Anyone else have their debit card compromised (BNZ)?

Just randomly checked my bank account and had five purchases made in Auckland totaling between $450 - $500.

Travlr* Wandr
-97.50
Vodafone Online
-99.00
Hell Pizza Epsom
-76.00
Vodafone Online
-99.00
Vodafone Online
-99.00

Got this card two weeks ago. Wondering if it's linked to the recent PayPal issues.

Comments

  • +1

    You might have been skimmed? People I know have had it happen.

    • Possibly. I've been in Nelson, Wellington and Hamilton the last three days.

      • Nelson? Covid will make you forget these errant transactions.

        • Thankfully I wasn’t at any of the locations of intetest and didn’t do too much exploring.

          • @Wakrak: Does most skimmers use cards that fast? I sort of figure they normally wait, to make it hard to identify where they're skimming from although I guess there's a risk their skimming will be discovered and the cards cancelled.

            I know someone who had a problem about 3 years back. They're not sure how, but most likely may be from their visit to Malaysia, and that was quite a while before they card was compromised. Although that was a more classic compromise, IIRC someone tried to use it for a large transaction in the US.

            For this, these look to be all online so all they need are details visible on card assuming you haven't covered anything. While you do need both front and back, a strategically placed spy cam would probably work if you get lucky. I've never read of it, but I wonder if there are some low level criminals doing this nowadays, since it's probably fairly easy compared to skimming, there must be millions of spy cams on AliExpress etc.

  • +1

    Nothing on mine, then again I just transfer money into that account as I need it, so good luck to someone buying all of that with my $6.

    What were the PayPal issues?

    • Partner paid with PayPal at Chemist Warehouse but neither transaction appeared on CWs end despite the funds going out of her account.

      • Strange, what did the PayPal website show for that transaction?

        • Nothing as well she reckons. I don't know the full story so might be a detail or two I'm missing. Might just be PayPal issues for her.

          • @Wakrak: Might it just be an authorisation hold? People often get confused by these, I imagine even worse with a debit card

  • That sucks.
    Were they all done on the same day or spread out over the past two weeks?

    • Nah just today between 1-5.30PM. I was in Hamilton the whole time with the card in my wallet. Have to call bank again on Thursday once the payments clear and then give em the police report number.

  • Wonder what the Voda transactions are, possibly phones on contract for quick flips

    • Hopefully vodafone has address details

  • +1

    To be fair - you buy a lot of really important stuff online, could you have been compromised from that?
    Or have you lost your card recently & someone gave it back? They could have taken down the details before handing it back for a total dick move

    • More likely to be option 1 out of the two. But haven’t done any wild purchases of late. The Warehouse, coffee, Wellington airport, Countdown, and a few shops in Nelson. That’s it for the last 5 days.

      Bit of a bugger but at least I won’t be buying takeaways this week 😄

      Edit. Just remembered that I technically did buy takeaways this week…

  • Call BNZ they can dispute the transaction and get your money back

    • Yep. I have to wait until Thursday/Friday since it’s the weekend. Got police report sorted.

  • Sounds like wifey got phished into a lookalike site, which took her details?

    • You mean for Chemist Warehouse or your wife? CW reckons it was happening to quite a few of their customers when she called.

  • Can't be a very sophisticated operation if they're using the stolen CC details to buy takeaways, that's the kind of thing you read about meth addicts stealing CC from the post doing not skimming groups and people that create phishing sites.

  • my bnz credit card was used few months ago. they were buying stuff online and got a message of suspicious transaction while i was at work.

  • Was able to attach my new BNZ card (that hasn't arrived yet) to Apple Pay, so still able to go out into the world and buy things.

  • Gees if this can happen to you (a pretty tech saavy person IMO), it could happen to any of us… BNZ debit card is like paywave EFTPOS without a pin?

  • Yeah not your normal transactions there for a scammer.
    At least not one with any brains.
    I mean how are they gonna get pizza without a trail back to them? Either a delivery address or cctv footage if they went in for a pick-up.
    Same with the wndr travel. What the heck can you buy on there that won't require them to provide further details of who they are.

    • That's what the policewoman thought too. I took screenshots of each transaction and sent them to her. She'll get in touch with Hells Pizza, give them the time of the transaction and see what they can find out.

      • I'm reminded of this https://www.nzherald.co.nz/rotorua-daily-post/news/pizza-thi…

        Although that story is weird to me. Why are people posting credit card details on Telegram for free? Is it just trolls posting credit cards they found (story does mention dropped)? Is it confused people trying to be helpful (I found this card, anyone know the owner?) Are they sampler cards? Was the guy just lying about how he got the cards but even then how did he get them since like your case seems a bit weird someone would be able to get lots of cards somehow yet use them for pizza, even $1300 of pizza. I assume the police ruled out the credit cards just being stolen from the mail or something (and most nowadays are not activated without you logging on anyway I think).

        That said, while it's still a dumb idea, I imagine you can easily wear a mask + sunglasses if it's during the day while picking up, without anyone batting an eyelid. And I wonder if some of the collection points are out of CCTV range anyway. I mean the risk-reward is still terrible, but I wonder how likely it is someone will be caught from the pizza if they used a bit of sense.

  • Chemist warehouse stealing people's money at the moment

    https://i.stuff.co.nz/business/127632360/chemist-warehouse-o…

  • $300 sent to my account from the BNZ Fraud Team. Good start. Must be for the Vodafone transactions, maybe.

  • I got a scam txt message from "bnz" after viewing their mortgage rates. Coincidence? I dunno

    • What was the scam?

      • A text
        "BNZ: due to numerous failed card payments we are placing a hold on your account, to continue using BNZ services confirm your details here… "
        And they then included a dodgy link that was ".co-nz.com"

        I don't even have any bnz services..

        • Could be a co-incidence, but I don't really believe in them as a rule.

          If the two events are linked, then here are a couple of possibilities:

          1) You got tricked into going to that (?bnz.co-nz.com?) site to look at rates, but how would that site then get your mobile number to send you an SMS? The only way that seems likely is if you willingly gave that site, that you thought was BNZ, your number (you would know you did that), or you clicked on something on that site which installed malware to your machine, which then somehow got your number.

          2) You already have some kind of malware on your machine that saw you went to bnz.co.nz, and then sent you an SMS using your number it had previously identified.

          Neither would be good - maybe other things I have not thought of yet though?

          Alan.

          • @Alan6984: Went to bnz.co.nz then to their mortgage rates. Never entered cell number.
            What's a good malware scanner for Android? Tried avast, nothing came back. I suppose issue could be from any computer I've used or any service that needs phone number.
            Just seemed weird it was right after visiting bnz

            • @Foodie: I would also be very concerned about the 'co-incidence' if it was me.

              If you are at all concerned about your phone or any computer, I would recommend wiping it and re-installing from scratch. That also has the benefit of having it run like new again, and removing any 'cruft' that you have installed that you don't really need.

              I actually wipe my machines twice a year as a matter of course, and I am as conservative as anyone you are likely to ever meet about installing anything at all! just make sure you have a good solid verified backup (or three!) of all your data, and that you know what you want to re-install, along with all the software keys / usernames / logins / passwords etc. I have a file that I follow when I do it, so I have all that info to hand so it is really easy. I normally do it on Queen's Birthday and Labour Day weekends (long weekends), but if something is going on and I miss one, then no big deal, and there is always Xmas or Easter or whatever.

              Whilst I have never, in over 25 years had any malware on any of my machines or devices (as far as I know!), I just don't believe it trying to remove it. If I have clients that appear to have something nasty, I refuse try to remove it for them - I believe it is a waste of my time and their money - I recommend we just wipe and reinstall. Its probably quicker (and therefore cheaper) too. If they aren't willing and want to try to remove it then they can do it themself, or pay someone else to do it in which case they are gone as a client - life is too short to deal with stupid people.

              Alan.

              • @Alan6984: Appreciate the advice.
                A complete new system is on the cards so will wipe hdds and start fresh.

              • @Alan6984: Good idea. Just did a full reset as a result of this comment. Thought, oh well, might as well change the paste on the CPU and clean out the fans too. Going to take out my 1060 6GB and sell it on trademe. Onboard graphics good enough for me.

                • @Wakrak: LOL - Not sure I'd go so far as to change components, but then I never need anything but on-board graphics for my own machines. On the other hand, my fans almost always need a clean too!

                  If I play any games, then it is on the PS4 (at least until we can find a PS5)

                  I don't follow the ups and downs of graphics cards, but I have hear recently that people are selling 'old' graphics cards for more than they paid for them, so you might be in for a pleasant surprise :-)

                  • @Alan6984: Yeah the GPU market has been hot for a while. Not the greatest of cards (1060) since the temps have been playing up, but I'll definitely get a few dollars for it. And ehhh my computer was looking a bit dusty anyway + finally got to test out the Arctic Cooling MX-4 Thermal Paste that has been sitting in my parts bag for a while, + switch out the old HDD for the MX500 that has been sitting on my shelf for months.

  • Not BNZ, but I just audited my SBS Bank account which I deposit $5/week from my ASB account and realised it had been compromised with 3 $8.99 Apple Music Subscription charges since December. I have Apple Music subscription but only with ASB card and only get charged $7.50/month. Apple were nice to refund the 3 $8.99 charge. Phew.

    I do not ever use this SBS Mastercard at all and is hidden away in the middle pocket of my wallet so unsure how someone could've accessed this

    • If it's a debit or credit card and you've never used it online then it would probably be RFID skimming.

      • Cant be, as i have my ASB Visa and ANZ Visa card on the outside and this SBS Mastercard is literally buried in the middle of another 5 cards

      • Only places I'ved used it has been mightyape (once), dominos (once) and lotto.co.nz (once) since I've had this card since 2020 - all purchases were made online. Compromised December 2021. No other transactions. My ASB and ANZ card have not been compromised so couldn't have been rfid

      • I audit my ASB and ANZ Visa statements once a month (as the majority of my money are in these cards and this is where I do the most spending) and no suspicious transactions have ever occurred since the SBS Mastercard was compromised. So I find it really weird

        • Any chance it could be kids or a SO or even a former SO? Also did you do any online transactions with the other cards?

    • Is this a debit or credit card? Did you to lodge a police report or did Apple just refund?

  • +1

    Might have been this by the looks of it:

    https://www.stuff.co.nz/business/money/127703280/bnz-custome…

    • Yup looks like it.

  • Got all of my money back and then some. $500 + $300.
    A miscommunication between the BNZ fraud team and BNZ credit team. Gave em a call to shine light on their generosity.

    • Very decent of them… and you :-)

    • You'll be pleased to have it sorted after nearly a month.
      Nice of them to give you bonus credit - even if it wasn't intentional!

    • So did they catch the perps that used your card details?

      • Be interesting if they told you - in my limited experience (only happened to me once), I never heard anything other than getting the refunds and a new card.

      • +3

        No information on the Hells pizza lovers. Wonder if they got themselves some free adult toys.

        • Brings new meaning to the phrase 'bite the bullet'!

  • +1

    Westpac card frozen after a ~$300 spend at Caltex Abbotts Way today. Haven't been phished ever so I'm not sure what it could be.

    Hoping Westpac customer service will be as good as BNZ.

    Edit: 20 working days for investigation and I have to call 105 myself to get a case number and give it to Westpac. Not a complaint but rather sharing my experience.

    • +1

      Same with me - I could only guess at the time (around 2015 IIRC) that my card details were leaked from some website I had purchased from.

      ASB called me to ask if I had been in the US and bought some trainers (I had not), so they just blocked / reversed the charges and issued me with a new card. I didn't have to do anything else.

      Alan.

Login or Join to leave a comment