Got scammed mycard(citi)

[greenbelt]

Just had multiple missed calls in quick succession 4th time I picked up was a British guy said he was from mycard previously citibank creditcard fraud department. He was very professional sounded legit had my full name credit card number and made it sound very urgent that I had to act right there and then. Asking if I was purchasing anything in singapore through some website i said no he asked to confirm i had my card in my possession. Then said have you used booking.com recently which i had and he said they've had a major data breach recently and then sent me a code to verify my identity which after the call realised was the authorisation code for purchase they got me for $14K. After the call I realised and called mycard fraud immediately and reported they blocked and cancelled my card. While I was on the phone the scammers called back 3 more times I didn't answer.

So yea don't be an idiot and if you get a call from a financial institution tell them you'll call back on the legit number from there website.

The transaction was for makemytrip Dubai it is still pending. Mycard could not confirm or comment if the charge would get reversed so im abit anxious about that.



TLDR: Got a scam call they charged $14k can't believe i fell for it.

 

[Happy Dude]

Wow. Thanks for posting your experience. Any idea how they got hold of your phone and credit card info?

 

[greenbelt]

Wow. Thanks for posting your experience. Any idea how they got hold of your phone and credit card info?

I have no idea i was recently in vietnam and used my card on grab and in Kuala Lumpur airport during a stop over.

 

[AIRwin]

Coincidentally I just received a legitimate SMS from MyCard at the same time as the original post #1 and it does warn not to share the secret code with anyone:
"The MyCard secret code to complete your online purchase for AUD X.XX is NNNNNN. Do not share this code with anyone."

 

[fkcn]

Wow, that’s awful. But hopefully the nature of the purchase in Dubai sounds like it is something that can be easily reversed even if payment went through initially.

 

[Vic]

My experience with card fraud department calling is they ask if your making a purchase right now in location, for example Louis Vuittion Singapore. you then confirm yes or no... and that is ALL No numbers, not account details NOTHING.
Anyting else is a scam
warning for all.

 

[Haplo]

OP I think you can charge back under the reason did not receive goods or services.

As soon as the charges post call NAB straight away to start the process.

 

[greenbelt]

OP I think you can charge back under the reason did not receive goods or services.

As soon as the charges post call NAB straight away to start the process.

I called the fraud department straight away they created a case to be investigated. They wouldn't tell anything except it will take up to 6 weeks to investigate.

 

[depresso]

I called the fraud department straight away they created a case to be investigated. They wouldn't tell anything except it will take up to 6 weeks to investigate.

Hi there, just wanting to ask is there any updates/ luck getting the money back ? also a fellow victim for fraud recently

 

[Quickstatus]

OP I think you can charge back under the reason did not receive goods or services.

Not guaranteed especially if there is evidence that the goods and services was sent by the merchant (just not to you).

...
Ive heard that typing in an authorisation code can be evidence that you agreed to the purchase and may be seen by the card issuer as a proper purchase.

 

[VPS]

Hi there, just wanting to ask is there any updates/ luck getting the money back ? also a fellow victim for fraud recently

Welcome to AFF - I'm presuming you're waiting for Citibank to investigate

 

[MEL_Traveller]

Welcome to AFF - I'm presuming you're waiting for Citibank to investigate

The OP mentioned the charge was ‘pending’, so it may never have actually posted.

 

[VPS]

The OP mentioned the charge was ‘pending’, so it may never have actually posted.

I was responding to @depresso not the OP

 

[MEL_Traveller]

I was responding to @depresso not the OP

It’s ok, so was I The OP’s charge was pending, so they may have nothing to report back in terms of dispute resolution.

 

[greenbelt]

Hi there, just wanting to ask is there any updates/ luck getting the money back ? also a fellow victim for fraud recently

Mycard sent me an email basically saying its on me and quoting the ePayments code saying they can't help. I made a complaint via AFCA my card responded to that still with the same position that they can not help again quoting ePayments code. But they did offer $2000 as a goodwill gesture.

 

[MEL_Traveller]

Mycard sent me an email basically saying its on me and quoting the ePayments code saying they can't help. I made a complaint via AFCA my card responded to that still with the same position that they can not help again quoting ePayments code. But they did offer $2000 as a goodwill gesture.

That is shocking news

I honestly was hoping that the pending charge had somehow dropped off and the matter had been caught in time and resolved.

Any ideas hiw they got your details in the first place… name and CC number? Was makemytrip able to give any details of who used the service?

 

[0kelvin]

Just had multiple missed calls in quick succession 4th time I picked up was a British guy said he was from mycard previously citibank creditcard fraud department. He was very professional sounded legit had my full name credit card number and made it sound very urgent that I had to act right there and then. Asking if I was purchasing anything in singapore through some website i said no he asked to confirm i had my card in my possession. Then said have you used booking.com recently which i had and he said they've had a major data breach recently and then sent me a code to verify my identity which after the call realised was the authorisation code for purchase they got me for $14K. After the call I realised and called mycard fraud immediately and reported they blocked and cancelled my card. While I was on the phone the scammers called back 3 more times I didn't answer.

So yea don't be an idiot and if you get a call from a financial institution tell them you'll call back on the legit number from there website.

The transaction was for makemytrip Dubai it is still pending. Mycard could not confirm or comment if the charge would get reversed so im abit anxious about that.



TLDR: Got a scam call they charged $14k can't believe i fell for it.

Hello, I fell for the exact same scam. In my case they also knew of and could see recent, legitimate transactions that I had personally made which further convinced me that it was really Citi calling. There were also fraudulent transactions on my card which they also recited. This means they also had hold of my card details and transaction history. Just learned that this was a scam after a month, am completely shocked as it was such an elaborate scam.

I am sensing an undetected data breach with MyCard as similar reports have been made from 2 years ago in these whirlpool posts: Scam call claiming to be Citibank Fraud departmnt - Banking

Awaiting the bank investigation now

 

[MEL_Traveller]

Hello, I fell for the exact same scam. In my case they also knew of and could see recent, legitimate transactions that I had personally made which further convinced me that it was really Citi calling. There were also fraudulent transactions on my card which they also recited. This means they also had hold of my card details and transaction history. Just learned that this was a scam after a month, am completely shocked as it was such an elaborate scam.

I am sensing an undetected data breach with MyCard as similar reports have been made from 2 years ago in these whirlpool posts: Scam call claiming to be Citibank Fraud departmnt - Banking

Awaiting the bank investigation now

Well… that could be an avenue to recoup the money! If there was a known data breach which citi didnt communicate, or if they were aware of this scam happening but failed to issue a specific warning, it could be argued they share some of the responsibility.

 

[albatross710]

I am becoming convinced that we have allowed the banks to create an electronic payments system which has removed the last physical barrier. As the OP points out they have their ePayments code and a solid system that allows them to prove it was the OP that gave the go ahead BUT how can the OP (us) be expected to know.

Banks have hundreds of people in IT, anti-(their)-fraud departments which are protecting the banks whereas we just have our staff of one (us).

We all enjoy the convenience of immediate payments BUT what if we didn't have it. What if payments had a buffer, a few hours, a day. I would consider a 'delay card'.

We enjoy the convenience of cards with large credit limits but are they for us or for the bank benefit?

Banks really wont like it as they will need to open physical locations and slow the tran$action ticker$$

Oh I just realised I already have some level of protection as these days I only use a debit card which only has the funds for the upcoming purchase. I guess the scammers can see from the digits I only register Debit cards.

 

[MEL_Traveller]

I am becoming convinced that we have allowed the banks to create an electronic payments system which has removed the last physical barrier. As the OP points out they have their ePayments code and a solid system that allows them to prove it was the OP that gave the go ahead BUT how can the OP (us) be expected to know.

Banks have hundreds of people in IT, anti-(their)-fraud departments which are protecting the banks whereas we just have our staff of one (us).

We all enjoy the convenience of immediate payments BUT what if we didn't have it. What if payments had a buffer, a few hours, a day. I would consider a 'delay card'.

We enjoy the convenience of cards with large credit limits but are they for us or for the bank benefit?

Banks really wont like it as they will need to open physical locations and slow the tran$action ticker$$

Oh I just realised I already have some level of protection as these days I only use a debit card which only has the funds for the upcoming purchase. I guess the scammers can see from the digits I only register Debit cards.

Or just follow the UK model and require the banks to reimburse in full. Simple.

To the OP… last year I think the Australia government passed legislation on the spam prevention framework. This requires entities to have a plan in place, to warn customers, and to potentially delay some transaction which might be suspected of fraud.

Is there anything in there that you could use?