Page 2 of 14

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 03, 2012 9:16 pm
by shesmovedon
Who really knows. I use Paypal as well. The closest AMEX charge against me from BBTS before the Experian fraudulent charge was on December 27.

It's so hard to figure out the source of these when we're using our cards all over the place. It might not even be any one merchant. It could just be their credit card processors.

We should figure out a way to crowd source this information. We could enter dates of TF charges and dates of fraudulent charges and see if there is any meaningful correlation. Maybe I'll see if I can get a Google form put together.....

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 03, 2012 10:19 pm
by Cyberseven
I did some research, and hope this helps someone. Shemovedon, this may help you more since you had the same fraud charge as me.
I am copying some links that shed a little light on this Experian credit report membership scam.

http://complaintwire.org/Complaint.aspx ... jLzxVbhA/5

http://creditreport.pissedconsumer.com/ ... rvice.html


Based on what I found I agree that this may not be BBTS, but just another payment processing system hack, and a company set up to make money on this.

Isn't online shopping fun?? :BANG_HEAD:

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 03, 2012 11:29 pm
by shesmovedon
That's pretty lame. I am very certain I did not accidentally sign up for such a service. I don't understand how these "businesses" stay around for very long. Still, I'm happy to have the option of online shopping. What would we do with the internet to feed our TF cravings? :lol:

Moral of this story, the best way to pay for things online is with a CREDIT CARD. If you use your Bank Card/Debit Card, you have far more hoops to jump through to get your money back. Also, as long as the charge is in dispute, if you can even dispute it, the cash is as good as gone from your bank account. Credit cards at least put a hold on the payment for that transaction so you do have to worry about it during the investigation. I know of too many people that get burned using debit cards. Also, any recurring payment scams that get tacked on will last for MONTHS on a debit card.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Sat Feb 04, 2012 5:45 am
by fenrir72
So Experian is the culprit?

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Sat Feb 04, 2012 10:11 pm
by Slick_Prime
necr0blivion wrote:
Kamidake wrote:I just got hit with a charge for $3.50. Glad I caught it early, but now I have to cancel all my orders this month at BBTS till I get a new card.


You don't have to cancel your preorders. The items will come in and you will get an e-mail from them showing that they were unable to process your card for payment; you will then be given time to find another source of payment. Send a reply stating your situation and an approximate time you expect to receive your new card.

This happened to me last year, and they were very understanding and provided ample time for me to provide another payment source.


Thanks for the advice. I'll do that.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Wed Feb 08, 2012 12:55 pm
by Seibertron
An FYI to all of you, you should call up your bank via the phone number on the back of your card, explained what happened, and have them cancel your card and send you a new card with a new number. I probably do this annually with my 2 debit and 2 credit cards, usually prompted after a situation like this. Once they've sent you a new card with a new number, no fraudulent charges can go through. It's being proactive rather than reactive after your account has been compromised. It's extremely easy to do and the bank will NOT charge for this. Yes, it's a little bit of a pain to go through and update your credit cards with places where you have automatic payments or pre-orders such as BBTS, but it sure as hell beats fraudulent charges coming through and trying to get your money back.

Just got off the phone with my bank and canceled two of my cards, I'll cancel the other two next week once the new cards arrive so that I'm not left without a debit or credit card.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Wed Feb 08, 2012 1:09 pm
by shesmovedon
That's a pretty good idea. A lot easier to update some accounts with new CC information than to be disputing charges.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Wed Feb 08, 2012 1:12 pm
by Seibertron
shesmovedon wrote:That's a pretty good idea. A lot easier to update some accounts with new CC information than to be disputing charges.


I think because I regularly do this, I have never once been hit with a fraudulent charge in the 15 or 16 years since I've been using debit/credit cards online. I've got my fingers crossed, but this method seems to work fairly well.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Wed Feb 08, 2012 3:29 pm
by GuyIncognito
If PayPal was hacked, this would be a national headline, not a rumor on a Transformers website. I doubt it's a PayPal issue.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Wed Feb 08, 2012 3:59 pm
by Seibertron
GuyIncognito wrote:If PayPal was hacked, this would be a national headline, not a rumor on a Transformers website. I doubt it's a PayPal issue.


It's not Paypal.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 7:19 am
by Stockade
My 3 cards was using Paypal to buy Transformers stuff online last year and luckily i get a fraud activity text straight to my phone if any type of unauthorized activity was being done. But the weird thing is, all purchase was done in California and for high end PC stuff and I-tunes as well. Anyway, all 3 accounts was shut down and now im very leary of buying online again.


Has this been confirmed if buying from BBTS and/or TFsource when the activity is done?

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 7:33 am
by bvzxa
The problem is many online retailers have to use CC processing services and you get what you (the company) pay for. Which ever CC processing company they use needs to have secure data secured. Even some of the pron sites are using tougher standards that the companies you buy transformers from.

In essence an attack form a hacker will try to break in to the weakest of credit card companies. I have a degree in Network Security and Management, and many online retailers pay big costs for better security. With BBTS, you have Paypal as an option, I use that. TFSource I haven't used since my card was hacked. I wasn't a member of the TFCC last year at all, but I am this year. When I heard they were updating there CC processing I believe they were probably switching to a company that was more secure.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 9:44 am
by Seibertron
bvzxa wrote:The problem is many online retailers have to use CC processing services and you get what you (the company) pay for. Which ever CC processing company they use needs to have secure data secured. Even some of the pron sites are using tougher standards that the companies you buy transformers from.

In essence an attack form a hacker will try to break in to the weakest of credit card companies. I have a degree in Network Security and Management, and many online retailers pay big costs for better security. With BBTS, you have Paypal as an option, I use that. TFSource I haven't used since my card was hacked. I wasn't a member of the TFCC last year at all, but I am this year. When I heard they were updating there CC processing I believe they were probably switching to a company that was more secure.


One of Seibertron.com's staff members got hit after this switch.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 12:22 pm
by Skalor
Just wanted to add my story to this ongoing problem. I just got off the phone with my bank, and TFCC, after finding a charge this morning which I didn't make. ($100 to BLIZZARD ENT*ONL STORE 800-592-5499). After speaking with my bank (Chase) first, the fraud department recognized this company as a regularly reported charge, which is evidently a feeler charge to make sure the card number works, then the card is used for further transactions. I quickly cancelled this card and the charge is to be refunded.

I then called FunPub, after reading about all of the problems people on this and other fansites were having for the last several days. I was told by FunPub that I was only the fourth caller to complain/inquire about fraudulent charges (which I thought was strange given the number of issues I've read about). From what I can gather, they're still trying to compile information on what happened before going forward, but what they did ask is that I email them the information on the fraudulent transactions, as well as info on when I placed the orders. I ordered Over-Run AFTER the reestablishment of the CC system, and only yesterday renewed my membership, both with the same card.

I have not had any issues with my cards or bank in 15+ years, and I can put two and two together. I have made no other Transformer related purchases in quite some time (i.e. BBTS, TFSource, etc.) Please make sure that if you have issues, and have made recent purchases to FunPub, that you contact them immediately and share your information. Of course, you will still have to contact respective banks/cc companies to rectify any fraudulent charges, but we can also help FunPub find out what happened, and hopefully prevent future problems.

Skalor

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 4:25 pm
by El Duque
Fun Publications has issued the following statement regarding recent suspicious activity on TFCC member's credit cards. Please read their statement below.



Image



We have been receiving feedback that there has been a higher than
usual number of fraud complaints posted on online Transformers
forums.

While we have nothing to suggest that there was an issue with the TCC
and Fun Publications, we look into every concern that is sent to us. All
of your transactions are in a secure socket with the strongest encryption
available to any site on the web. If you have a specific concern about
any transaction with us, please use the “contact us” link located at the
bottom of the TCC page and provide us with as much information as
possible including:

1. The EXACT name of merchant as it is written on your statement.
2. Amount and date of suspect charge.
3. Bank your card is drawn on and if it is a debit or credit card.
4. Device and browser (and version) you used for your last payment
with us before you saw a fraudulent charge (ie, android phone,
computer, iphone, browser and version).
6. Were you on a public computer?
7. Were you on a public wi‐fi network?
8. If you were at home or work, what Internet provider did you use?
9. On your last transaction with us, did you receive any kind of error
message (card declined, 404 error, programming type error)? If you did
receive an error, how many times did you resubmit your information?

It is very difficult to track credit card fraud. With your help, we can see
if there are any parallels between those reporting an issue.

In order to better protect yourself, here are some guidelines:

Never log into a secure site from a public computer, public wi‐fi, or
through android/windows phones. Only use your mobile device on a
mobile app for transactions, never a browser. Turn off your bluetooth
and wi‐fi to prevent people from hacking your credit card information
from your phone/computer.

If you have a card that has an rfid chip, make sure your card is shielded
when not in use.

Always make sure you are using a secure socket (https://) for any login
that requires a password or a monetary transaction.

Never email your credit card information to anyone.

As should be common practice, on a regular basis, be sure to check your
statements and make note of any suspicious activity on your card. If you
see an unauthorized charge, turn it in to your bank or card company, the
charge will be reversed, they will issue a new card for you and the
security system in place will have done its job.

Please also take the time to read the attached article and research credit
card security. We are very aware that security concerns have risen
exponentially in the last couple years and we are doing our part to stay
ahead of the curve.

Can Hackers Destroy The Internet? - Forbes



Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 4:47 pm
by craggy
whilst it's nice to see them making an effort now, those questions :BANG_HEAD:

if you're the sort of person who puts in your credit card or bank details on a public, unsecured wireless network you're probably also the sort of person who doesn't realise that you're on a public unsecured wireless network in the first place.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 4:57 pm
by UltraPrimal
No. Sorry, FunPub. You are NOT Michael Bay. You can't get away with saying, "Oh it wasn't our fault. It was yours. You must have screwed up somewhere. It certainly wasn't us." Bullshit. It can't be a coincidence that so many people have been reporting credit card fraud after using their store. Especially considering they pulled in a different credit card processing service at the last minute because they saw that their usual one couldn't handle the load. Did they even research this other company? Probably not. They probably were like, "Oh ****! Our site's crashing! How are we going to get our money for these poopy toys? Quick! To Google! ... OK, folks. We're all good now. We've got this new credit card processing company. Apparently it's owned by a Nigerian prince. And you can always trust royalty right? Now let's flip the switch and watch our money roll in! Money, money, money!"

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 6:56 pm
by chuckdawg1999
I never knew not to use a mobile browser to make purchases, but I've never done that and I won't now. But it's worth a mention that FunPubs practices often lead people to use mobile browsers since it's the only browser they have access to, to register for the convention or pre-order exclusives.

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 7:59 pm
by Cyber Bishop
They replied on FB after they pulled the other page down..

Customers with concerns over Credit/Debit card information theft can report their concerns to the TCC at 800-772-6673 or
817-448-9863. You and can also email us at admin2@funpubinc.com .

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 9:20 pm
by Vicalliose
UltraPrimal wrote:No. Sorry, FunPub. You are NOT Michael Bay. You can't get away with saying, "Oh it wasn't our fault. It was yours. You must have screwed up somewhere. It certainly wasn't us." Bullshit. It can't be a coincidence that so many people have been reporting credit card fraud after using their store. Especially considering they pulled in a different credit card processing service at the last minute because they saw that their usual one couldn't handle the load. Did they even research this other company? Probably not. They probably were like, "Oh ****! Our site's crashing! How are we going to get our money for these poopy toys? Quick! To Google! ... OK, folks. We're all good now. We've got this new credit card processing company. Apparently it's owned by a Nigerian prince. And you can always trust royalty right? Now let's flip the switch and watch our money roll in! Money, money, money!"

Actually it's the other way around from what I've gathered. The company which they switched away from was responsible for information being compromised. The company they are now using was suggested by site owner Seibertron, to the best of my knowledge.

Of course, I could be wrong. Was anybody hacked within a 24 hour period of the pre-orders going back up?

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 11:21 pm
by Seibertron
Vicalliose wrote:
UltraPrimal wrote:No. Sorry, FunPub. You are NOT Michael Bay. You can't get away with saying, "Oh it wasn't our fault. It was yours. You must have screwed up somewhere. It certainly wasn't us." Bullshit. It can't be a coincidence that so many people have been reporting credit card fraud after using their store. Especially considering they pulled in a different credit card processing service at the last minute because they saw that their usual one couldn't handle the load. Did they even research this other company? Probably not. They probably were like, "Oh ****! Our site's crashing! How are we going to get our money for these poopy toys? Quick! To Google! ... OK, folks. We're all good now. We've got this new credit card processing company. Apparently it's owned by a Nigerian prince. And you can always trust royalty right? Now let's flip the switch and watch our money roll in! Money, money, money!"

Actually it's the other way around from what I've gathered. The company which they switched away from was responsible for information being compromised. The company they are now using was suggested by site owner Seibertron, to the best of my knowledge.

