Originally Posted by
GoldCircle
What I cannot fathom is how their system allows operatives access, one way or another, to credit card numbers. If it doesn't, it means numbers are being written down for later use, perhaps on a template, so that, for example, the ticketing department does the charging, or some such procedure.
I would find this very alarming and entirely unacceptable, if it were so.
Exactly. I suspect that this is not entirely unrelated to the other system dysfunctions reported in the shenanigans thread. My guess is that the agents are unable to put the transaction through because of problems with the system and may well therefore jot down the number manually to sort out at a later stage, with the security issues that it raises.
FWIW, the transactions on my account (both the legit ones and the other ones) appear as bmi online, even though they were made via the ICC rather than online, at least as far as the legit ones are concerned. Obviously, I don't know how the unauthorised ones were done but I suspect that they were also made via the call centre rather than online. If they were done online, it would indeed be fraud by the individuals concerned, but that seems to me rather unlikely.