets/year, book hotel rooms and buy stuff, all on line and mostly pay via credit card in the same way.

Unfortunately sometimes I am not redirected to my bank and credit card number+name+cc code seems sufficient.

Never had problems until yesterday that is.

Checking my bank and cc activity I see this:

04-02-2014 LUFTHANSA 2341861276 KOELN AT50679 -277,54 EUR -277,54 EUR
04-02-2014 TAM FR PARIS FR75011 -871,12 EUR -871,12 EUR
04-02-2014 WWW.THAIAIRW1234567890 BANGKOK TH10900 -1.450,00 THB 1 EUR= 43,6484045 THB -33,22 EUR
03-02-2014 WWW.THAIAIRW1234567890 BANGKOK TH10900 -1.400,00 THB 1 EUR= 43,6408977 THB -32,08 EUR

Thus a lufthansa and TAM? ticket appears for over 1100 euros I did not buy.

Isn't TAM a Brazilian airline company?

It took me a hell of a time to find how to proceed and did all in the wrong sequence .

Anyway: cancel the card by phone (get a number) and fill in a fraud report online at some website by referring the cancel number and submitting a signed document showing the disputed transactions (thus I needed to print the credit card activity screen, comment and sign it, scan and attach it to the complaint form, beurks for efficiency)

I will need to wait for a new credit card to reach my Balgian home and have it mailed or brought over before I can buy anything else.

Now the main unanswered question is how/who/when got to see my credit card number and cc code and managed to buy two airline tickets and at what purpose?

Most airlines require the card holder to be in the traveling party and show the card at check in.

Does the defrauder expect to have these tickets cancelled and re-imbursed?

I thought tickets are re-imbursed to the cardowner only.

Why are these just airline tickets, not something else.

Why is it still possible to spend credit card items by simply mentioning card number and cc code by anyone whilst I have a highly protected credit card system with chip code etc?

Could the culprit be a Thai airlines employee or an Amadeus employee?

Unlikely but possible would be a systems glitch posting 3 tickets within seconds to my credit card.

In a previous life I was IT application engineer and I had to look into a few systems glitches causing accounting errors.

I also realize (and had to deal with) programming errors, not by the hundreds but by the thousands (yes SAP is bug ridden)

I guess these transactions will be reversed soon by the company running the credit card but wonder who/what happened and who are the thieves if any.

[ford8]

The well known anti-collaborative macro

[KittenKong]

It probably wasn't necessary to cancel your card. Glitches do sometimes occur without there being any type of fraud involved. I think the correct procedure if you notice a problem is just to call your (non-Thai) card issuing bank, report it and let them investigate. I know with my bank that once a problem is reported they assume total responsibility for everything and I can lose nothing, so why worry?

If they think they need to cancel the card they will do so but it may be that they find some simple error somewhere and can rectify it without compromising your account in any way.

Of course if the card issuing bank is Thai then it's probably a very different story.

[tartempion]

I called both my Belgian Bank and the credit card provider ATOS and was instructed by both to first cancel my card with Cardstop before entering an online fraud form and I was told there is no other way to proceed, well if that is customer support....That form was also a nightmare to complete, was stopped several times and had to back trace and do all over again

And what's "anti-collaborative macro"???

[ford8]

I called both my Belgian Bank and the credit card provider ATOS and was instructed by both to first cancel my card with Cardstop before entering an online fraud form and I was told there is no other way to proceed, well if that is customer support....That form was also a nightmare to complete, was stopped several times and had to back trace and do all over again

And what's "anti-collaborative macro"???

The catch all for all this sort of stuff, It originated at "Fred's Unclaimed Freight"

[KittenKong]

I called both my Belgian Bank and the credit card provider ATOS and was instructed by both to first cancel my card with Cardstop before entering an online fraud form and I was told there is no other way to proceed, well if that is customer support....

Well, it doesnt sound too bad to me.

Just be thankful that your card was issued in a country where the banks accept responsibility for fraud and suchlike.

It could have been a card issued in Thailand.