Uncharitable card fraud

Trade

23 July 2007

Researchers at Symantec have warned credit card account holders to be on the look-out for small but unauthorised charitable donations on their statements. These could be a pre-cursor to large-scale fraud on the account.

Symantec says its researchers have identified a shift in fraudster what it calls ‘valid stolen card’ checking activity, with fraudsters ‘testing’ stolen card details for ongoing validity by making a small donation via a charitable website.

Calum Macleod, European director for Cyber-Ark, the data vaulting specialist, said the shift in cybercrime activity is especially worrying for business debit and credit card account holders, as they tend to have less control over card usage than their personal counterparts. “It’s always difficult to vet business card activity, so I would urge all company card account holders to be on the lookout for all small transactions, especially innocuous looking charitable donations, and check with the cardholder as to their validity,” he said.

 

advertisement



 

He added: “The problem with these small, but unauthorised, transactions, is that they almost always lead to larger unauthorised transactions coming through and these can be a major headache to resolve.”

Macleod warned that companies needed to be especially careful when storing and transmitting card details.

“They should use a secure and encrypted system for storing details on the company IT systems, and always use encryption on the rare occasions when it becomes necessary to transmit the card details to a third party. The Payment Card Industry DSS guidelines should be applied diligently by any organisation that accepts payment cards, regardless of whether or not they are obliged to do so,” Macleod said.

Read More:


Back to Top ↑