Warning about Credit Card Fraud

Old Jun 11, 15, 2:45 pm
  #1  
NPF
Original Poster
 
Join Date: Oct 2010
Location: Rio de Janeiro
Programs: AA / AV
Posts: 623
Warning about Credit Card Fraud

A word about credit card fraud:

I redeemed some miles at Avianca for a ticket this week, all through the website. Gave my cc data to pay for the taxes associated with that ticket. All went well, no glitches in the website.

The following day, someone called saying that that charge was eventually declined and that I needed to provide my cc data again.

They had my full name, itinerary and address as in file for Avianca.

Due to the information they already had, I gave them the information they asked for (which was the same I used in Avianca's site).

Well, it was a fraud attempt . . . They tried a much higher charge, which fortunately my cc rejected and subsequently alerted me.

Could be just another story of cc theft except that there is someone working for Avianca that is fueling the scammers the data of their clients. Beware.
NPF is offline  
Old Jun 12, 15, 12:31 pm
  #2  
 
Join Date: Jul 2008
Location: YVR
Programs: OZ Diamond, Jiffypark Manhattan Gold
Posts: 4,132
You sure it wasn't just Avianca making a mistake on the charge?
drvannostren is online now  
Old Jun 12, 15, 1:10 pm
  #3  
A FlyerTalk Posting Legend
 
Join Date: Aug 2010
Location: DCA
Programs: UA US CO AA DL FL
Posts: 45,244
Anytime you receive a call asking for any PII, no matter how much the caller knows, just say that you are busy and call back the published # for the vendor.

It's also more than possible that there is a security flaw somewhere on OP's side of the equation, having nothing to do with AZ.
Often1 is offline  
Old Jun 12, 15, 5:22 pm
  #4  
NPF
Original Poster
 
Join Date: Oct 2010
Location: Rio de Janeiro
Programs: AA / AV
Posts: 623
You're right to be skeptical, giving the frequency of half-baked stories published here, but in this particular case, I'm positively sure that:

1. This was not a mistake by Avianca. The fraudsters attempted (unsuccessfully) a charge of several thousand dollars after a successful charge of one dollar to validate the cc. In both cases the merchant was not Avianca.

2. I checked and my reservation and e-ticket were valid all the time while this was happening

3. I don't want to be presumptuous (besides, no one can be 100% sure with regard to computer malware) but I was, for several years, an IT professional and my computers are very secure - as secure as a computer can be.

Often1, you're right, of course, about the procedure you suggested. I was caught off-guard, and my reaction was naive. Living in Rio de Janeiro, I have had others scams attempted by phone which I recognized as what they were, but not this one But my naiveté in this case is not the point here: I have posted this incident to alert fellow FTers that there is someone, probably a rogue employee, with access to our data, and the intention to use it for personal fraudulent gain.

I hope that this does not happens with no one else; I'm just saying "stay alert" (which, again, in this case, I was not)
NPF is offline  
Old Feb 12, 20, 8:27 pm
  #5  
Hyatt 10+ BadgeFour Seasons 5+ Badge
 
Join Date: Aug 2009
Location: SYD
Programs: QF WP (OWE), VA PLAT, EY GLD, SPG PLAT, Hyatt DIA, Hilton DIA, Hertz PC
Posts: 6,811
Sorry to bump an old thread but last night I received a call from +1 305 447 2819 listed as Miami, FL.

They called and said the flights we had booked with TG using LM was going to be cancelled and offered a refund. He knew our names, flights, routes and date. I asked for alternative flights and he said "We can't change flights, we can only arrange a refund."

I know my rights and generally airlines offer an alternate flight or a refund. I declined and we wound up the call.

I called LM who said they have no record of any notification from TG or any record of a call and the number was unknown to them. I also called TG who said the flight was still scheduled.

So I now conclude it was a failed phishing attempt. Perhaps if I agreed to a refund he would have asked for my cc details, which I would have questioned because all my past calls have the pax enter their cc details using their keypad.

Last edited by m0hamed; Feb 12, 20 at 8:40 pm
m0hamed is offline  
Old Feb 13, 20, 11:50 am
  #6  
A FlyerTalk Posting Legend
 
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 89,773
Originally Posted by m0hamed View Post
Sorry to bump an old thread but last night I received a call from +1 305 447 2819 listed as Miami, FL.

They called and said the flights we had booked with TG using LM was going to be cancelled and offered a refund. He knew our names, flights, routes and date. I asked for alternative flights and he said "We can't change flights, we can only arrange a refund."

I know my rights and generally airlines offer an alternate flight or a refund. I declined and we wound up the call.

I called LM who said they have no record of any notification from TG or any record of a call and the number was unknown to them. I also called TG who said the flight was still scheduled.

So I now conclude it was a failed phishing attempt. Perhaps if I agreed to a refund he would have asked for my cc details, which I would have questioned because all my past calls have the pax enter their cc details using their keypad.
Make sure your airline record is loaded with ticket numbers, Having a confirmed flight booking using Lifemiles won’t do you any good if you show up at the airport and discover too late that there is no ticket number associated with the booked flights.
GUWonder is offline  
Old Feb 13, 20, 2:41 pm
  #7  
Four Seasons 5+ BadgeHyatt 10+ Badge
 
Join Date: Aug 2009
Location: SYD
Programs: QF WP (OWE), VA PLAT, EY GLD, SPG PLAT, Hyatt DIA, Hilton DIA, Hertz PC
Posts: 6,811
Originally Posted by GUWonder View Post
Make sure your airline record is loaded with ticket numbers, Having a confirmed flight booking using Lifemiles won’t do you any good if you show up at the airport and discover too late that there is no ticket number associated with the booked flights.
Yes, friends warned me of this. It didn't ticket after 48 hours so I called they did it immediately.
m0hamed is offline  
Old Feb 13, 20, 3:40 pm
  #8  
 
Join Date: Oct 2010
Location: USA
Programs: DL PM - IC RA - HHonors Gold - Hertz Gold - AA - US - CO - Choice Privileges
Posts: 1,264
With PNR / ticket number and last name the noted information is available via the alliance public airline booking management systems. Flights booked with BA for AA flights can be managed with the RJ booking management system, as an example. Providing personal information to an unsolicited contact is not good practice.
view-with-a-room is offline  
Old Feb 13, 20, 3:59 pm
  #9  
Four Seasons 5+ BadgeHyatt 10+ Badge
 
Join Date: Aug 2009
Location: SYD
Programs: QF WP (OWE), VA PLAT, EY GLD, SPG PLAT, Hyatt DIA, Hilton DIA, Hertz PC
Posts: 6,811
Originally Posted by view-with-a-room View Post
With PNR / ticket number and last name the noted information is available via the alliance public airline booking management systems. Flights booked with BA for AA flights can be managed with the RJ booking management system, as an example. Providing personal information to an unsolicited contact is not good practice.
I am aware of this, and as I said, I literally offered no information.

The caller had the PNR and names so had access to the info.

I assume leaked by a LM employee for phishing purposes.
m0hamed is offline  
Old Feb 14, 20, 3:46 am
  #10  
A FlyerTalk Posting Legend
 
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 89,773
Originally Posted by view-with-a-room View Post
With PNR / ticket number and last name the noted information is available via the alliance public airline booking management systems. Flights booked with BA for AA flights can be managed with the RJ booking management system, as an example. Providing personal information to an unsolicited contact is not good practice.
And airline ticket issuers can routinely refund tickets for cancelled flights without being given the bank card details again.
GUWonder is offline  

Thread Tools
Search this Thread
Search Engine: