It is 2024, a whole 8 years later and this is happening to me. I made a request for a new card via AMEX business portal, requesting my old card be cancelled fully and replaced due to suspicious charges. I disputed the charges, they were resolved, and a new card was shipped via FedEx w/signature required. Two days later, the package was received & signed for by my brother while i was at work. I put the FedEx envelope, cardstock & 8x11" sized in my home office without opening it, telling myself that I would open it when I needed to use it being that it is a Business Card strictly for company expenses. The following day, I was alerted that there were charges made to my AMEX card from my Phone Wallet ( no update to card info in digital wallet was made, confirmed by checking card number matched my OLD card).

Imagine my surprise when a card I had not even opened the original envelope for, let alone have activated it, was being used and charged. I immediately check my office drawer for the thick FedEx envelope to make sure there were no signs of tampering, which there were none, and called the AMEX customer support to explain the situation. I expressed my concerns to the representative & while he was helpful in disputing & getting 6 charges reversed, all for either Uber / Uber Eats/ Uber One, he was unable to give me an explanation as to how this was possible altogether.

I do understand that, for instances where an AutoPay has been set up there is a possibility for the Merchant to continue to receive payments if the carrier has history of previous charges therefore so as not to disrupt service. I had 1 of the 7 charges from when I requested the 1st replacement card to when I discovered the fraudulent activity that I could confirm for a monthly service fee to our alarm system.

I only have a personal Uber/Uber Eats account & made sure the AMEX was not a saved payment method. It would have had the previous card number anyways and I would get an Invalid Payment alert if i tried to submit an order. I then confirmed that my company or anyone with authority to do so did not create or have an active Uber profile, but again being that it is a Business Platinum, I keep this card very secure and do not share it with any one other than my boss who secured the card in my name as a secondary cardholder for our account. Even then, both of our card numbers are different.

The only solution that the AMEX rep offered was to cancel the card ( which I opened while on the call + was in the FedEx envelope that contained the AMEX envelope inside of it) and send me a new one. I had to initiate the request that they block the Uber / Uber One/ Uber Eats entities from charging my account altogether.

Since then, I have received the new card and am happy to say that it is sitting in my office desk in the original envelope(s) and has not been charged in the last 2 days I have had it. This is still such a wild security risk & huge breach that I cannot understand, and I am so surprised that the person handling my phone call did not seem as concerned about the nature of the issue to begin with.