Of course, I could be wrong. Was anybody hacked within a 24 hour period of the pre-orders going back up?


Yes, some of Seibertron.com's staff members had accounts with fraudulent charges AFTER they placed an order on the new system.

If they went with Authorize.net, that's great. But that doesn't mean their site is secure. They have different plans and programs, they're just the credit card processor ... Authorize.net most likely didn't perform a security test of their website (which would most likely entail some kind of a service fee). The club store, or any e-commerce website that you use, could be storing credit card information locally in their database instead of passing it along to a company like Authorize.net who in turn provides you with a transaction ID or an approval number/message of some sort (I'd have to look at my code from some e-commerce sites from a few years ago) which you use locally on the website end to know that the card is valid and that the payment can go through. The only information that should be stored locally pertaining to a customer order is the shipping information, the billing address is fine, no CC card, no expiration date, no CID, and obviously information relevant to the customers cart/purchase/order/subscription.

We determined that Authorize.net's AIM API method was the best and most secure as it meant that we stored none of the credit card information locally. You can find out more information about how Authorize.net operates by reading about their different API's in the developer section of their website at http://developer.authorize.net/api/. You can see a discussion about the different payment processing methods at http://community.developer.authorize.net/t5/Integration-and-Testing/Which-method-to-use-AIM-SIM-CIM-DPM/m-p/16638#M9371.

Authorize.net's AIM API also required sites to be PCI (Payment Card Industry Data Security Standard) compliant, which was something that I liked. One of the steps in order to be PCI compliant is no credit card information can be stored in the local database. This is to protect customers. I do not know one way or another if TCC stores credit card information in their order database. It is not up for them to disclose this information either (they shouldn't), but hopefully if they're not and if someone is reading this message they will take the steps necessary to correct that huge oversight.

More information about PCI compliance can be found at the links below:

https://www.pcisecuritystandards.org/merchants/index.php
http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Thu Feb 09, 2012 11:47 pm
by Seibertron
Here's an error message I'm currently receiving on transformersclub.com's store. On the day I placed my order, I had the secure padlock to the left of the URL. Did some of you not have the secure padlock? I wonder what is prompting the warning message in Chrome? Hopefully the warning message in Chrome is an overstatement and is not related to all of these other supposed issues.

Image

Image

According to Google Support at https://support.google.com/chrome/bin/answer.py?hl=en&answer=95617

Google Support wrote:Image Your connection to the site

Google Chrome lets you know whether your connection is fully encrypted. If your connection is insecure, third parties might be able to view or tamper with the information you provide on the site.

Your connection to the site is encrypted, but Google Chrome has detected mixed scripting on the page. Be careful if you’re entering personal information on this page. Mixed scripting can provide a loophole for someone to take over the page. This content could be third-party scripts or videos embedded on the page.

If you’re connected to the Internet via a public wireless network, mixed scripting is especially risky because wireless networks are easier to tamper with than wired networks.


And here's the same basic error message in Firefox, but way less dramatic than how Chrome states it.

Image

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 10, 2012 3:54 am
by gavinfuzzy
Image


That is all i can say.
Seriously, for the kind of money these guys make, it seems like the site is runned by a team of 5 13-year-olds. Seems to be only 1 customer service agent responding to my questions, and even then it takes over a week to get their response. The site has insanely bad UI and design, and often has coding bugs. This is very disturbing, especially when we are trusting the site with our credit card information. Hasbro better do something about the TFCC division, its ruining the TF name.


Remember the infamous "We would pass on your comments to our marketing team?" Here's a new one from the TFCC Facebook : "I have passed all your suggestions on to the appropriate persons. That's all "I" can do." #-o

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 10, 2012 3:59 am
by chuckdawg1999
What kills me is that for all the valid; well thought out and researched complaints, comments, and suggestions, no one will say a peep at Bot-Con

Re: TF Community Warning: Check your Credit and Debit Card accounts for recent fraudulent activity

PostPosted: Fri Feb 10, 2012 4:03 am
by gavinfuzzy
chuckdawg1999 wrote:What kills me is that for all the valid; well thought out and researched complaints, comments, and suggestions, no one will say a peep at Bot-Con


I guess people are all having such a great time, all of a sudden, they don't blame funpub anymore. Then botcon ends, and people reflect on the amount they spent at botcon, then Funpub's being flammed again. :lol: